Privacy policy

The controller of your personal data is Alicja Stanek, the owner of Apartament Helenka Modern, ul. Pułkownika Franciszka Niepokólczyckiego 28/6, 41-813 Zabrze, Helenka. The flat is let privately, so the controller is a natural person rather than a company. To ask about your data, write to kontakt@helenka-modern.pl.

Only what you give yourself. The contact form has three fields: your email address, optionally a phone number, and your message. If you write to the address above or call instead, what is processed is whatever your message contains. The site does not create accounts, does not require registration and does not profile you.

If you fill in the registration card, it additionally contains: the guest's name and surname, a home address (never a national ID number or an identity document number), a phone number, an email address, the dates of the stay, the number of guests and, optionally, the names of the other guests. It goes only to the mailbox of the flat and is used solely for check-in.

Bookings are handled by Booking.com and Airbnb. The data you enter on those sites is collected by them, each on its own terms and under its own privacy policy, and we receive only what is needed to provide the stay.

To answer your question and, if a booking follows, to provide the stay and issue an accounting document. The legal bases, in order: your consent given by sending the form and steps taken before entering into a contract (Article 6(1)(a) and (b) GDPR), performance of the short term letting contract (point b), and tax and accounting obligations (point c). The data is not used to send advertising, you are not profiled, and nothing is passed to third parties for marketing.

Correspondence that did not lead to a booking is deleted after 12 months. Registration cards are kept for 12 months from the day of departure, unless the law requires a longer period. Data connected with a completed stay is kept as long as tax law requires, that is five years from the end of the year in which the tax became payable.

No. Giving your data is voluntary, but without an email address or a phone number there is no way to answer your message, and without booking details there is no way to provide the stay. You can withdraw consent at any time, which does not affect the lawfulness of processing carried out beforehand.

Three kinds of recipient. First, the hosting provider that runs this site and carries out the sending of the form. Second, the provider of the mailbox the messages arrive in. Third, the booking sites Booking.com and Airbnb, through which the calendar is kept. An accountant is added to that list if a stay ends with an invoice. The content of a form message passes through no intermediary company: it goes straight from our server to our mailbox.

Some of these companies are established outside the European Economic Area. In that case the transfer is based on the standard contractual clauses approved by the European Commission.

The site itself uses no analytics or advertising cookies. No visit statistics are collected and there is no remarketing.

A Google map is embedded on the home page and the contact page. We load it only with your consent, given in the banner or with the "Show the map" button. Google then learns your IP address and may store its own cookies in your browser, in line with its privacy policy. We have no access to that data.

The forms (contact and registration card) are protected against bots by Google reCAPTCHA v3. Its script loads only when you click into a form field. Google then learns your IP address and browser details, uses them to judge whether a human is filling in the form, and may store its own cookies, in line with its privacy policy and terms of service. The basis is our legitimate interest in protecting the forms from abuse (Article 6(1)(f) GDPR). The content of your message does not go to Google.

Your choice is remembered in the browser's own storage (not in a cookie, and it is never sent anywhere) for twelve months. You can change it at any time with the "Cookie settings" button in the footer.

The links to Booking.com and Airbnb are ordinary links. Those services learn nothing about you until you click one.

You have the right to access your data, to have it corrected, erased or its processing restricted, to have it transferred, and to object. A message to the address above is enough. You may also lodge a complaint with the President of the Personal Data Protection Office in Poland.

This is a translation provided for convenience. In case of any discrepancy, the Polish version prevails.