PRIVACY POLICY
This Privacy Policy sets out the rules for the processing of personal data and the use of cookies in connection with the use of the website feniks-pegaz.pl.
The data controller is the person conducting the business activity related to the rental of Feniks & Pegaz apartments.
1. Data Controller
The data controller is the owner of the feniks-pegaz.pl website, operating the Feniks & Pegaz apartment rental business in Świnoujście, Poland.
You can contact the Data Controller:
by telephone using the phone numbers provided on the website,
via the contact forms available on the website,
via the email addresses provided for individual apartments.
2. What personal data do we process?
Depending on how you contact us, we may process, in particular:
first and last name,
email address,
telephone number,
the content of a message submitted via a contact form,
information concerning your planned stay or inquiry about apartment availability,
data necessary to make or manage a reservation,
technical data related to the use of the website, such as IP address, date and time of connection, and information about your browser and device.
Providing data marked as required in a form is voluntary, but may be necessary for us to respond to your inquiry or process your reservation.
3. For what purposes do we process personal data?
Personal data may be processed for the following purposes:
- responding to inquiries submitted via contact forms;
- handling inquiries concerning apartment availability and reservations;
- contacting persons interested in renting an apartment;
- entering into and performing apartment rental agreements;
- processing payments and fulfilling accounting or other related obligations, where applicable;
- establishing, pursuing or defending against potential claims;
- maintaining correspondence and documentation related to customer service;
- ensuring the proper operation and security of the website;
- carrying out statistics and analyzing the use of the website – solely to the extent of the analytical tools used on the website and in accordance with the rules described in the section concerning cookies;
- sending marketing communications where the user has provided the appropriate consent or where another lawful basis permits such activities.
4. Legal basis for processing personal data
Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).
Depending on the circumstances, the legal basis for processing may be:
Article 6(1)(b) GDPR – processing necessary for taking steps at the request of the data subject prior to entering into a contract or for the performance of a contract;
Article 6(1)(c) GDPR – processing necessary for compliance with a legal obligation to which the Data Controller is subject;
Article 6(1)(f) GDPR – processing necessary for the purposes of the legitimate interests pursued by the Data Controller, in particular the handling of correspondence, ensuring website security, and establishing, pursuing or defending against claims;
Article 6(1)(a) GDPR – the consent of the data subject, where consent is required.
Where processing is based on consent, the user may withdraw their consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
5. Contact forms
The feniks-pegaz.pl website allows users to submit inquiries regarding apartment availability.
Users may be asked to provide, among other things:
first and last name,
email address,
telephone number,
the content of the message.
Data submitted via the contact form is used in particular to respond to the inquiry and to handle the reservation process.
Users should provide only the data necessary to process their inquiry.
6. Recipients of personal data
Personal data may be disclosed to entities that support the Data Controller in operating the website and providing customer service, in particular:
the website hosting and server provider,
email service providers,
entities providing IT and administrative services,
payment service providers, where this is related to the processing of a reservation,
entities authorized to receive such data under applicable law.
Data is disclosed only to the extent necessary to achieve the relevant purpose.
7. Transfers of personal data outside the European Economic Area
If, in connection with the use of services provided by external providers, personal data is transferred outside the European Economic Area, the Data Controller ensures that appropriate safeguards required by the GDPR are applied.
Information concerning specific providers and the data protection mechanisms they use may be available in the documentation relating to the external services used on the website.
8. Data retention period
Personal data is stored for the period necessary to fulfil the purpose for which it was collected.
In particular:
data related to contact inquiries is stored for the period necessary to handle the inquiry and complete the related correspondence;
data related to reservations and the performance of contracts is stored for the period required by law or for the period necessary to establish, pursue or defend against claims;
data processed on the basis of consent is stored until consent is withdrawn, unless another legal basis permits further processing.
The retention period may be extended where this is necessary due to legal obligations or ongoing proceedings.
9. Rights of data subjects
Every person whose personal data is processed has, subject to the conditions and limitations set out in the GDPR, the following rights:
the right to access their personal data;
the right to rectify inaccurate or incomplete data;
the right to erasure of personal data;
the right to restrict processing;
the right to data portability;
the right to object to the processing of personal data;
the right to withdraw consent where processing is based on consent.
To exercise any of these rights, please contact the Data Controller using the contact details provided on the website.
Data subjects also have the right to lodge a complaint with the competent supervisory authority, in particular the President of the Personal Data Protection Office (UODO) in Poland, if they believe that the processing of their personal data violates the GDPR.
10. Cookies
The feniks-pegaz.pl website may use cookies and similar technologies.
Cookies are small files stored on the user’s device when visiting a website.
Depending on their purpose, cookies may be used, among other things, to:
ensure the proper functioning of the website;
remember user preferences;
ensure security;
create statistics concerning the use of the website;
improve the functionality and performance of the website.
Cookies may be placed by the Data Controller as well as by third parties whose services are used on the website.
Users may change their cookie settings in their web browser. However, disabling or restricting certain cookies may affect the operation of some website functions.
11. Technical data and security
When using the website, technical information may be processed automatically, such as the IP address, date and time of connection, device type, operating system, browser type and basic information concerning the use of the website.
This data may be used primarily to ensure the proper operation of the website, detect errors, prevent abuse and ensure the security of the IT infrastructure.
The Data Controller applies appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or unauthorized access.
12. Voluntary provision of data
Providing personal data is voluntary.
However, in the case of contact forms, failure to provide the data necessary to respond may make it impossible to process the inquiry or contact the person interested in renting an apartment.
13. Automated decision-making and profiling
Users’ personal data is not used to make decisions that produce legal effects concerning them or similarly significantly affect them solely through automated processing.
Unless additional tools involving profiling are implemented on the website, users’ data is not subject to profiling within the meaning of the GDPR.
14. Changes to the Privacy Policy
The Data Controller may update this Privacy Policy, in particular in the event of:
changes in applicable law;
changes to the functionality of the website;
the introduction of new services or tools;
changes in the way personal data is processed.
The current version of the Privacy Policy is published on feniks-pegaz.pl.
15. Contact
For matters relating to the protection of personal data, you can contact the Data Controller using the contact details available on feniks-pegaz.pl, in particular via the email addresses and telephone numbers provided for the individual apartments.
Last updated: 25 September 2026