Apartamenty Baj, feel at home Apartment
Wieczorynki 63
← Home page Call 505 029 434

Privacy policy

This page explains what personal data we collect in connection with bookings and the apartment’s website, why, how long we keep it and what rights you have.

In force from 27 October 2026

Note. This English text is a translation for information only. The Polish version of the policy is the binding one.

1. Data controller

  1. 1.1The controller of your personal data is Honesto.manager Aneta Karaś, ul. Strzelecka 118c/7, 63-400 Ostrów Wielkopolski, Poland, tax ID (NIP) 622-269-96-53 (the “Controller”).
  2. 1.2For data protection matters contact rezerwujnocleg123@gmail.com or call 505 029 434.

2. What data, why and on what legal basis

  1. 2.1Accommodation enquiry (phone, SMS, WhatsApp, e-mail): your name, phone number or e-mail address, dates, number of people and the content of your message. We use it to reply and prepare an offer (Article 6(1)(b) GDPR, steps prior to entering into a contract). If no booking follows, we keep the enquiry for up to 12 months to defend against possible claims and to contact you again at your request (Article 6(1)(f) GDPR).
  2. 2.2Booking and stay: names of the people accommodated, contact details, dates, billing details and, at the Controller’s request, the data needed for check-in, including proof of identity (for example a registration card). We use it to perform the contract (Article 6(1)(b) GDPR) and to keep guests and the property safe (Article 6(1)(f) GDPR).
  3. 2.3Invoices and accounting: company name or your name, address, tax ID (NIP), transaction data. We process it because tax and accounting law requires it (Article 6(1)(c) GDPR), and we keep it for 5 years from the end of the tax year in which the tax liability arose.
  4. 2.4Establishing and defending claims (for example damage, an unpaid stay): data from the contract and correspondence, until the claims become time-barred (Article 6(1)(f) GDPR).
  5. 2.5Video monitoring: recorded images from the car park, the entrance in front of the hostel and the garden behind the hostel. The hostel’s common areas (the corridors upstairs and downstairs and the kitchen) are also monitored; Apartment guests do not use them. It serves the safety of people and property (Article 6(1)(f) GDPR). Recordings are kept for up to 14 days and are overwritten automatically, so we cannot guarantee that a recording of a given event is still available. We keep a recording longer only if it is needed in proceedings. The inside of the Apartment is not monitored.
  6. 2.6Consent (Article 6(1)(a) GDPR) is a basis only where we expressly ask for it, for example to send marketing information. You can withdraw it at any time, without affecting the lawfulness of earlier processing.

3. Who receives your data

  1. 3.1The providers whose services we use to handle bookings: the RoomAdmin booking system and calendar (roomadmin.pl), Google e-mail and drive, the WhatsApp messenger, website hosting and DNS (Cloudflare), and our accounting office AMT.
  2. 3.2Public authorities and other bodies where the law requires us to hand over data.
  3. 3.3Providers process data on our behalf or on their own account, under their own terms and privacy policies. We do not sell data.

4. Transfers outside the European Economic Area

  1. 4.1Some providers (for example Google, Cloudflare, and Meta as the owner of WhatsApp) may process data outside the EEA, including in the United States. This happens under a European Commission adequacy decision (the Data Privacy Framework) or standard contractual clauses.

5. Website and cookies

  1. 5.1The website does not use its own cookies, analytics or advertising tools. The hosting provider may use technical security mechanisms and keep IP addresses in server logs so that the site works and is protected.
  2. 5.2The buttons “Check dates online”, “WhatsApp” and “Show on map” lead to external services (RoomAdmin, WhatsApp, Google Maps). Once you go there, their own terms and privacy policies apply.

6. Your rights

  1. 6.1You have the right to access your data, to have it corrected or erased, to restrict its processing, to data portability, and to object to processing based on legitimate interests (Articles 15–21 GDPR).
  2. 6.2Where we process data on the basis of consent, you can withdraw it at any time.
  3. 6.3To use these rights, write to rezerwujnocleg123@gmail.com. We reply within a month.
  4. 6.4You have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland).

7. Whether providing data is required, and automated decisions

  1. 7.1Providing data is voluntary, but it is needed to make a booking and to issue an invoice. Without it we cannot accept a booking.
  2. 7.2We make no automated decisions about you and we do not profile you.

8. Changes to this policy

  1. 8.1We publish the current version on this page, with its effective date. The rules for booking and staying are in the terms.