Privacy clause on processing personal data when booking and entering a short-term apartment lease.
Under Art. 13(1)–(2) GDPR (Regulation (EU) 2016/679), we inform you:
1. Controller: Meta Apartments Limited Liability Company, Limited Partnership, registered office Szczyrk (43-370), Willowa 14 St., entered in the National Court Register (KRS) No. 0000730401, NIP 9372711759, REGON 380078536.
2. You may contact the Controller:
by mail: Willowa 14, 43-370 Szczyrk,
email: daneosobowe@metaapartments.pl,
3. No Data Protection Officer appointed, as this duty does not apply to the Controller.
4. Your personal data will be processed for the following purposes:
- accepting and managing apartment bookings,
- concluding and performing a short-term lease
- contact about matters related to fulfilling bookings or your stay,
- issuing an invoice or other accounting document,
- meeting legal obligations, in particular tax and accounting requirements,
- handling complaints,
- establishing, pursuing, or defending against any potential claims.
5. The legal basis for processing personal data is:
- GDPR Art. 6(1)(b) – steps before concluding an agreement and performance of the concluded
- Article 6(1)(c) of the GDPR – fulfilling legal obligations incumbent upon the Controller, in particular those arising from tax and accounting regulations,
- Article 6(1)(f) of the GDPR – pursuing the Controller’s legitimate interests consisting of establishing, pursuing, or defending against claims and ensuring the security of the business activity.
Personal data provision is voluntary; however, it is required to make a booking and to conclude and perform the agreement.
7. Recipients of personal data may include entities providing services to the Controller necessary to carry out its activities, in particular suppliers of booking systems, payment operators, banks, an accounting office, law firms, IT and hosting service providers, postal and courier operators, as well as entities authorized to receive data under applicable legal provisions. If these entities process data on behalf of the Controller, this is done on the basis of a data processing agreement in accordance with Article 28 of the GDPR.
8. As a rule, personal data is not transferred outside the EEA. If such transfer is required to use technology providers’ services, it will occur only if GDPR Chapter V requirements are met.
9. Personal data will be stored:
- for the period needed to carry out the booking and perform the
- for the period required by law for retaining accounting and tax documentation,
- until the statute of limitations for claims under the concluded agreement
10. The data subject is entitled to:
- access to their data,
- rectification of data,
- erasure of data in the cases provided for by law,
- restriction of processing,
- data portability,
- object to the processing of personal data based on Article 6(1)(f) of the GDPR,
- lodge a complaint with the President of the Office for Personal Data Protection, Stawki 2,