I. General information.
1. This Privacy Policy sets out the rules for the processing and protection of personal data of Users using the website and short-term rental services, including online reservations, provided by:
HappyStay Apartments Sp. z o.o., with its registered office in Gdańsk, ul. ks. Jerzego Popiełuszki 22/LU6, NIP: 583 346 68 77 (hereinafter referred to as the “Administrator”).
2. The Administrator has not appointed a Data Protection Officer. In matters related to the protection of personal data, Users may contact the Administrator directly.
II. Legal Grounds for Data Processing.
1. Personal data are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) on the following legal grounds:
2. Article 6(1)(b) GDPR – processing is necessary for the performance of a contract (online accommodation reservation, provision of rental services) or to take steps prior to entering into a contract.
3. Article 6(1)(c) GDPR – compliance with legal obligations incumbent on the Administrator (e.g. issuing invoices, tax regulations, accounting documentation).
4. Article 6(1)(f) GDPR – legitimate interests of the Administrator (direct marketing of own services, pursuing claims, ensuring the safety of property and guests).
5. If video surveillance is used, it covers only common areas of the property and is intended to ensure the safety of persons and property. Recordings are stored for no longer than 30 days, unless they constitute evidence in legal proceedings.
6. Article 6(1)(a) GDPR – User’s voluntary consent (e.g. contact form, consent to marketing communication).
III. Scope of Collected Data.
1. For the purpose of making an online reservation and providing the service, the Administrator collects in particular:
- first and last name,
- residential address,
- phone number and e-mail address,
- invoice details (for companies),
- dates of stay and number of guests.
IV. Data Recipients and Online Payments
1. Personal data may be transferred to entities cooperating with the Administrator only to the extent necessary to provide the service:
2. Payment operators – in order to enable online payment for a reservation, data necessary to complete the transaction are transferred to the payment operator Przelewy24 (PayPro S.A. with its registered office in Poznań).
3. Supporting entities – companies providing accounting, legal and IT services, as well as entities responsible for technical service of the property (e.g. cleaning services).
4. Public authorities – only in cases where such obligation arises from applicable law.
V. Data Retention Period.
1. Data related to the performance of the contract are stored for the duration of the contract, and after its termination:
- accounting data – for 5 years,
- data processed for the purpose of pursuing claims – until the limitation period expires,
2. Data processed on the basis of consent – until the consent is withdrawn
VI. User Rights.
1. Each data subject has the right to:
- access their personal data and receive a copy thereof,
- rectify (correct) data,
- erase data (right to be forgotten),
- restrict processing,
- data portability,
- object to processing,
- withdraw consent at any time (without affecting the lawfulness of processing carried out before withdrawal),
- lodge a complaint with the President of the Personal Data Protection Office, in accordance with Article 77 GDPR.
VII. Cookies and Operational Data.
1. The website uses cookies, which are IT data stored on the User’s end device.
2. Cookies are used to:
- maintain the User’s session (including the online reservation process),
- ensure proper functioning of the website,
- optimize the use of the website,
- create anonymous statistics.
3. The User may change cookie settings at any time in their web browser
VIII. Data Security.
1. The Administrator applies appropriate technical and organizational measures to ensure the protection of processed personal data, in particular securing data against unauthorized access, loss or damage, including the use of an SSL certificate on the website.
IX. Contact.
1. All questions regarding this Privacy Policy and the processing of personal data should be addressed by e-mail to biuro@happystay.pl or by post to the Administrator’s registered office address.