Privacy Policy

1. Personal Data Controller

The personal data controller is Egis Szymon Krzempek, ul. Bohaterów Monte Cassino 412, 43-300 Bielsko-Biała, NIP: 5472098115 (hereinafter: “Controller”), operating in the field of apartment rentals.

2. Contact with the Controller

You may contact the Controller by sending an email to: stayandrest.apart@gmail.com.

3. Purposes and Legal Bases for Data Processing

The Controller processes personal data for the following purposes:

• Execution of the apartment rental agreement – legal basis: Article 6(1)(b) of the GDPR (contract performance necessity).
• Issuing invoices and maintaining accounting records – legal basis: Article 6(1)(c) of the GDPR (legal obligation).
• Handling inquiries and complaints – legal basis: Article 6(1)(b) and (f) of the GDPR (contract performance and legitimate interest of the Controller).
• Marketing activities (e.g. sending newsletters, promotions) – legal basis: Article 6(1)(f) of the GDPR (legitimate interest of the Controller).

4. Categories of Processed Personal Data

We process the following categories of personal data:

• contact data (e.g. name, surname, email address, phone number),
• identification data (e.g. ID number – when identity verification is required),
• booking-related data (e.g. stay dates, preferences).

5. Recipients of Personal Data

Personal data may be shared with:

• entities supporting the Controller in service delivery (e.g. IT companies, accountants, reservation system providers),
• public authorities, if required by law.

6. Data Retention Period

Personal data will be processed during the marketing campaign period conducted by the Controller, until you object to the processing for marketing purposes. In the case of marketing contact, we will cease such contact upon withdrawal of your consent.

7. Source of Data

Your data has been obtained from public databases available on the Internet or provided by the Booking.com platform.

8. Data Subject Rights

Data subjects have the right to:

• access their personal data,
• rectify the data,
• erase the data (“right to be forgotten”),
• restrict processing,
• data portability,
• object to data processing.

9. Automated Decision-Making

Your personal data will not be used for automated decision-making, including profiling.

10. Right to Lodge a Complaint

If you believe your personal data is being processed unlawfully, you have the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office.

11. Data Transfer Outside the European Economic Area (EEA)

The Controller does not transfer personal data outside the EEA unless necessary for service provision and appropriate safeguards are in place.

12. Cookies

The Stay&Rest Apartments website may use cookies for:

• ensuring proper site operation,
• analyzing visit statistics,
• personalizing marketing content.

Each user can manage cookies via their browser settings.

13. Changes to the Privacy Policy

The Controller reserves the right to make changes to this privacy policy. All changes will be published on the website.

14. Contact

Any questions regarding this privacy policy should be directed to: stayandrest.apart@gmail.com.