Privacy Policy

1. Data Controller

The Controller of your personal data is Barbara Kubrak - a natural person privately renting the apartments at ul. Złota 63A and 65A in Warsaw ("Złota Apartments").
Contact regarding personal data: info@zlota-apartments-warsaw.pl.
Correspondence address: ul. Złota 63A i 65A, 00-819 Warsaw, Poland.

2. What data we process

• Contact form: first name (and surname), e-mail address, telephone number (optional) and the content of your message.
• Booking and stay (when you make a booking): first name and surname, contact details, dates and details of the stay, data necessary for settlement and - where required by law - invoice/registration details.
• Correspondence: the data contained in the messages you send to us.
• Newsletter (if you subscribe): the e-mail address provided in the sign-up form.

3. Purposes and legal bases for processing

• Responding to an enquiry and contact - Article 6(1)(f) GDPR (our legitimate interest: handling correspondence).
• Conclusion and performance of the rental / booking contract - Article 6(1)(b) GDPR (performance of a contract).
• Fulfilment of legal obligations (e.g. tax, accounting) - Article 6(1)(c) GDPR.
• Establishing, pursuing or defending claims - Article 6(1)(f) GDPR.
• Sending the newsletter and information about our offer (if you subscribe) - Article 6(1)(a) GDPR (your consent, which you may withdraw at any time).
• Statistical/marketing cookies (if enabled) - Article 6(1)(a) GDPR (your consent).

4. Retention period

We retain data for as long as necessary to achieve the purpose: correspondence - until the matter is concluded and for the limitation period of any potential claims; booking/rental data - for the duration of the contract and for the period required by law (including tax law, usually up to 5 years).

5. Data recipients

Data may be entrusted to entities providing us with technical and organisational support, solely to the extent necessary: hosting and e-mail providers, the newsletter and e-mail marketing provider (Brevo - Sendinblue SAS, France), providers of the booking and payment system, booking platforms (external) - if you make a booking through them, and the accounting office/adviser in relation to settlements. We do not sell personal data.

6. Transfers outside the EEA

As a rule, we do not transfer data outside the European Economic Area. If we use tools from providers located outside the EEA (e.g. booking platforms), this takes place on the basis of mechanisms compliant with the GDPR (including standard contractual clauses).

7. Your rights

You have the right to: access your data, rectify it, erase it, restrict its processing, data portability, object, and - where consent has been given - withdraw it at any time (without affecting prior processing). You can exercise your rights by writing to: info@zlota-apartments-warsaw.pl.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw).

8. Voluntary provision of data

Providing your data is voluntary but necessary in order to respond to an enquiry and to make a booking and complete a stay. Failure to provide the data will make it impossible to fulfil these purposes.

9. Profiling

We do not make decisions in an automated manner and we do not profile your data.

10. Cookies

The rules for the use of cookies are described in the Cookie Policy. The website currently uses only cookies that are essential for its operation.