Last updated: January 2026
At Funcovecanvs, we treat your privacy with the same care we put into curating Poland's most luxurious hospitality experiences. This Privacy Policy explains in detail how we collect, use, store, share and protect your personal information when you visit funcovecanvs.com or engage with our concierge, booking and travel-curation services. Please read it carefully — by using our site or services, you agree to the practices described below.
We collect information that you voluntarily provide to us through inquiry forms, booking requests, email correspondence, phone calls and other direct interactions. This typically includes:
• Identification details: full name, date of birth (when required by partner properties), nationality and passport or government ID details for international reservations.
• Contact details: email address, phone number, postal address and preferred communication channel.
• Travel preferences: destination interests, room type, accessibility needs, dietary requirements, spa and wellness preferences, dining preferences, special occasions and any companion details you share with us.
• Payment information: processed exclusively through secure third-party payment processors — we do not store full card details on our servers.
• Technical data: IP address, browser type, device type, operating system, referring URL, pages visited, time spent on pages and other analytics data automatically collected via cookies and similar technologies.
Your information is used strictly to deliver and improve the experiences you request. Specifically, we use your data to:
• Process inquiries, confirm reservations and coordinate with partner resorts, spas, restaurants and transport providers.
• Personalize your itinerary and provide tailored recommendations based on your stated preferences.
• Deliver 24/7 concierge support before, during and after your stay.
• Send transactional communications (booking confirmations, check-in details, itinerary updates) and — only with your explicit consent — occasional marketing about seasonal drops and VIP experiences.
• Analyze site usage to improve performance, design and content quality.
• Comply with legal obligations under Polish and EU law.
Under the EU General Data Protection Regulation (GDPR), we process your personal data on one or more of the following legal bases: (a) your explicit consent; (b) the necessity to perform a contract or take pre-contractual steps at your request; (c) compliance with a legal obligation; (d) protection of vital interests; or (e) our legitimate interests in running, improving and securing our services, where those interests are not overridden by your rights.
We share your information only when necessary and only with carefully vetted partners. Recipients may include:
• Partner resorts, hotels, spas, restaurants, yacht operators, chauffeur companies and helicopter services who must receive minimum required data to fulfill your booking.
• Trusted technology service providers (cloud hosting, email infrastructure, analytics, CRM and payment processors) bound by strict confidentiality and GDPR-compliant data processing agreements.
• Government authorities, regulators or law enforcement when legally required.
• Professional advisors (lawyers, auditors, insurers) where reasonably necessary.
We do not sell, rent or trade your personal information to third parties for marketing purposes. Ever.
Funcovecanvs is based in Poland and primarily processes data within the European Economic Area (EEA). When we transfer data outside the EEA — for example to partner properties or technology providers — we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or transfers to countries with adequacy decisions.
Our site uses cookies and similar technologies to enhance your experience, analyze traffic and personalize content. For full details, see our dedicated Cookies Policy.
We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations (such as tax and accounting requirements, generally 5–7 years under Polish law), resolve disputes and enforce our agreements. Marketing preferences are retained until you withdraw consent. Inquiry data not converted to a booking is typically deleted within 24 months.
We implement industry-standard technical and organizational safeguards including TLS/SSL encryption for data in transit, encrypted storage for sensitive records, restricted access controls, regular security audits, staff training and incident response protocols. Despite these measures, no system is 100% secure, and we cannot guarantee absolute security of transmitted data.
Under GDPR, you have the right to:
• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data ("right to be forgotten") in certain circumstances.
• Restrict processing of your data.
• Object to processing based on legitimate interests or direct marketing.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with the Polish Data Protection Authority (Urząd Ochrony Danych Osobowych — UODO) or your local supervisory authority.
To exercise any of these rights, contact us via the contact page. We respond to verified requests within 30 days.
Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from children under 16. If you believe a minor has provided us with data, please contact us so we can delete it.
Our site may contain links to third-party websites (partner hotels, social platforms, embedded maps). We are not responsible for their privacy practices and encourage you to review their policies independently.
We may update this Privacy Policy periodically to reflect changes in law, technology or our practices. Significant changes will be communicated via email (where appropriate) or a prominent notice on this page. The "Last updated" date at the top reflects the most recent revision.
For any privacy-related questions, concerns or requests, please reach out via our contact page. Our Data Protection contact will respond promptly and confidentially.