top of page

Privacy Policy

I. Data Controller

The controller of your personal data is Przyjazny Najem sp. z o.o., with its registered office in Poznań at ul. Wielka 18/15 (hereinafter referred to as the “Controller” or the “Company”).

Contact regarding personal data protection: rodo@friendlyapartments.pl
Postal address: Przyjazny Najem sp. z o.o., ul. Wielka 18/15, Poznań.

The Controller processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and other applicable laws.

​

II. Contact regarding your personal data and processing rules

For matters related to the processing of personal data, please contact us by email at rodo@friendlyapartments.pl or by post at: Przyjazny Najem sp. z o.o., ul. Wielka 18/15, Poznań.

​

III. Purposes and legal bases for processing personal data

To provide services within the scope of its business activity (management and handling of apartment reservations and related services), the Controller processes personal data for various purposes, always in accordance with the law. Below we indicate the detailed purposes together with their legal bases and an example scope of data.

1) Performance of an accommodation services agreement together with related services (e.g. cleaning, parking, breakfast, if available)
Scope of data: first and last name, residential/registered address (if required), citizenship/nationality (if required), date of birth (if required), identification document number (if required), phone number, email address, vehicle registration number (if provided), reservation and stay details.
Legal basis: Article 6(1)(b) GDPR, necessity for the performance of a contract.

2) Provision of services via the reservation system (on friendlyapartments.pl or partner widgets) and operational communication
Scope of data: first and last name, email address, phone number, reservation identifiers.
Legal basis: Article 6(1)(b) GDPR.

3) Handling complaints and requests
Scope of data: first and last name, email address, reservation number, and if a refund is made, the refund address and bank account number.
Legal basis: Article 6(1)(b) GDPR and, for the establishment or pursuit of claims, Article 6(1)(f) GDPR (legitimate interest).

4) Ensuring service quality, satisfaction surveys, requests for reviews, information about own offers
Scope of data: first and last name, email address, phone number (if provided), review content.
Legal basis: Article 6(1)(f) GDPR (legitimate interest in service development and quality improvement); where consent is required for electronic communication, Article 6(1)(a) GDPR.

5) Evidential and archival purposes
Scope of data: identification and contact details, reservation number, billing data, correspondence.
Legal basis: Article 6(1)(f) GDPR (legitimate interest in retaining evidence).

6) Establishment, pursuit or defence of claims
Scope of data: first and last name, address, PESEL or NIP (if provided), email address, reservation number, identification document number (if required), other data necessary to assert rights.
Legal basis: Article 6(1)(f) GDPR (protection of rights).

7) Loyalty or membership programme (if offered)
Scope of data: first and last name, email address, phone number, possibly correspondence address.
Legal basis: Article 6(1)(a) GDPR, consent.

8) Creation of registers and records required by GDPR (e.g. registers of objections or processing restrictions)
Scope of data: first and last name, email address and other data necessary to exercise rights.
Legal basis: Article 6(1)(c) GDPR (legal obligation) and Article 6(1)(f) GDPR (accountability).

9) Issuing invoices and fulfilling tax and accounting obligations
Scope of data: first and last name or company name, residential/registered address, NIP (if applicable), reservation number, amounts and transaction details.
Legal basis: Article 6(1)(c) GDPR in conjunction with tax and accounting regulations.

10) Use of cookies and similar technologies
Scope of data: online identifiers, IP address, browser and device information, website events, preferences.
Legal basis: for essential cookies, Article 6(1)(f) GDPR; for analytical, functional or marketing cookies, Article 6(1)(a) GDPR (consent).

11) Website administration and security
Scope of data: IP address, server date and time, browser and operating system information (server logs).
Legal basis: Article 6(1)(f) GDPR (ensuring proper operation and security of the website).

12) Web analytics (analysis of activity on the website)
Scope of data: date and time of visit, operating system and browser type, approximate location, time spent on the website, visited subpages.
Legal basis: Article 6(1)(f) GDPR (legitimate interest in understanding user activity and improving the website); where consent is required, Article 6(1)(a) GDPR.

Cookie information

1. General Information

This policy applies to the website available at friendlyapartments.pl.
The website operator and the personal data controller is Przyjazny Najem sp. z o.o., with its registered office in Poznań at ul. Wielka 18/15.
Contact email: info@friendlyapartments.pl

The Operator is the controller of your personal data with respect to data voluntarily provided via the website.
Personal data is used to present offers or information.
The website collects information about users and their behaviour in the following ways:

  • through data voluntarily entered in forms and stored in the Operator’s systems,

  • through cookies stored on users’ end devices.

2. Selected Data Protection Measures

Login areas and personal data forms are secured at the transmission level using an SSL certificate. This ensures that personal and login data entered on the website is encrypted on the user’s device and can only be read by the target server.
The Operator regularly performs data backups.
All software used for personal data processing is regularly updated to maintain a high level of security.

3. Hosting

The website is hosted and technically maintained on servers provided by wix.com.

4. Your Rights and Additional Information

In certain situations, the Controller may transfer your personal data to other recipients if necessary to perform a contract or fulfil legal obligations. This may include:

  • the hosting provider (under a data processing agreement),

  • authorised employees and collaborators using data to operate the website.

Personal data is processed only for as long as necessary to fulfil the purposes defined by applicable regulations. Marketing data will not be processed for longer than 3 years.

You have the right to request from the Controller:

  • access to your personal data,

  • rectification,

  • erasure,

  • restriction of processing,

  • data portability.

You also have the right to object to processing based on the Controller’s legitimate interests, including profiling, unless there are overriding legal grounds, in particular for establishing, pursuing or defending claims.

You may lodge a complaint with the President of the Polish Personal Data Protection Office (PUODO), ul. Stawki 2, 00-193 Warsaw.
Providing personal data is voluntary but necessary to use the website.

Automated decision-making, including profiling, may be used to provide services under a contract or for the Controller’s direct marketing activities.
Personal data is not transferred outside the European Union.

5. Information in Forms

The website collects information voluntarily provided by users, including personal data.
It may record connection parameters such as time and IP address.
In some cases, the website may store information enabling the linking of form data with the user’s email address.

Data provided in forms is processed for purposes related to the specific function of the form, such as handling service requests, commercial contact or service registration.

6. Administrator Logs

Information about user behaviour on the website may be logged and used for website administration.

7. Important Marketing Techniques

The Operator uses statistical analysis tools such as Google Analytics (Google Inc., USA), based on anonymised data and cookies.
Remarketing techniques may be used to tailor advertising messages, without transferring personal data to advertising partners.
The Operator uses the Facebook Pixel, allowing Facebook to identify that a registered user visited the website, based on cookies.
Heatmaps and session recordings may be used in anonymised form to analyse website usage, excluding passwords and personal data.
Automated tools may be used to send emails after specific interactions, subject to user consent.

8. Cookie Information

The website uses cookies, which are small text files stored on the user’s device. Cookies contain information such as the website name, storage duration and a unique identifier.

Cookies are used to:

  • maintain user sessions after login,

  • achieve the marketing purposes described above.

Session cookies are temporary and deleted when the browser is closed. Persistent cookies remain stored for a specified period or until deleted by the user.

Users may manage cookies via browser settings, including deletion or blocking. Restricting cookies may affect certain website functionalities.
Cookies may also be used by partners such as Google, Facebook and Twitter.

9. Managing Cookies

Users can change browser settings to block cookies. Disabling essential cookies related to authentication, security or user preferences may limit or prevent proper use of the website.

bottom of page