1 Personal data administrator:
2. Purpose, storage period and legal basis for providing personal data
The list below presents the purposes of processing personal data in the case of using the website, using the Owner's portal and/or booking a short-term stay through the Administrator's website:
a) Administering the website in accordance with Art. 6 sec. 1 letter f of the GDPR (legitimate interest of the Administrator consisting in ensuring the proper operation of the website, reservation system and owner's portal). Data storage time - from the moment of collection until the objection is filed or the purpose of processing is achieved
b) Data analysis for better selection and improvement of products and services, as well as the operation of the website in accordance with Art. 6 sec. 1 letter f of the GDPR (legitimate interest of the Administrator consisting in the possibility of better selection of services to the needs of Customers, general optimization of products, optimization of service processes, building knowledge about Customers). Data storage time – from the moment of collection until the objection is raised or the purpose of processing is achieved
c) Direct marketing, consisting in sending commercial information (newsletter, commercial offers, information about promotions, etc.) electronically or using other telecommunications equipment or automated calling systems, based on art. 6 sec. 1 letter f of GDPR (legitimate interest in the possibility of advertising, promoting and offering products and services). Data storage time – from the moment of collection until the objection is raised or the purpose of processing is achieved.
d) Direct marketing and sending commercial information using electronic and voice communication means (SMS, MMS, e-mail) on the basis of the consent granted in accordance with art. 6 sec. 1 letter a GDPR in connection with art. 10 of the Act on the provision of services by electronic means (processing of personal data with consent). Data storage time – from the moment of collection until the objection is raised or the purpose of processing is achieved.
e) Fulfillment of obligations related to the protection of personal data in accordance with art. 6 sec. 1 letter c of GDPR (processing necessary to fulfill the legal obligation of the administrator). Data storage period - from the moment of collection until the expiry of the limitation periods for claims for violation of personal data protection regulations.
f) Processing of data necessary for the conclusion and performance of a short-term lease agreement for premises, in accordance with Art. 6 sec. 1 letter b of the GDPR (processing necessary for the performance of a contract to which the data subject is a party, or to take action at the request of the data subject, before concluding the contract). Storage period - from the moment of data collection until the expiry of the limitation period for claims arising from the contract.
g) Use of telecommunications terminal equipment or automated calling systems based on the consent granted in order to communicate during the stay, as well as before the start of the stay or after its end (telephone conversations with a consultant, representative of the Administrator, e-mail communication, SMS, MMS) in accordance with Art. 6 sec. 1 letter a of the GDPR in connection with Art. 172 of the Telecommunications Law (processing of personal data with consent). Data storage time – from the moment of collection until the withdrawal of the granted consent or the loss of their usefulness for the purposes for which they were collected
h) Ensuring the correctness of the performance of the contract, conducting debt collection activities or defending against claims, in accordance with art. 6 sec. 1 letter f of the GDPR (fulfilment of the legitimate interest consisting in the possibility of determining, pursuing or defending against claims). Data storage time – from the moment of their collection until the expiry of the limitation periods for claims. The data will be additionally stored for the time necessary to consider claims.
i) Analysis of the activities of the Administrator's business partners, settlement of services provided by partners in accordance with art. 6 sec. 1 letter f of the GDPR – legitimate interest in the form of the possibility of verifying cooperation with business partners. Data storage time – from the moment of their collection until the time of filing an objection or achieving the purpose of processing.
j) Settlement of tax liabilities and other public law liabilities of the Administrator related to concluded contracts in accordance with art. 6 sec. 1 letter f of the GDPR c GDPR in connection with tax regulations imposing tax obligations (processing necessary to fulfill the legal obligation of the administrator). Data processing time - necessary to fulfill the above obligations, resulting from separate legal regulations (time of filing tax returns, verification of data by tax administration authorities, etc.)
k) Archiving of accounting documents in accordance with Art. 6 sec. 1 letter c GDPR in connection with Art. 74 of the Accounting Act. Data storage time - for 5 years counted from the beginning of the year following the financial year to which the data relates.
In addition, personal data may also be transferred to public or private entities if such an obligation results from generally applicable legal provisions, a final court judgment or a final administrative decision.
Providing personal data is voluntary. Nevertheless, it is necessary to book a premises for a short-term stay via the Administrator's website. The consequence of not providing data will be the inability to conclude a lease agreement for a premises for a short-term stay.
In order to create your profile for marketing purposes and to direct direct marketing to you tailored to your preferences, the Administrator will process your personal data in an automated manner, including profiling them - however, this will not cause any legal effects for you, nor significantly affect your situation in a similar way.
3 Recipients of personal data
Personal data may be transferred to other recipients (business partners, entrepreneurs) with whom the Administrator has concluded appropriate cooperation agreements. The recipients provide the Administrator with the following services:
In connection with the use by the Administrator of tools such as Google Analytics, your personal data may be transferred to the following third countries: USA, Chile, Singapore and Taiwan (Republic of China). The basis for transferring data to the above-mentioned third countries are contractual clauses ensuring an adequate level of protection, in accordance with the standard contractual clauses specified in the decision of the European Commission of 5 February 2010 on standard contractual clauses for the transfer of personal data to entities processing data established in third countries under Directive 95/46/EC of the European Parliament and of the Council.
4. Users' rights related to the processing of personal data