Privacy policy

Who processes your data

What data we collect and why

We collect your e-mail address (required) and phone number (optional) when you open an individual room offer prepared for you. We also record the date of your consent, your IP address and information about your browser — solely so that we can demonstrate when and to what you consented.

• Our own marketing — sending information about available rooms and promotions. Legal basis: your consent (Art. 6(1)(a) GDPR) and Art. 398 of the Polish Electronic Communications Law.
• Showing you the offer prepared for you and contacting you about it. Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest (Art. 6(1)(f)).
• Keeping proof of consent and a list of people who asked for their data to be erased. Legal basis: the obligation to demonstrate consent (Art. 7(1) GDPR) and our legitimate interest in defending against claims (Art. 6(1)(f)).

What we measure on this site

To know which offers are being viewed and where interested people come from, we record openings of the list and of room pages, the time spent on the page, the type of device (phone / computer), the language of the page and a channel tag taken from the address (e.g. a link posted in a particular group).

• We do not use Google Analytics or advertising pixels, and there are no third-party scripts here. The measurement runs solely on our own server and the data never reaches anyone but us.
• We do not keep your IP address in these records — instead we derive a hash (a pseudonym). By default it comes from a random identifier stored in your browser, so we also recognise you on later visits and can see that you came back. You can switch this off in the cookie settings (see Cookies below) — the hash then changes every day and we cannot recognise you the next day.
• That identifier is random: it holds no name, no address and nothing taken from your device, and on its own it does not tell us who you are. It simply ties your successive visits together.
• Legal basis: our legitimate interest (Art. 6(1)(f) GDPR) in running and improving this listings site.
• These records are deleted after 90 days.

Referral programme (a link from a partner)

We work with people who recommend our flats. Each of them has their own link to this site. If you arrived through such a link, we want to know whom we owe the contact to — their fee depends on it.

• Within a single visit we recognise this from the page address alone and store nothing on your device.
• To make it work when you come back as well, we ask for your consent using a bar at the bottom of the page. Only after you click “Remember it” do we store one entry in your browser: the referral code (no name, no address, no personal identifier), for 30 days.
• Nothing is stored before you click “Remember it”, and refusing changes nothing — the offers, the prices and the form work exactly the same.
• Legal bases: your consent for the storage in your browser (Art. 173 of the Polish Electronic Communications Law) and our legitimate interest in settling the referral (Art. 6(1)(f) GDPR).
• You may withdraw your consent at any time — with the button below or by clearing this site’s data in your browser.

How we check whether the offer has been read

When you open the offer prepared for you, we record when that happened, how many times you opened it, which rooms you opened and how long the page stayed open, as well as whether you came back to it later. We also record your IP address and the type of device (phone / computer).

• We do this to know whether the offer reached you at all and what caught your interest — before we call you. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR) in conducting the conversation about a tenancy.
• We use no analytics cookies and no third-party tools for this (no Google Analytics, no advertising pixels). The measurement runs on our own server and never leaves it.
• This data is deleted together with the offer it relates to, and immediately if you ask us to erase your data.

The “Send an enquiry” form

Every offer has a form you can use to ask about a room without calling us. In it we collect your full name, a phone number or an e-mail address (one is enough — otherwise we have no way of replying), the content of your message and which offer the question is about.

• Answering your enquiry and discussing a tenancy. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in handling correspondence (Art. 6(1)(f)).
• The enquiry reaches our mailbox and the system we use to run our lettings — so that it does not get lost and so we know what we have already discussed.

Providing your details is voluntary, but without a way to contact you we cannot reply — you can call us on +48 459 569 461 instead.

Is providing your data mandatory

We ask for your e-mail address only to add you to the list of people we notify about available rooms. We ask for it in a pop-up you can close with a single click — closing it has no effect whatsoever on your access to the offer or on what you see on the page. Consent is given by clicking the button below the clause, and you can withdraw it at any time with one click in any message we send you.

How long we keep your data

Dane subskrybentów przechowujemy do momentu wycofania zgody.

• Your subscription takes effect the moment you give consent — there is no e-mail confirmation to click. We then send a single informational message with a link that unsubscribes you in one click.
• After you withdraw consent we keep the address itself on a suppression list, so that we never write to you again, together with the proof of your earlier consent.
• Offer links do not expire — they work until we revoke them. We keep the record of how the link was opened together with the link itself and delete it when we delete the link, or when you ask us to erase your data.
• Data from the enquiry form is kept for as long as we are discussing a tenancy with you, and afterwards for as long as we may need it to defend against claims. You can object or ask for deletion at any time — see “Your rights”.
• The referral entry (the referrer’s code) lives in your browser for 30 days and you can delete it at any time with the button in the “Referral programme” section.

Who we share your data with

The provider hosting this service and the provider of the mailbox we send messages from. We do not sell your data and we do not transfer it outside the European Economic Area.

We do not pass your data to the person who referred you — they receive neither your name, nor your phone number, nor your e-mail address, nor even a notification about your enquiry. All we settle with them is the fact that someone they referred signed a tenancy agreement.

Your rights

• to access your data and receive a copy of it,
• to have inaccurate data corrected,
• to have your data erased (the "right to be forgotten"),
• to restrict processing,
• to data portability,
• to object to processing based on legitimate interest,
• to withdraw your consent at any time — with a single click on the "unsubscribe" link in every message, or by e-mail to kontakt@wynajmijpokoj.pl. Withdrawing consent does not affect the lawfulness of processing carried out before it was withdrawn.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).

Cookies

On your first visit we show a box at the bottom of the page telling you about cookies. We use two: one remembers the choice you made in that box, the other holds a random identifier that lets us recognise a returning visitor in the traffic measurement described above. Both live for 181 days.

The identifier cookie is stored as soon as the page first opens, before you click anything — and we would rather say so plainly than leave you to work it out. You can switch it off: the “Preferences” button in that box (or the button below) opens the settings, where the Analytics cookies category can simply be turned off. The identifier is then deleted and the measurement keeps running, but anonymously — we will not recognise you the next day. You may also delete both cookies at any time in your browser settings.

Regardless of that consent, when you start filling in the “Send an enquiry” form or the newsletter sign-up field we store one technical session cookie — without it we could not protect the form against abuse. It disappears when you close your browser. If you close the pop-up asking for your e-mail, we remember that inside the browser tab itself (so that it does not come back during your visit) — that information is never sent to us. We use no advertising cookies and there are no third-party scripts or third-party analytics tools here. The map uses OpenStreetMap tiles.

If you arrived through a referral link and give your consent, we store one entry with the referrer’s code in your browser — this is described in the “Referral programme” section above. It is not a cookie: that information travels with no request and never reaches our logs.

Automated decisions and profiling

We do not make automated decisions about you and we do not profile you.