Privacy Policy of miejskinajem.pl

Effective from: November 16, 2025

1. General Information

This Privacy Policy defines the rules for processing personal data of users of the miejskinajem.pl website, customers making accommodation reservations, and property owners cooperating with the miejskinajem.pl brand, owned by Borso Sp. z o.o. This policy has been prepared in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR).

2. Data Controller

The data controller is: Borso Sp. z o.o. ul. Bukowska 25/28, 60-501 Poznań, Poland Tax ID: 7812067305 Contact email for GDPR matters: kontakt@miejskinajem.pl

3. Scope and Categories of Processed Data

The Administrator may process the following personal data: 3.1. Data of miejskinajem.pl website users - first and last name, - email address, - phone number, - data submitted via contact form, - data submitted via valuation form (owner data, property data), - technical data: IP address, server logs, cookie identifiers. 3.2. Property owners' data - first and last name / company name, - address data, - Tax ID (if applicable), - phone number and email, - data necessary for concluding and servicing rental management agreements, - data required for settlements. 3.3. Guest booking data Data is collected: - directly from the guest, - from booking portals (Airbnb, Booking.com, private booking forms), - from the hospitable.com reservation management system. The scope of data may include: - first and last name, - email address, - phone number, - reservation data (dates, number of guests, preferences), - voluntarily provided information. The Administrator does not use video monitoring or noise sensors in managed properties.

4. Purposes and Legal Bases for Data Processing

The Administrator processes personal data for the following purposes: 4.1. Performance of services and contracts - preparation of quotations and offers, - handling contact forms and inquiries, - concluding and executing rental management agreements, - processing accommodation reservations. Legal basis: Article 6(1)(b) GDPR. 4.2. Legal obligations of the Administrator - accounting and tax handling, - obligations arising from accounting regulations. Legal basis: Article 6(1)(c) GDPR. 4.3. Legitimate interest of the Administrator - operational contact, - ensuring information security, - pursuing claims and defending against claims, - quality analysis of services. Legal basis: Article 6(1)(f) GDPR. 4.4. Marketing of Administrator's services - sending marketing communications. Basis: Article 6(1)(a) GDPR (consent). The Administrator does not operate a referral program.

5. Data Sources

The Administrator obtains personal data: - directly from users and customers, - through forms available on the website, - from booking portals (Airbnb, Booking.com), - from the hospitable.com tool (calendar and reservation synchronization), - from cookies.

6. Data Retention Period

Data is stored: - contractual data – for the duration of the contract and until the expiry of the limitation period for claims, - accounting data – 5 years from the end of the tax year, - contact data – maximum 12 months from last activity, - marketing data – until consent is withdrawn, - technical data – according to browser settings.

7. Data Recipients

Data may be transferred to: - accounting firms, - IT and hosting companies, - website service providers, - companies providing cleaning and property maintenance services, - booking portals, - payment service providers, - legal or debt collection firms, - analytical tool providers (Google Analytics). Data is not sold to third parties.

8. Rights of Data Subjects

Each person whose data is processed has the right to: - access to data, - rectification, - erasure ("right to be forgotten"), - restriction of processing, - data portability, - object to processing, - withdraw consent (if given). Complaints can be directed to the President of the Personal Data Protection Office.

9. Cookies

The website uses cookies for: - proper functioning of the service, - traffic analysis (Google Analytics), - content customization. Users can manage cookies through browser settings.

10. Analytical Tools

The service uses Google Analytics (GA4). Data may be transferred to Google in accordance with GDPR and standard contractual clauses. The Administrator does not use advertising pixels or profiling tools.

11. Automated Decisions and Profiling

The Administrator does not make automated decisions and does not use profiling.

12. Data Transfer Outside the European Economic Area

Data may be transferred outside the EEA only as part of using Google Analytics services. In such cases, standard contractual clauses ensuring data protection are applied.

13. Processing of Property Owners' Data

This policy also covers data of owners with whom rental management agreements are concluded. Data is processed: - for the purpose of preparing and executing the contract, - for settlement purposes, - as part of operational contact, - for archival and claim purposes. Legal basis: Article 6(1)(b) and (f) GDPR.

14. Contact

For matters concerning personal data protection, you can contact the Administrator: kontakt@miejskinajem.pl

We reserve the right to change this Privacy Policy at any time, so please review it regularly. Changes and clarifications take effect immediately upon publication on the website. If we make significant modifications, we will notify you here so you know what data we collect, how we use it, and under what circumstances it may be disclosed.