Personal data
Privacy policy
Effective from 17 September 2026
This site is a café's calling card, not a shop. We have no forms, we do not create accounts and we sell nothing online. Even so, below we describe exactly what happens to the data of the people who visit us.
This is the only place where we list the tools running on the site, together with what each of them collects. The consent window asks briefly, because the list of tools changes over time. When something is added or removed, we update this document and change the date at the top.
Who is responsible for the data
The controller is MØKA Weronika Paluch, Plac Piastowski 21, 58-560 Jelenia Góra, Poland, tax number (NIP) 6112852869, business number (REGON) 545207667.
For matters concerning data, write to us at kontakt@mokacieplice.pl. We have not appointed a data protection officer, because the scale of processing does not require one.
What happens when you visit the site
Without your consent only what is needed to display the page is active: the server records the visit in its logs, and the browser downloads the typefaces and checks the weather so that the illustration of the venue matches what is happening outside. Visit statistics start only once you agree in the cookie window.
Server logs
The server records the IP address, the date and time of the visit, the address visited, the browser and system type, and the address of the page you came from. We do this so the site works and so we can spot failures and abuse. The basis is our legitimate interest, that is Article 6(1)(f) GDPR. The logs are kept for us by the hosting company dhosting.pl and deleted in line with the rules of its service.
Visit statistics, meaning Google Analytics
If you give consent, we use Google Analytics 4 (measurement ID G-H0FVH2RK30), launched through Google Tag Manager. We want to know how many guests visit the site, which sources they arrive from, which devices they use and what they click: the directions map, the e-mail address, the way through to the menu, the jump to our social media profiles. We also collect approximate location at city level, derived from the IP address.
We only ever look at the statistics in aggregate. We do not link them to a name or an e-mail address and we do not try to establish anyone's identity from them. We carry out no profiling that would have legal effects. Data in Google Analytics is kept for 14 months, after which Google deletes it.
The basis is your consent, that is Article 6(1)(a) GDPR together with the provisions of the Polish Electronic Communications Law on access to information in terminal equipment. You may withdraw consent at any time, and nothing follows from it for you: the site works exactly the same.
Advertising, that is the Meta pixel
If you tick the marketing option in the consent window, we start the Meta pixel (identifier 1400335205536543), also through Google Tag Manager. The pixel passes to Meta the information that somebody visited our site, along with the same kinds of events as the statistics: opening the directions map, clicking the e-mail address, reaching the menu section, moving to our social media profile. We pass on no first name, surname, e-mail address or phone number.
We do this so that we can show our ads on Facebook and Instagram to people who have already been with us or taken an interest in the café, and so that we do not keep showing them to the same people over and over. Meta builds audiences out of these signals - we see only how large they are, never a list of particular people. Events from the website stay in such an audience for 180 days.
Without your consent the pixel is not loaded at all: it is not in the page source until you click. The basis is your consent, that is Article 6(1)(a) GDPR together with the provisions of the Electronic Communications Law on access to information in terminal equipment. You may withdraw consent at any time - the site works exactly the same afterwards.
For the data collected by the pixel, we and Meta Platforms Ireland Limited are joint controllers as far as its collection and transmission are concerned. What happens to it afterwards on Meta's side is Meta's responsibility. You may exercise your rights against either of us.
Ads in ChatGPT, that is the OpenAI pixel
With the same marketing consent we also run the OpenAI pixel (identifier YFmYeRAgqRBz4RoV9iwZLS), likewise through Google Tag Manager. It tells OpenAI about a visit to the site, a click on our e-mail address or phone number, opening the directions map, reaching the menu section and going to our Instagram or Facebook profile. If you arrive from an ad in ChatGPT, the pixel also remembers the identifier of that click.
We do this to know whether our ads in ChatGPT bring guests in, and so that the advertising system shows them to people who may find them useful. We do not send your name, e-mail address or phone number. OpenAI has automatic advanced matching switched on: the pixel itself detects supported customer data on the site and turns it into an irreversible hash in the browser before anything is sent. Our site, however, has no forms or logins where you would enter such data.
Without your consent the pixel does not load. The legal basis is your consent under Article 6(1)(a) GDPR and the provisions of the Polish Electronic Communications Law on access to information stored in terminal equipment. You can withdraw consent at any time - the site works the same.
For the data collected by the pixel, we and OpenAI Ireland Limited are independent controllers: each of us is responsible for the data within its own scope, and you may exercise your rights against either of us. OpenAI's side is described in its privacy policy.
Cookies and browser storage
Cookies are set only by Google Analytics, the Meta pixel and the OpenAI pixel, and only after consent. Everything else is local browser storage: that data stays on your device and is not sent anywhere.
| Name | Type | Purpose | How long |
|---|---|---|---|
| _ga | Google Analytics cookie | distinguishes visitors | 2 years |
| _ga_H0FVH2RK30 | Google Analytics cookie | maintains session state | 2 years |
| _fbp | Meta pixel cookie | tells browsers apart for advertising purposes | 3 months |
| _fbc | Meta pixel cookie | remembers that you reached us from an ad on Facebook or Instagram; written only then | 3 months |
| __obref | OpenAI pixel cookie | tells browsers apart for measuring ads in ChatGPT | 12 months |
| __oppref | OpenAI pixel cookie | remembers that you reached us from an ad in ChatGPT; written only then | 30 days |
| __oaiq_consent, oaiq_consent | OpenAI pixel cookie and local storage | remembers that you agreed to ad measurement | 30 days |
| oaiq_cs | OpenAI pixel session storage | keeps the pixel settings for a single visit | until the tab is closed |
| moka-zgody | local storage | remembers your choice in the cookie window so we do not ask on every visit | 12 months |
| moka-byl | local storage | recognises that you are here again, and the site then greets you differently | until the browser is cleared |
| moka-pogoda | local storage | holds the last weather reading so we do not request it on every refresh | 30 minutes |
| moka-ziarno | session storage | keeps the same randomly chosen sentence within one visit | until the tab is closed |
| moka-wejscie | session storage | makes sure the welcome animation plays once rather than on every page change | until the tab is closed |
External services the site loads
A few parts of the site are fetched from other companies' servers. In such a case your IP address inevitably reaches that company, because otherwise the browser would have nowhere to send the file back to. We list all of them:
- Google Fonts (Google Ireland Limited) - the Cormorant Garamond and Montserrat typefaces. They load on every visit, including without consent, because without them the site looks different than intended. Basis: Article 6(1)(f) GDPR.
- Open-Meteo (Open-Meteo, Switzerland) - the weather forecast for the fixed coordinates of our venue in Cieplice. To be clear: we ask about the weather above the café, not above you. The site never requests access to your location.
- Google Tag Manager (Google Ireland Limited) - the tool that launches the statistics and the advertising pixels. It sets no cookies of its own and starts none of them without consent.
- Meta (Meta Platforms Ireland Limited) - the advertising pixel described above. It loads only after consent to marketing.
- OpenAI (OpenAI Ireland Limited) - the ChatGPT ads pixel described above. It loads only after consent to marketing. OpenAI's servers run behind Cloudflare, which sets its own technical bot-protection cookies on OpenAI's domains during that connection.
- Google Maps (Google Ireland Limited) - the directions map embedded in the contact section. It loads only once you scroll down to it. Google then learns your IP address and may set cookies.
The links to our Instagram and Facebook profiles are ordinary links. We embed no social plugins or „like" buttons here, so apart from the pixel described above Meta learns about you only when you click through to their site yourself.
Contact by e-mail
If you write to kontakt@mokacieplice.pl, we process the sender's address and the content of the message in order to reply. The basis is our legitimate interest in conducting correspondence and, for questions about reservations or cooperation, also steps taken prior to entering into a contract, that is Article 6(1)(f) and (b) GDPR. We keep correspondence for as long as it may matter to the case and delete it once it ceases to.
Who we pass data to
We do not sell data and we share it with no one for commercial purposes. Access is limited to the companies that run the site technically: the hosting provider, the statistics provider and the services listed above. We may also hand data to state authorities if they request it on a legal basis.
Transfers outside the European Economic Area
Google Analytics and Google Tag Manager are provided to us by Google Ireland Limited, based in Dublin. The data may also be processed by Google LLC in the United States. Google LLC participates in the Data Privacy Framework, recognised by the European Commission as providing an adequate level of protection, and standard contractual clauses apply in addition.
The same goes for the pixel: the service is provided by Meta Platforms Ireland Limited, based in Dublin, and the data may reach Meta Platforms, Inc. in the United States. Meta also participates in the Data Privacy Framework and applies standard contractual clauses.
The OpenAI pixel is provided by OpenAI Ireland Limited, based in Dublin. OpenAI also processes data on servers outside the European Economic Area, including in the United States. For this it relies on European Commission adequacy decisions and, where there are none, on standard contractual clauses.
Your rights
You have the right to request access to your data, its rectification, erasure or the restriction of processing, the right to object to processing based on our legitimate interest, and the right to data portability. Where processing rests on consent, you may withdraw it at any time, which does not affect the lawfulness of what was done beforehand.
To exercise these rights, a message to kontakt@mokacieplice.pl is enough. We will be straight with you about one limitation: the statistics are aggregated and contain nothing by which we could recognise you, so in their case we are unable to find records relating to a specific person.
You also have the right to lodge a complaint with a supervisory authority. The one competent for us is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, Poland. You may also turn to the supervisory authority of your habitual residence.
How to change your cookie decision
You can change your choice at any time, including withdrawing an earlier consent.
You can also delete and block cookies in your browser settings. Turning them off will not break this site.
Changes to this policy
If the way the site works changes, for instance by adding a reservation form or advertising tools, we will update this document and change the date at the top. For changes affecting consents, the consent window will appear again.
Back to the home page