Personal data
Privacy policy
Effective from 21 August 2026
This site is a café's calling card, not a shop. We have no forms, we do not create accounts and we sell nothing online. Even so, below we describe exactly what happens to the data of the people who visit us.
This is the only place where we list the tools running on the site, together with what each of them collects. The consent window asks briefly, because the list of tools changes over time. When something is added or removed, we update this document and change the date at the top.
Who is responsible for the data
The controller is MØKA Weronika Paluch, Plac Piastowski 21, 58-560 Jelenia Góra, Poland, tax number (NIP) 6112852869, business number (REGON) 545207667.
For matters concerning data, write to us at kontakt@mokacieplice.pl. We have not appointed a data protection officer, because the scale of processing does not require one.
What happens when you visit the site
Without your consent only what is needed to display the page is active: the server records the visit in its logs, and the browser downloads the typefaces and checks the weather so that the illustration of the venue matches what is happening outside. Visit statistics start only once you agree in the cookie window.
Server logs
The server records the IP address, the date and time of the visit, the address visited, the browser and system type, and the address of the page you came from. We do this so the site works and so we can spot failures and abuse. The basis is our legitimate interest, that is Article 6(1)(f) GDPR. The logs are kept for us by the hosting company dhosting.pl and deleted in line with the rules of its service.
Visit statistics, meaning Google Analytics
If you give consent, we use Google Analytics 4 (measurement ID G-H0FVH2RK30), launched through Google Tag Manager. We want to know how many guests visit the site, which sources they arrive from, which devices they use and what they click: the directions map, the e-mail address, the way through to the menu, the jump to our social media profiles. We also collect approximate location at city level, derived from the IP address.
We only ever look at the statistics in aggregate. We do not link them to a name or an e-mail address and we do not try to establish anyone's identity from them. We carry out no profiling that would have legal effects. Data in Google Analytics is kept for 14 months, after which Google deletes it.
The basis is your consent, that is Article 6(1)(a) GDPR together with the provisions of the Polish Electronic Communications Law on access to information in terminal equipment. You may withdraw consent at any time, and nothing follows from it for you: the site works exactly the same.
Marketing consent
The consent window includes a separate marketing option. To be plain about it: no advertising pixel or remarketing tool runs here today, so even ticking it starts nothing extra. The option is prepared for the future. If we ever connect advertising tools, we will describe them in this policy before they go live.
Cookies and browser storage
Cookies are set only by Google Analytics and only after consent. Everything else is local browser storage: that data stays on your device and is not sent anywhere.
| Name | Type | Purpose | How long |
|---|---|---|---|
| _ga | Google Analytics cookie | distinguishes visitors | 2 years |
| _ga_H0FVH2RK30 | Google Analytics cookie | maintains session state | 2 years |
| moka-zgody | local storage | remembers your choice in the cookie window so we do not ask on every visit | 12 months |
| moka-byl | local storage | recognises that you are here again, and the site then greets you differently | until the browser is cleared |
| moka-pogoda | local storage | holds the last weather reading so we do not request it on every refresh | 30 minutes |
| moka-ziarno | session storage | keeps the same randomly chosen sentence within one visit | until the tab is closed |
| moka-wejscie | session storage | makes sure the welcome animation plays once rather than on every page change | until the tab is closed |
External services the site loads
A few parts of the site are fetched from other companies' servers. In such a case your IP address inevitably reaches that company, because otherwise the browser would have nowhere to send the file back to. We list all of them:
- Google Fonts (Google Ireland Limited) - the Cormorant Garamond and Montserrat typefaces. They load on every visit, including without consent, because without them the site looks different than intended. Basis: Article 6(1)(f) GDPR.
- Open-Meteo (Open-Meteo, Switzerland) - the weather forecast for the fixed coordinates of our venue in Cieplice. To be clear: we ask about the weather above the café, not above you. The site never requests access to your location.
- Google Tag Manager (Google Ireland Limited) - the tool that launches the statistics. It sets no cookies of its own and does not start Google Analytics without consent.
- OpenStreetMap (OpenStreetMap Foundation) - the directions map embedded in the contact section. It loads only once you scroll down to it.
The links to our Instagram and Facebook profiles are ordinary links. We embed no plugins there, so Meta learns about you only when you click through to their site yourself.
Contact by e-mail
If you write to kontakt@mokacieplice.pl, we process the sender's address and the content of the message in order to reply. The basis is our legitimate interest in conducting correspondence and, for questions about reservations or cooperation, also steps taken prior to entering into a contract, that is Article 6(1)(f) and (b) GDPR. We keep correspondence for as long as it may matter to the case and delete it once it ceases to.
Who we pass data to
We do not sell data and we share it with no one for commercial purposes. Access is limited to the companies that run the site technically: the hosting provider, the statistics provider and the services listed above. We may also hand data to state authorities if they request it on a legal basis.
Transfers outside the European Economic Area
Google Analytics and Google Tag Manager are provided to us by Google Ireland Limited, based in Dublin. The data may also be processed by Google LLC in the United States. Google LLC participates in the Data Privacy Framework, recognised by the European Commission as providing an adequate level of protection, and standard contractual clauses apply in addition.
Your rights
You have the right to request access to your data, its rectification, erasure or the restriction of processing, the right to object to processing based on our legitimate interest, and the right to data portability. Where processing rests on consent, you may withdraw it at any time, which does not affect the lawfulness of what was done beforehand.
To exercise these rights, a message to kontakt@mokacieplice.pl is enough. We will be straight with you about one limitation: the statistics are aggregated and contain nothing by which we could recognise you, so in their case we are unable to find records relating to a specific person.
You also have the right to lodge a complaint with a supervisory authority. The one competent for us is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, Poland. You may also turn to the supervisory authority of your habitual residence.
How to change your cookie decision
You can change your choice at any time, including withdrawing an earlier consent.
You can also delete and block cookies in your browser settings. Turning them off will not break this site.
Changes to this policy
If the way the site works changes, for instance by adding a reservation form or advertising tools, we will update this document and change the date at the top. For changes affecting consents, the consent window will appear again.
Back to the home page