Privacy policy

Protection of personal data GDPR

In accordance with art. 13 of the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27.04.2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repelling the Directive 95/46/EC (general data protection regulation) (Official Journal of the EU L 119) I am informing that:

1) The Nearto.pl apartments are the administrator of the personal data of the customer
The Nearto.pl apartments are obliged to process their clients’ data as part of activities related to the implementation of the Agreement and to protect them against access, use, deletion or disclosure to third parties, as well as to process entrusted data in a manner consistent with applicable law in a manner that guarantees confidentiality and security of personal data.
2) The Customer’s personal data will be processed in order to use hotel services – pursuant to Art. 6 par. 1 lit. b) – the processing is necessary for the performance of a contract which party is a person to whom the data relate, or to undertake actions at the request of the person to whom the data relate, before the conclusion of the contract.         
3) The Customer agrees to the processing of his personal data such as: name and surname, address of residence, identity card details, contact phone number, e-mail and possibly data of his business activities necessary to issue an invoice, in order to: sign the rental contract, i.e. make a reservation and check-in at the facility, issue and storage of invoices.    
4) The recipients of the customer’s personal data will only be entities authorized to obtain personal data on the basis of legal provisions and entities participating in the provision of services.
5) The Customer agrees to the transfer of his personal data to the reception personnel of the facility for the proper operation of our services that you use.         
6) Customer’s personal data will be stored for a period of 10 years.          
7) The customer has the right to request from the administrator access to personal data, the right to rectify, delete or limit processing it and the right to transfer data.  
8) The customer has the right to lodge a complaint with the supervisory authority.
9) Providing personal data is voluntary, however, refusal to provide data may result in refusal to provide the implementation of the service/contract.          

Privacy policy

By using our services to rent and sell apartments, you entrust us with your information.

The privacy policy serves as an aid in understanding what data we collect and for what purpose and for what it is used. This information is important, therefore they should be read carefully.

Who is the data administrator?

The Nearto.pl apartments are the administrator of your personal data.

What data do we process?

We process data that you provide or leave as part of using the Agreement. The collected personal data includes all information made available both in the concluded contract and at further stages of the contract, including primarily: name, surname, address, e-mail address, telephone number, PESEL, ID card number, bank card numbers.

The data administrator and his contact details

It is a person who can be contacted in all matters regarding the processing of personal data and the exercise of rights related to this processing. If you want to contact the data protection administrator, use the contact details provided below:

Correspondence address: biuro@nearto.pl

What are the purposes and legal basis for processing your personal data and for what period will it be processed?

The legal grounds for processing your data for specific purposes are as follows:

The purposes of data processing:

performance of the contract between the Administrator – use (these contracts are usually the regulations that the User accepts before using a given Service), including the provision of Services to Users, including matching the Services to Users’ needs, analysing and improving the Services and ensuring the security of the Services (hereinafter “performance of Services”)

Legal grounds:

art. 6 par. 1 lit b) GDPR – the necessity to perform the contract to which the User is a party

Processing period:

until the expiry of a given agreement between you and the Administrator, with the provisions that sometimes this data may also be processed after the expiry of this agreement, however only if it is allowed or required by applicable law, e.g. processing for statistical and billing purposes, for the purpose of pursuing claims or processing personal data that result from current information about entities entered into the National Court Register and certificates from the Central Register and Information on Economic Activity

The purposes of data processing:

Providing the apartment rental service, and:

statistical measurements        
marketing (including analysing and profiling data for marketing purposes) of products and services of the administrator (hereinafter also “own marketing”).

Legal grounds:

art. 6 par. 1 lit. f) GDPR – justified interest of the administrator.

Processing period:

until the withdrawal of the consent

The purposes of data processing:

marketing (including analysing and profiling data for marketing purposes) regarding third-party products and services (hereinafter “third party marketing”).

Legal grounds:

art. 6 par. 1 lit. a) – voluntary consent

Processing period:

until the withdrawal of the consent

  1. To what recipients will your personal data be transferred?

To the extent necessary to provide services to you. Entities authorized to obtain them on the basis of applicable law, e.g. law enforcement authorities, if the authority makes a request on an appropriate legal basis (e.g. for the purposes of pending criminal proceedings).

What are your rights related to the processing of personal data?

You have the following rights in relation to the processing of your data by us:

  • the right to access your data, including obtaining a copy of the data,
  • the right to request correction of data,
  • the right to delete data (in certain situations),
  • the right to lodge a complaint to the supervisory body dealing with the protection of personal data,
  • the right to limit data processing.

If your data is processed on the basis of consent, you can additionally exercise the following rights:

  • the right to withdraw consent to the extent it is processed on this basis. Withdrawal of consent does not affect the lawfulness of the processing that was carried out on the basis of consent before its withdrawal.

If your data is processed on the basis of consent or as part of the service provided (the data is necessary to provide the service), you can additionally exercise the following rights:

  • the right to transfer personal data, i.e. to receive your personal data from the administrator in a structured, commonly used machine-readable format. You can send this data to another administrator.

In order to exercise the above rights, please contact the Administrator. Personal data will be deleted within 30 days of the receipt of the notification.