Privacy policy
Last updated: 25 September 2026
This page explains what personal data we process when you visit natacy.events or get in touch with us, why we do it and what your rights are.
Data controller
The controller of your personal data is Alicja Semrał, ul. Cisowa 3, 43-360 Bystra, Poland, tax ID (NIP) 6772509468. For anything to do with your personal data, call +48 608 104 379 or +48 794 526 348.
Contacting us
When you call or message us on WhatsApp, we process the data you give us: your name, phone number and the content of your message, such as the date, venue and number of guests.
- Purpose and legal basis: answering your enquiry and preparing a quote, and if you book, providing the service (Art. 6(1)(b) GDPR) and issuing accounting documents (Art. 6(1)(c) GDPR).
- How long: for as long as it takes to handle your enquiry. If we sign a contract, for its duration, then for the limitation period for claims and the period required by tax law for keeping records.
Giving us your data is voluntary, but without it we can’t reply to your enquiry.
Google Analytics — only with your consent
If you click “Accept” in the banner, we use Google Analytics 4 to see how many people visit the site, how they find us and which parts of the offer interest them. Until you consent, the Google Analytics script isn’t loaded at all and the site makes no requests to Google.
- What data: pages visited and time on site, where the visit came from (e.g. a search engine or Instagram), device type, browser and operating system, approximate location (country, city) and a random identifier stored in a cookie. Google Analytics 4 does not log or store IP addresses. We only see aggregate statistics and don’t know who you are.
- Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with “Cookie settings” in the page footer. Withdrawing consent doesn’t affect the lawfulness of processing before the withdrawal.
- Who processes it: Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) on our behalf. Data may be transferred to Google LLC in the USA, which participates in the EU-U.S. Data Privacy Framework; the European Commission has found that it ensures an adequate level of protection.
- How long: Google Analytics keeps detailed visit data for 2 months, after which only aggregate reports remain. The cookies expire after 2 years, or sooner if you withdraw consent or clear your browser data.
More on how Google uses data: policies.google.com/technologies/partner-sites.
Cookies and browser storage
Without your consent, the site sets no cookies at all. Fonts, images and videos are served from our own server, without third-party services.
| Name | Purpose | Expiry |
|---|---|---|
| _ga | Google Analytics: tells visitors apart. Only with consent. | 2 years |
| _ga_<ID> | Google Analytics: keeps session state. Only with consent. | 2 years |
| natacy-consent | Remembers your choice in the banner. It’s an entry in browser storage (localStorage), not a cookie, and is never sent anywhere. | 12 months |
Server logs
Like any web server, our hosting provider’s server automatically records technical data about each request: IP address, date and time, the page requested and browser type. This is needed to deliver the site and protect it from abuse (Art. 6(1)(f) GDPR, our legitimate interest). We don’t combine it with other data and keep it only for a short time.
Who receives your data
Only companies that provide services to us: website hosting, accounting and, with your consent, Google Analytics. If you message us on WhatsApp, the message goes through WhatsApp (Meta) servers under that service’s terms. Some providers process data outside the European Economic Area, mainly in the USA, on the basis of a European Commission adequacy decision (EU-U.S. Data Privacy Framework) or standard contractual clauses.
We don’t sell data, don’t use it for advertising and don’t make automated decisions based on it, including profiling.
Your rights
You have the right to:
- access your data and get a copy of it,
- have it corrected,
- have it erased,
- restrict its processing,
- data portability,
- object to processing based on our legitimate interest,
- withdraw consent at any time.
To exercise them, call +48 608 104 379 or +48 794 526 348. You can also lodge a complaint with the Polish data protection authority, the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl), or with the authority in your own EU country.
Links to other services
The site links to Instagram and WhatsApp. We don’t embed their content, so these services don’t collect data on our site. Once you follow a link, their own privacy policies apply.
Changes
If we change how we process data, we’ll update this page and the date at the top.