ENNO

Privacy Policy

Spark & Shine Agency sp. z o.o. respects your privacy and is committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website and tell you about your privacy rights.

1. Independent Resource Status

Our website is an independent review platform providing information about real hotels and casinos. We do not operate any gambling facilities or booking engines, which significantly limits the amount of sensitive financial data we process.

2. Data We Collect

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

  • Identity Data: includes first name, last name, username or similar identifier.
  • Contact Data: includes email address and telephone numbers (if submitted via contact forms).
  • Technical Data: includes internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform.
  • Usage Data: includes information about how you use our website.

3. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR) we process personal data only where we have a lawful basis to do so. The bases we rely on are:

  • Consent: where you actively submit a message through a contact form or opt in to non-essential cookies. Consent can be withdrawn at any time.
  • Legitimate interests: operating and securing the website, understanding aggregate usage, and responding to enquiries you send us. We balance these interests against your rights and stop where your rights prevail.
  • Legal obligation: retaining limited records where Polish or EU law requires us to do so.

We do not rely on a contractual basis to process your data, because we do not sell services, take bookings or hold accounts.

4. Forms and Communication

If you use our contact forms, the information provided is used exclusively to respond to your inquiry. We employ strict protocols regarding communications:

  1. Emails are routed through secure, encrypted servers.
  2. We do not add you to marketing lists without explicit consent.
  3. We do not sell your contact information to third parties, casinos, or travel agencies.

5. Analytics Data

We use third-party analytics tools (such as Google Analytics) to monitor website traffic and user behavior. This helps us improve our content layout and user experience. This data is generally anonymized and aggregated, meaning it does not directly identify you.

6. Use of Cookies

Our site uses cookies to enhance functionality and track usage patterns. Detailed information regarding the specific types of cookies we use, their duration, and how to opt-out can be found in our comprehensive Cookie Policy.

7. Third-Party Services

We may link to third-party booking platforms (e.g., Booking.com). When you click these links, you leave our site. Please note:

  • The third party may collect data about you independently.
  • We do not control these external websites and are not responsible for their privacy statements.
  • We encourage you to read the privacy notice of every website you visit.

8. Data Security and Storage

Your data is stored on secure servers located within the European Economic Area (EEA). We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed.

9. Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. Typically, inquiry emails are deleted after 12 months.

10. User Rights (GDPR)

Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to:

  • Request access to your personal data.
  • Request correction of your personal data.
  • Request erasure of your personal data (Right to be Forgotten).
  • Object to processing of your personal data.
  • Request restriction of processing your personal data.

11. Sharing Your Data

We do not sell, trade, or rent your personal identification information to others. We may share generic aggregated demographic information not linked to any personal identification information with our business partners and trusted affiliates for the purposes outlined above.

12. Children's Privacy

Our website is explicitly designed for adults seeking luxury casino resorts. It is not designed for, nor directed at, individuals under the age of 18 (or 21, depending on jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have collected such data, we will take steps to delete it immediately.

13. International Transfers

As our servers and third-party partners may operate globally, your data may be transferred outside your home country. Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the legal safeguards is implemented.

14. Automated Decision-Making and Profiling

We do not carry out automated decision-making that produces legal effects concerning you or similarly significantly affects you, and we do not build behavioural profiles of individual visitors. Analytics data is examined in aggregate to understand how pages perform, not to evaluate individual people.

We do not operate advertising retargeting on this website, and we do not sell, rent or trade personal data to advertisers, data brokers, casinos or travel agencies under any circumstances.

15. Data Breach Notification

We maintain procedures to detect, report and investigate personal data breaches. In the event of a breach that is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of it.

Where a breach is likely to result in a high risk to your rights and freedoms, we will also inform affected individuals directly and describe the measures taken to address it.

16. Complaints and Supervisory Authority

If you believe we have handled your personal data improperly, please contact us first — most issues are resolved quickly and directly. You also have the right to lodge a complaint with a supervisory authority at any time.

As a company registered in Poland, our lead supervisory authority is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych). If you are resident in another EEA country, you may also complain to the authority in your country of residence.

17. Changes to This Policy

We keep our privacy policy under regular review. We may update this privacy policy periodically to reflect changes in the law or our data processing practices. We advise you to review this page frequently. Your continued use of the site implies acceptance of the updated policy.

Last updated: August 2026

Spark & Shine Agency sp. z o.o.
Email: privacy@sparkandshineagency.com