top of page

Privacy Policy

This policy is effective as of August 15, 2023.

​

This Privacy Policy (hereinafter: “Policy”) contains information about the
processing of your personal data in connection with the use of the following
websites and services

 

  1. Rentujemy.com (operating at the internet address Rentujemy.com);

  2. Reservations made through other booking portals (e.g., Airbnb, Booking).

  3. Accommodation services


The Short-Term Rental Operator is Rentujemy Sp. z o.o. with its registered office in Warsaw at Aleje Jerozolimskie 123A, postal code 02-017, REGON 523739720, NIP 5213993890, Share capital: PLN 115,000, entered in the Register of Entrepreneurs kept by the District Court in Warsaw, Commercial Division of the National Court Register, KRS No.0001003921, represented by Adrian Barwicki - President of the Company or Liya Akhramovich - Member of the Management Board, hereinafter referred to as: “RENTUJEMY” or “Operator.”


Data Controller

In connection with the conclusion and performance of the Agreement, RENTUJEMY processes the personal data indicated in the reservation form and/or registration card and is the Personal Data Controller (hereinafter referred to as the “Controller”).

 

Purposes and legal basis for the processing of personal data:

​

The personal data provided to RENTUJEMY will be/are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of individuals with regard to §9. §10. §11. §12. on the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as “GDPR”.


We obtain personal data from you in the process of concluding a contract or from our partners (e.g., from booking portals, travel agents, etc.).

 

Below we indicate the purposes of personal data processing together with the legal basis for their processing:

a) in order to take action at your request, i.e. to quote a service, book a service, and to conclude and perform a contract, in particular ongoing contacts pursuant to Article 6(1)(b) of the GDPR,


b) for tasks resulting from applicable law, which may include, among others, financial reporting, statistical reporting, and keeping records and statements resulting directly from the provisions of the GDPR (Article 6(1)(c) of the GDPR in conjunction with Article 71 in conjunction with Article 74(2)(8) of the Accounting Act) (GUS obligation and local and/or spa fee),

c) for the legitimate interests of the Company, which may include, among others:
• establishing, pursuing, and defending claims,
• considering complaints,
• conducting debt collection activities,
• archiving activities,
• analytical and statistical activities,
• customer satisfaction surveys (in this case, it is in the interest of RENTUJEMY to obtain customer opinions on the services provided in order to adapt them to the needs and expectations of interested parties)

d) to ensure the safety of guests, users, employees, and customers of the Company and to prevent theft and fraud


e) to manage payments made by Guests – we collect credit card information – such as the number, date of issue and, if necessary, the CVC code) (Article 6(1)(b) of the GDPR),

f) to protect the vital interests of the data subject, which may include, among others, purposes related to the need to save life, health, or protect property, e.g.


RENTUJEMY may contact you in connection with an incident that took place on the premises of the Facility with your participation or to your detriment or to the detriment of a third party, if you were or could have been a participant or witness to such an incident. (Article 6(1)(d) of the GDPR)

g) for the purpose of conducting marketing activities, including direct marketing of RENTUJEMY products and services (Article 6(1)(a) of the GDPR). Providing data within the scope indicated is voluntary, but necessary for the conclusion and performance of the contract. Children's data, such as date of birth, is collected exclusively from their parents or legal guardians in order to determine their age and the discounts to which they are entitled.

​

Period of personal data processing

Personal data processed for the above purposes will be processed for the period necessary to achieve these purposes, taking into account the storage periods specified in the law, i.e.:

  • personal data processed for the purpose of taking action at your requestand performing the Agreement will be processed for the duration of such actions and, in the case of the conclusion and performance of the Agreement, for the duration of its validity, and after its termination, for the period of limitation of any claims arising from the Agreement;

  • for the purpose of performing tasks resulting from applicable law, which may include, among others, financial reporting, will be processed for a period of 5 years from the end of the calendar year in which the tax obligation arose;

  • for the purpose of pursuing the Company's legitimate interests, i.e., establishing, pursuing, and defending claims, handling complaints, conducting debt collection activities, archiving activities, analytical and statistical activities, customer satisfaction surveys, personal data will be processed until the expiry of the limitation period for all claims specified in the provisions of law;

  • for the purpose of marketing activities, including direct marketing of the Company's products and services, the data will be processed until the consent is revoked;

  • for the purpose of protecting the vital interests of the data subject, the data will be processed until the expiry of the limitation period for all claims specified in the provisions of law.

​

Disclosure of personal data

Personal data may be disclosed to employees or associates of RENTUJEMY, as well as to entities providing support to RENTUJEMY on the basis of commissioned services and in accordance with the concluded entrustment agreements, i.e., entities providing IT, HR and payroll, legal, including debt collection, administrative, postal, courier, marketing, and insurance services. insurance services. Personal data may also be transferred to entities affiliated with the
Operator.
 

Rights of data subjects

You have the following rights:

  • access to your data and rectification of data (Articles 15 and 16 of the GDPR). You can exercise this right whenever you notice that your data is incorrect or incomplete;

  • to erase and restrict the processing of data (Articles 17 and 18 of the GDPR). You may exercise this right when the data is no longer necessary for the purposes for which it was collected;

  • the right to data portability (Article 20 of the GDPR) when the processing is based on your consent or a contract concluded with you, and when the processing is carried out by automated means;

  • the right to object, including the right to withdraw consent at any time without affecting the lawfulness of the processing carried out on the basis of consent prior to its withdrawal.

  • the right to lodge a complaint with the President of the Personal Data Protection Office if you consider that the processing of your personal data violates the provisions of the GDPR.

 

Automated decision-making, including profiling

The data provided to us is not subject to decisions based solely on automated processing of personal data, including profiling.

 

Processing of personal data outside the European Economic Area

As a rule, RENTUJEMY does not transfer data outside the European Economic Area (hereinafter EEA). However, when using various popular services and technologies offered by entities such as Facebook, Microsoft, Google, and
subcontractors, there may be situations where the Company agrees to transfer personal data outside the EEA, but only when necessary and with the level of protection required by law, primarily through:

  • cooperation with entities processing personal data in countries for which a relevant decision has been issued by the European Commission;

  • the use of standard contractual clauses issued by the European Commission; • applying binding corporate rules approved by the competent supervisory authority;

  • in the case of data transfers to the United States of America (USA) – cooperation with entities participating in the Privacy Shield program, approved by Commission Implementing Decision (EU) 2016/1250 of July 12,
    2016 on the adequacy of the protection provided by the EU-US Privacy Shield (a list of US entities participating in this program is available at https://www.privacyshield.gov/list). Entities that have joined the Privacy
    Shield program guarantee that they will comply with the high standards of personal data protection that apply in the European Union, therefore the use of their services and technologies offered in the process of personal
    data processing is lawful. Where applicable, RENTUJEMY will inform you of its intention to transfer personal data outside the EEA at the time of collection.

​

Recipients of personal data

​

The recipients of personal data will be the following external entities cooperating with the Administrator:

​

  • accounting services company;

  • hosting companies;

  • debt collection agencies;

  • a company providing a contact platform;

  • companies providing instant messaging services;

  • companies providing tools for analyzing activity on the Websites and directing direct marketing to their users (including Google Analytics);

  • a newsletter service provider.

​

Final provisions

In matters not covered by the Policy, the generally applicable provisions on the protection of personal data shall apply.

bottom of page