PRIVACY POLICY OF THE SERVICES
This Privacy Policy (hereinafter referred to as the "Policy") contains information on the processing of your personal data in connection with the use of the following services:
- Prestige Renters (operating at www.prestige.renters.pl);
- Noclegi Renters (operating at www.noclegi.renters.pl);
- Laguna Apartamenty (operating at the internet address www.laguna-apartamenty.pl);
hereinafter collectively referred to as the "Services".
Personal data administrator
The administrator of your personal data is:
a. company: RENTERS spółka z ograniczoną odpowiedzialnością with its registered office in Warsaw (registered office address: ul. Jana Sebastiana Bacha 26A, 02-743 Warsaw) entered into the register of entrepreneurs of the National Court Register maintained by the District Court for the Capital City of Warsaw in Warsaw, 13th Commercial Division of the National Court Register under the KRS number: 0000678215, Tax Identification Number (NIP): 5213782041, National Business Registry Number (REGON): 367317066, with the share capital of PLN 1,297,000.00 (one million two hundred ninety-seven thousand zlotys), and
b. Polish Holiday Rentals limited liability company with its registered office
in Warsaw (registered office address: ul. Jana Sebastiana Bacha 26A, 02-743 Warsaw) entered into the register of entrepreneurs of the National Court Register maintained by the District Court for the Capital City of Warsaw in Warsaw, 13th Commercial Division of the National Court Register under the KRS number: 0000598008, Tax Identification Number (NIP): 6762500419, National Business Registry Number (REGON): 363581493, share capital of PLN 43,350.00 (forty-three thousand three hundred and fifty zlotys)
(hereinafter referred to as the "Administrator").
Contact with the Administrator
In all matters related to the processing of personal data, you can contact the contact person designated by the Administrator via:
a) e-mail – at the following address:
– RENTERS spółka z o. o.: dane.osobowy@renters.pl -
- Polish Holiday Rentals sp. z o. o.: dane.osobowe@rentlikehome.com
Personal data protection measures
The Administrator applies modern organizational and technical security measures to ensure the best possible protection of your personal data and guarantees that it processes them in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as "GDPR"), the Act of 10 May 2018 on the protection of personal data and other provisions on the protection of personal data.
Information about the personal data being processed
Using the Services requires the processing of your personal data. Below you will find detailed information about the purposes and legal basis of processing, as well as the processing period and the obligation or voluntariness of providing them.
Communicating via chat
Processed personal data:
- Name and surname.
- E-mail address.
- Optional – other personal information you provide during the chat.
Legal basis:
The processing of personal data is based on consent, in accordance with Article 6 paragraph 1 letter a of the GDPR.
Providing the above personal data is voluntary, but necessary in order to establish contact.
with the Administrator via chat and receive answers to the questions asked. The consequence of not providing them will be the inability to establish contact and receive an answer.
The Administrator will process the above-mentioned personal data until the consent granted is withdrawn or until they are no longer useful for the purposes for which they were collected – depending on which of these events occurs first.
________________________________________
Conclusion and performance of an apartment lease agreement
Processed personal data:
- Name and surname.
- E-mail address.
- Telephone number.
- Residential address (street, house number, apartment number, city, postal code, country).
- PESEL.
Legal basis:
Processing is necessary for the performance of a contract with the data subject or to take steps to enter into such a contract, pursuant to Article 6(1)(b) of the GDPR.
Providing the above personal data is a condition for concluding and performing the apartment rental agreement. Their provision is voluntary, but the consequence of not providing them will be the inability to conclude and perform the above agreement.
The Administrator will process the above-mentioned personal data until the limitation period for claims arising from the above-mentioned Agreement expires.
Conducting email communication
Processed personal data:
- Name and surname.
- E-mail address.
- Optionally – other personal data that you provide during email communication.
Legal basis:
The processing of personal data is based on consent, in accordance with Article 6 paragraph 1 letter a of the GDPR.
Providing the above-mentioned personal data is voluntary, but necessary for the purpose of conducting
with the Administrator of e-mail communication. The consequence of not providing them will be the inability to conduct e-mail communication with the Administrator.
The Administrator will process the above-mentioned personal data until the consent granted is withdrawn or until they are no longer useful for the purposes for which they were collected – depending on which of these events occurs first.
________________________________________
Sending a newsletter
Processed personal data:
E-mail address.
Legal basis:
Processing is necessary for the purposes of pursuing the legitimate interest of the Administrator, in this case informing about new products and promotions available on the Services, in accordance with Article 6 paragraph 1 letter f of the GDPR.
Providing an e-mail address is voluntary, but necessary in order to receive the newsletter (the consequence of not providing it will be the inability to receive the newsletter).
The Administrator will process the e-mail address until you successfully file an objection or until the purpose of processing is achieved (depending on which of these events occurs first).
The newsletter is sent and the subscriber base is managed using the User.com platform, which enables the automation of the distribution of information about news and promotions, segmentation of recipients and personalization of content. Your data may be processed by User.com to the extent necessary to provide these services – in accordance with the appropriate security and personal data protection standards, including GDPR. Details regarding data processing by User.com are available in the Privacy Policy of this entity at: https://www.user.com.
Conducting telephone communication (direct conversation, SMS)
Processed personal data:
- Telephone number.
- Optional – other personal data that you provide during telephone communication.
Legal basis:
The processing of personal data is based on consent, in accordance with Article 6 paragraph 1 letter a of the GDPR.
Providing the above personal data is voluntary, but necessary in order to conduct telephone communication with the Administrator. The consequence of not providing them will be the inability to conduct telephone communication with the Administrator.
The Administrator will process the above-mentioned personal data until the consent granted is withdrawn or until they are no longer useful for the purposes for which they were collected – depending on which of these events occurs first.
________________________________________
Contact form support
(including a form for providing information about the apartment and a form for inquiring about a specific apartment)
Processed personal data:
- Name and surname.
- Company.
- E-mail address.
- Telephone number.
- Address of residence/apartment.
Legal basis:
The processing of personal data takes place on the basis of consent granted, in accordance with Article 6 paragraph 1 letter a of the GDPR.
Providing the above personal data is voluntary, but necessary in order to receive a response to the inquiry sent via the contact form. Failure to provide them will result in the inability to receive a response.
The Administrator will process the above-mentioned personal data until the consent granted is withdrawn or until they are no longer useful for the purposes for which they were collected – depending on which of these events occurs first.
Fulfillment of obligations related to the protection of personal data
Processed personal data:
- Name and surname.
- Contact details provided by you (e-mail address, correspondence address, telephone number).
Legal basis:
Processing is necessary to fulfil a legal obligation incumbent on the Controller, in this case the obligations arising from the provisions on personal data protection, in accordance with Article 6 paragraph 1 letter c of the GDPR.
Providing the above personal data is voluntary, but necessary for the Administrator to properly perform its obligations under the provisions on the protection of personal data, including the implementation of the rights granted to you by the GDPR. Failure to provide them will result in the inability to properly implement these rights.
The Administrator will process the above-mentioned personal data until the expiry of the limitation periods for claims for violation of the provisions on personal data protection.
________________________________________
Using the Large Family Card (KDR) discount
Processed personal data:
- Name and surname.
- Large Family Card Number.
- E-mail address.
- Optional: PESEL number and other data resulting from the verification process.
Legal basis:
The processing of personal data is necessary for the performance of a contract concluded with the data subject, taking into account the benefits of having a KDR, or to take action at their request before concluding a contract – in accordance with Article 6 paragraph 1 letter b of the GDPR – and in order to fulfil the legal obligations incumbent on the Controller, resulting from the Large Family Card Act, in accordance with Article 6 paragraph 1 letter c of the GDPR.
Providing the above personal data is voluntary, but necessary in order to take advantage of the discount based on the Large Family Card and to effectively conclude an apartment/house rental agreement. The consequence of not providing them will be the inability to obtain a discount and conclude an apartment/house rental agreement on preferential terms.
The Administrator will process the above-mentioned personal data for the period necessary to achieve the purpose of processing, i.e. for the duration of the apartment/house rental agreement and until the expiry of the limitation periods for claims or fulfillment of obligations arising from legal provisions.
Your presentation of an identity document to confirm your entitlement to use the Large Family Card is not subject to the provisions of the GDPR and does not constitute the processing of your personal data, as long as the data is not copied or recorded by the Administrator.
________________________________________
Establishing, pursuing or defending against claims
Processed personal data:
- Name.
- Last name.
- Business.
- E-mail address.
- Address of residence/registered office.
- PESEL/KRS number.
- NIP.
Legal basis:
Processing is necessary for the purposes of the legitimate interest of the Controller, in this case the determination, pursuit or defence against claims, in accordance with Article 6 paragraph 1 letter f of the GDPR.
Providing the above personal data is voluntary, but necessary to establish, pursue or defend against claims. Failure to provide them will result in the inability of the Administrator to undertake the above actions.
The Administrator will process the above-mentioned personal data until the expiry of the limitation periods for claims.
Analysis of your activity on the Services
Processed personal data:
- Date and time of visit.
- Device IP number.
- Type of operating system on the device.
- Approximate location.
- Type of web browser.
- Time spent on the Services.
- Visited subpages and other actions undertaken within the Services.
Legal basis:
Processing is necessary to pursue the legitimate interest of the Administrator, in this case obtaining information about your activity on the Services, in accordance with Article 6 paragraph 1 letter f of the GDPR.
Providing the above-mentioned personal data is voluntary, but necessary in order for the Administrator to obtain information about your activity on the Services (the consequence of not providing them will be the inability of the Administrator to obtain the above-mentioned information).
The Administrator will process the above-mentioned personal data until the objection is effectively raised or the purpose of processing is achieved.
Administration of Services
Processed personal data:
- IP address.
- Server date and time.
- Web browser information.
- Operating system information.
The above data is saved automatically in the so-called server logs each time the Services are used. Administering them without using server logs and automatic saving would not be possible.
Legal basis:
Processing is necessary for the purposes of pursuing the legitimate interest of the Administrator, in this case ensuring the proper functioning of the Services, in accordance with Article 6 paragraph 1 letter f of the GDPR.
Providing the above personal data is voluntary, but necessary to ensure the proper functioning of the Services (the consequence of not providing them will be the inability to ensure the proper functioning of the Services).
The Administrator will process the above-mentioned personal data until the objection is effectively raised or the purpose of processing is achieved.
Profiling
In order to create your profile for marketing purposes and to direct marketing to you tailored to your preferences, the Administrator will process your personal data in an automated manner, including profiling them – however, this will not produce any legal effects for you or significantly affect your situation in a similar manner.
The scope of profiled personal data corresponds to the scope indicated above.
in relation to the analysis of your activity on the Services.
The legal basis for the processing of personal data for the above purpose is Article 6 paragraph 1 letter f of the GDPR, according to which the Administrator may process personal data in order to pursue its legitimate interest, in this case conducting marketing activities tailored to the preferences of recipients. Providing the above personal data is voluntary, but necessary to achieve the above purpose (the consequence of not providing them will be the inability of the Administrator to conduct marketing activities tailored to the preferences of recipients).
The Administrator will process personal data for the purpose of profiling until an objection is effectively raised or the purpose of processing is achieved.
Recipients of personal data
The recipients of your personal data will be the following external entities cooperating with you:
with Administrator:
a) a company providing accounting services;
b) a company providing legal services;
c) hosting companies;
d) the company providing the contact platform;
e) companies providing instant messaging services;
f) companies providing tools for analyzing activity on the Websites
and direct marketing to those who use it (including Google Analytics);
g) newsletter service provider.
In addition, personal data may also be transferred to public or private entities if such an obligation results from generally applicable legal provisions, a final court judgment or a final administrative decision.
Transfer of personal data to a third country
In connection with the use by the Administrator of tools such as Google Analytics, your personal data may be transferred to the following third countries: USA, Chile, Singapore and Taiwan (Republic of China). The basis for transferring data to the above-mentioned third countries are contractual clauses ensuring an adequate level of protection, in accordance with the standard contractual clauses specified in the decision of the European Commission of 5 February 2010 on standard contractual clauses for the transfer of personal data to entities processing data established in third countries under Directive 95/46/EC of the European Parliament and of the Council.
You may obtain from the Controller a copy of the data transferred to a third country.
Right
In connection with the processing of personal data, you have the following rights:
1) the right to information about what personal data concerning you is processed by the Administrator and to receive a copy of this data (so-called right of access). The issuance of the first copy of the data is free of charge, for subsequent ones the Administrator may charge a fee;
2) if the processed data becomes outdated or incomplete (or otherwise incorrect), you have the right to request its rectification;
3) in certain situations you may ask the Administrator to delete your personal data, e.g. when:
a) the data will no longer be necessary for the Administrator for the purposes communicated;
b) you have effectively withdrawn your consent to data processing - unless the Administrator has the right to process the data on another legal basis;
c) the processing is unlawful;
d) the need to delete the data results from a legal obligation incumbent on the Administrator;
4) if personal data are processed by the Administrator on the basis of the consent granted for processing or for the purpose of performing the Agreement concluded with him, you have the right to transfer your data to another administrator;
5) if personal data are processed by the Administrator on the basis of your consent to processing, you have the right to withdraw this consent at any time (withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of consent before its withdrawal);
6) if you believe that the personal data being processed are incorrect, their processing is unlawful, or the Administrator no longer needs specific data, you may request that for a specified period of time (e.g. to verify the correctness of the data or to pursue claims) the Administrator not perform any operations on the data, but only store them;
7) you have the right to object to the processing of personal data, the basis for which is the legitimate interest of the Administrator. In the event of an effective objection, the Administrator will cease processing personal data
for the above-mentioned purpose;
8) you have the right to lodge a complaint with the President of the Personal Data Protection Office if you believe that the processing of your personal data violates the provisions of the GDPR.
Cookies
1. The Administrator informs that the Services use "cookies" files installed on your end device. These are small text files that can be read by the Administrator's system, as well as by systems belonging to other entities whose services the Administrator uses (e.g. Facebook, Google).
2. The Administrator uses cookies for the following purposes:
a) ensuring the proper functioning of the Services – thanks to cookies, it is possible to ensure the efficient functioning of the Services, use their functions and conveniently move between individual subpages;
b) increasing the comfort of browsing the Services – thanks to cookies, it is possible to detect errors on some subpages and constantly improve them;
c) creating statistics – cookies are used to analyze how users use the Services. This allows for continuous improvement of the Services and adjustment of their operation to user preferences;
d) conducting marketing activities – thanks to cookies, the Administrator can direct advertisements to users tailored to their preferences.
3. The Administrator may place both persistent and temporary (session) files on your device. Session files are usually deleted when you close your browser, but closing your browser does not delete persistent files.
4. Information about cookies used by the Administrator is displayed in the panel located at the bottom of the Services' website. Depending on your decision, you can enable or disable cookies of individual categories (except for essential cookies) and change these settings at any time.
5. Data collected using cookies does not allow the Administrator to identify you.
6. The Administrator uses the following cookies or tools that use them:
Necessary cookies
Provider: Administrator
Functions and scope of downloaded data:
The operation of these files is necessary for the proper functioning of the websites of the Services, so you cannot disable them. Thanks to these files (which collect, among other things, the IP number of your device), it is possible to, among other things, inform you
about cookies operating on the websites of the Services.
Period of operation:
Most necessary cookies are session cookies, but some remain on your end device for a period of 2 weeks or until you delete them.
________________________________________
Google Analytics
Provider: Google
Functions and scope of downloaded data:
This tool allows you to collect statistical data about how you use our website.
from the Services by Customers, including the number of visits, duration of visits, search engine used, location. The collected data helps improve the Services and make them more friendly to Customers.
Period of operation:
Up to 2 years or until deleted (whichever occurs first).
________________________________________
User.com
Supplier:
Positive Group Polska Sp. z o. o.
Grzybowska Street 87,
00-844 Warsaw, Poland
KRS: 0000654981
NIP: 5272791969
Functions and scope of downloaded data:
The tool provided by the Supplier enables the automation of communication
and marketing on the Services, chat support, sending newsletters, personalizing notifications and creating personalized campaigns for users. The Provider allows for tracking user activity on the Services, maintaining visit statistics, analyzing interactions, segmenting recipients and building activity profiles.
The data collected by the Provider may include: IP address, device type and version, operating system, browser, visited subpages and time of visit, events and interactions, location and data provided in contact forms (e.g. name, e-mail address).
The data collected by the Provider help improve user service, personalize the offer and communication, as well as continuously improve the Services in terms of quality and functionality.
Period of operation:
Up to 2 years or until deleted (whichever occurs first).
7. Using most commonly used browsers, you can check whether cookies have been installed on your end device, as well as delete installed cookies and block the Services from installing them in the future. However, disabling or limiting the use of cookies may cause quite serious difficulties in using the Services, e.g. in the form of the need to log in to each subpage, a longer loading period of the Services' page, limitations in the use of
of some functionalities.
Final provisions
To the extent not regulated by the Policy, generally applicable provisions on personal data protection apply.
