Privacy Policy


Privacy Policy
effective from 01.04.2024

The following Privacy Policy defines the rules for saving, obtaining and processing data of Users using the website https://rezerwacje.twojgospodarz.pl, including in particular, but not limited to, the booking portal for short-term accommodation and the Owner's portal. Presented rules were developed based on the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter: "GDPR") and based on the Telecommunications Law and other legal acts.


1           Personal data administrator:


The personal data administrator is a company Twój Gospodarz spółka z ograniczoną odpowiedzialnością
with its registered office in: 92-238 Łódź, ul. Niciarniana 9/65,
NIP: 7282883591, REGON: 528221531, KRS 0001097621
Contact details: rezerwacje@twojgospodarz.pl, +48 605 622 439

Based on Art. 37 of the GDPR, the Administrator has not appointed a Data Protection Officer. In matters concerning data processing, including personal data, please contact the Administrator directly.


2.        Purpose, storage period and legal basis for providing personal data



The list below presents the purposes of processing personal data in the case of using the website, using the Owner's portal and/or booking a short-term stay through the Administrator's website:


a)         Administering the website in accordance with Art. 6 sec. 1 letter f of the GDPR (legitimate interest of the Administrator consisting in ensuring the proper operation of the website, reservation system and owner's portal). Data storage time - from the moment of collection until the objection is filed or the purpose of processing is achieved

b)         Data analysis for better selection and improvement of products and services, as well as the operation of the website in accordance with Art. 6 sec. 1 letter f of the GDPR (legitimate interest of the Administrator consisting in the possibility of better selection of services to the needs of Customers, general optimization of products, optimization of service processes, building knowledge about Customers). Data storage time – from the moment of collection until the objection is raised or the purpose of processing is achieved

c)         Direct marketing, consisting in sending commercial information (newsletter, commercial offers, information about promotions, etc.) electronically or using other telecommunications equipment or automated calling systems, based on art. 6 sec. 1 letter f of GDPR (legitimate interest in the possibility of advertising, promoting and offering products and services). Data storage time – from the moment of collection until the objection is raised or the purpose of processing is achieved.

d)         Direct marketing and sending commercial information using electronic and voice communication means (SMS, MMS, e-mail) on the basis of the consent granted in accordance with art. 6 sec. 1 letter a GDPR in connection with art. 10 of the Act on the provision of services by electronic means (processing of personal data with consent). Data storage time – from the moment of collection until the objection is raised or the purpose of processing is achieved.

e)         Fulfillment of obligations related to the protection of personal data in accordance with art. 6 sec. 1 letter c of GDPR (processing necessary to fulfill the legal obligation of the administrator). Data storage period - from the moment of collection until the expiry of the limitation periods for claims for violation of personal data protection regulations.

Providing personal data is voluntary. However, it is necessary to use the website, ensure the proper functioning of the Owner's portal or enable the booking of premises for a short-term stay through the Administrator's website. The consequence of not providing data may be the inability to ensure the proper functioning of the website, the Owner's portal, the inability to conclude a lease agreement for a short-term stay.

The following list presents additional purposes of personal data processing in the case of booking premises for a short-term stay via the Administrator's website:

f)          Processing of data necessary for the conclusion and performance of a short-term lease agreement for premises, in accordance with Art. 6 sec. 1 letter b of the GDPR (processing necessary for the performance of a contract to which the data subject is a party, or to take action at the request of the data subject, before concluding the contract). Storage period - from the moment of data collection until the expiry of the limitation period for claims arising from the contract.

g)         Use of telecommunications terminal equipment or automated calling systems based on the consent granted in order to communicate during the stay, as well as before the start of the stay or after its end (telephone conversations with a consultant, representative of the Administrator, e-mail communication, SMS, MMS) in accordance with Art. 6 sec. 1 letter a of the GDPR in connection with Art. 172 of the Telecommunications Law (processing of personal data with consent). Data storage time – from the moment of collection until the withdrawal of the granted consent or the loss of their usefulness for the purposes for which they were collected

h)         Ensuring the correctness of the performance of the contract, conducting debt collection activities or defending against claims, in accordance with art. 6 sec. 1 letter f of the GDPR (fulfilment of the legitimate interest consisting in the possibility of determining, pursuing or defending against claims). Data storage time – from the moment of their collection until the expiry of the limitation periods for claims. The data will be additionally stored for the time necessary to consider claims.

i)           Analysis of the activities of the Administrator's business partners, settlement of services provided by partners in accordance with art. 6 sec. 1 letter f of the GDPR – legitimate interest in the form of the possibility of verifying cooperation with business partners. Data storage time – from the moment of their collection until the time of filing an objection or achieving the purpose of processing.

j)           Settlement of tax liabilities and other public law liabilities of the Administrator related to concluded contracts in accordance with art. 6 sec. 1 letter f of the GDPR c GDPR in connection with tax regulations imposing tax obligations (processing necessary to fulfill the legal obligation of the administrator). Data processing time - necessary to fulfill the above obligations, resulting from separate legal regulations (time of filing tax returns, verification of data by tax administration authorities, etc.)

k)          Archiving of accounting documents in accordance with Art. 6 sec. 1 letter c GDPR in connection with Art. 74 of the Accounting Act. Data storage time - for 5 years counted from the beginning of the year following the financial year to which the data relates.

In addition, personal data may also be transferred to public or private entities if such an obligation results from generally applicable legal provisions, a final court judgment or a final administrative decision.


Providing personal data is voluntary. Nevertheless, it is necessary to book a premises for a short-term stay via the Administrator's website. The consequence of not providing data will be the inability to conclude a lease agreement for a premises for a short-term stay.


In order to create your profile for marketing purposes and to direct direct marketing to you tailored to your preferences, the Administrator will process your personal data in an automated manner, including profiling them - however, this will not cause any legal effects for you, nor significantly affect your situation in a similar way.

 

3          Recipients of personal data


Personal data may be transferred to other recipients (business partners, entrepreneurs) with whom the Administrator has concluded appropriate cooperation agreements. The recipients provide the Administrator with the following services:


  • legal
  • insurance
  • maintenance and management of premises
  • accounting
  • hosting
  • provision of the Chanel manager service and the reservation system for premises
  • analysis of activity on the website and direct marketing to persons using it (including Google Analytics)
  • IT
  • advisory
  • sales and marketing support


In connection with the use by the Administrator of tools such as Google Analytics, your personal data may be transferred to the following third countries: USA, Chile, Singapore and Taiwan (Republic of China). The basis for transferring data to the above-mentioned third countries are contractual clauses ensuring an adequate level of protection, in accordance with the standard contractual clauses specified in the decision of the European Commission of 5 February 2010 on standard contractual clauses for the transfer of personal data to entities processing data established in third countries under Directive 95/46/EC of the European Parliament and of the Council.


4.        Users' rights related to the processing of personal data


  • The right to access personal data – Users have the right to obtain access to their personal data, implemented upon request submitted to the Administrator
  • The right to rectify personal data – Users have the right to demand that the Administrator immediately rectify personal data that is incorrect or/and supplement incomplete personal data, implemented upon request submitted to the Administrator
  • The right to delete personal data – Users have the right to demand that the Administrator immediately delete personal data, implemented upon request submitted to the Administrator In some cases, deletion of data may consist in anonymizing the data enabling the identification of the User. The Administrator reserves the right to suspend the implementation of the request to delete data in order to protect the legitimate interest of the Administrator.
  • The right to limit the processing of personal data – Users have the right to limit the processing of personal data in the cases indicated in art. 18 of the GDPR, including: questioning the correctness of personal data, implemented upon request submitted to the Administrator
  • The right to transfer personal data – Users have the right to obtain from the Administrator, personal data concerning the User in a structured, commonly used machine-readable format, implemented upon request submitted to the Administrator
  • The right to object to the processing of personal data – Users have the right to object to the processing of their personal data in the cases specified in Art. 21 of the GDPR, implemented upon request submitted to the Administrator
  • The right to file a complaint – Users have the right to lodge a complaint with the supervisory authority responsible for the protection of personal data.
5.        Cookies

In accordance with art. 6 sec. 1 letter f of the GDPR (analysis, optimization and economic activity), the Administrator uses cookies on the website, permanent and temporary (session) files. Thanks to them, the Administrator receives a number of information about the user, such as IP address, browser type, operating system type, approximate location and others.

Purposes for which Cookies are used:

  • Ensuring proper operation, streamlining and facilitating access to the website
  • Marketing and commercial services aimed at concluding a premises reservation agreement or premises lease agreement with the Administrator
  • Affiliate services
  • Maintaining statistics (users, number of visits, types of devices, connections, etc.)
The Administrator uses JavaScript scripts and web components of partners who can place their own cookies on the User's Device. In the browser settings, you can independently decide on the allowed cookies that can be used by individual websites.

Below is a list of partners or their services implemented on the website that may place cookies:

  • Google (Google Analytics, Google Maps)
Services provided by third parties are beyond the Administrator's control. These entities may change their terms of service, privacy policies, the purpose of data processing and the method of using Cookies at any time.

6.        Google Maps

The service is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, which uses the IP address provided to deliver content. The privacy policy is available at https://policies.google.com/privacy.

7.         Google Analytics

The administrator uses Google Analytics in accordance with Article 6, paragraph 1, letter f of the GDPR (analysis, optimization and economic activity). The service is provided by Google. Google may use the information contained in the cookies to analyze the use of our website and to prepare a report on website activity. You can prevent the storage of data generated by cookies related to the website (including your IP address), as well as the processing of this data by Google, by downloading and installing the browser add-on available at the following link: https://tools.google.com/dlpage/gaoptout?hl=pl

8 .         Changes to the Privacy Policy

  • The Administrator reserves the right to make any changes to this Privacy Policy without having to inform Users about this in the scope of the use and exploitation of anonymous data or the use of Cookie files.
  • The Administrator reserves the right to make any changes to this Privacy Policy in the scope of processing Personal Data, in order to adapt the website to generally applicable legal regulations.
  • The Administrator reserves the right to make any changes to this Privacy Policy in the scope of processing Personal Data, in order to adapt its services to generally applicable legal regulations.

Update cookies preferences