Privacy Policy

This Privacy Policy explains how personal data is collected, used, stored and protected in connection with the use of the website purestayrental.com, hereinafter referred to as the “Website”.

The privacy of Website visitors, guests and persons contacting the Website owner is respected. Personal data is processed in accordance with applicable data protection laws, including the General Data Protection Regulation, where applicable.

1. Data Controller

The controller of personal data collected through the Website is:

Krzysztof Wawrzyniak
owner and operator of the Website purestayrental.com

Telephone: +1 (949) 887-6204

Krzysztof Wawrzyniak is referred to in this Privacy Policy as the “Controller”.

For all matters relating to privacy and personal data, you may contact the Controller using the telephone number provided above.

2. Scope of this Privacy Policy

This Privacy Policy applies to personal data processed in connection with:

  • visiting and using the Website;

  • submitting a contact form;

  • contacting the Controller by telephone or WhatsApp;

  • sending an enquiry about a property, available dates or a stay;

  • discussing or making a reservation;

  • entering into or performing an accommodation or rental agreement;

  • handling complaints, requests and claims;

  • using external services linked from the Website.

External websites, booking platforms, payment providers and communication services may apply their own privacy policies and terms of service.

3. Personal Data That May Be Collected

Depending on how you use the Website and communicate with the Controller, the following categories of personal data may be processed.

Contact information

  • first and last name;

  • email address;

  • telephone number;

  • WhatsApp account information made available during communication;

  • preferred method of contact.

Enquiry and reservation information

  • property or destination you are interested in;

  • requested arrival and departure dates;

  • number of guests;

  • content of your enquiry;

  • information necessary to prepare or manage a reservation;

  • correspondence relating to your stay;

  • information concerning additional requests or services.

Please do not provide special categories of personal data, such as information concerning your health, unless it is necessary to fulfil a specific request relating to your stay.

Contractual and payment information

Where a reservation or rental agreement is concluded directly with the Controller, the following information may be processed:

  • address and billing information;

  • reservation details;

  • payment information and payment status;

  • invoices and accounting documents;

  • information required to perform the agreement;

  • information required to comply with applicable legal obligations.

The Website does not normally collect complete payment card information directly. Where payments are processed by an external booking or payment provider, that provider processes payment information in accordance with its own terms and privacy policy.

Technical and Website usage information

When you visit the Website, certain technical information may be recorded automatically, including:

  • IP address;

  • date and time of the visit;

  • browser type and version;

  • device type;

  • operating system;

  • referring website;

  • pages visited;

  • server request information;

  • information stored through cookies or similar technologies.

4. Purposes and Legal Bases for Processing

Personal data may be processed for the following purposes.

Responding to enquiries

Contact details and the content of correspondence may be processed to respond to questions concerning properties, availability, reservations and stays.

The legal basis for processing is:

  • taking steps at your request before entering into an agreement; or

  • the Controller’s legitimate interest in communicating with Website visitors and potential guests.

Preparing and managing reservations

Personal data may be processed to:

  • check property availability;

  • prepare an offer;

  • confirm a reservation;

  • communicate before, during and after a stay;

  • provide accommodation or rental services;

  • manage changes or cancellations;

  • provide guest support;

  • deal with complaints.

The legal basis is the necessity of processing in order to take steps before entering into an agreement or to perform an agreement.

Compliance with legal obligations

Personal data may be processed to comply with accounting, tax, consumer protection and other legal obligations applicable to the Controller.

The legal basis is compliance with a legal obligation.

Establishing, pursuing or defending claims

Personal data may be processed where necessary to establish, pursue or defend legal claims.

The legal basis is the Controller’s legitimate interest in protecting his rights and defending against claims.

Website security and administration

Technical data and server logs may be processed to:

  • ensure the proper operation of the Website;

  • identify and resolve technical errors;

  • prevent fraud and abuse;

  • protect the Website against unauthorised access;

  • maintain the security of the Website and associated systems.

The legal basis is the Controller’s legitimate interest in maintaining the security and proper operation of the Website.

Analytics and marketing

Where analytics or advertising tools are enabled, personal data may be processed to:

  • measure Website traffic;

  • understand how visitors use the Website;

  • improve Website content;

  • measure advertising effectiveness;

  • create advertising audiences;

  • display personalised or non-personalised advertisements.

Where required by law, such processing takes place only after you have provided consent through the Website’s cookie consent tool.

You may withdraw or change your consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

5. Contact Form

The Website may include a contact form through which you can provide:

  • your first and last name;

  • email address;

  • subject of the enquiry;

  • message content.

Providing information marked as mandatory is necessary to submit the form and receive a response. Providing any additional information is voluntary.

Data submitted through the contact form is processed only for purposes connected with:

  • responding to your enquiry;

  • checking property availability;

  • preparing a potential reservation;

  • performing an agreement;

  • conducting further correspondence resulting from your request.

6. Telephone Contact

When you contact the Controller by telephone, the Controller may process:

  • your telephone number;

  • your name, where provided;

  • the subject of the conversation;

  • information concerning a property, reservation or stay;

  • information necessary to respond to your request.

Providing such information is voluntary but may be necessary to respond to your enquiry or arrange a reservation.

7. Contact Through WhatsApp

The Website may contain links allowing users to contact the Controller through WhatsApp.

When you use WhatsApp, your personal data may also be processed by the operator of the WhatsApp service in accordance with its own privacy policy and terms of service. Such information may include:

  • your telephone number;

  • profile information;

  • device information;

  • communication metadata;

  • content of messages and attachments.

The Controller processes the correspondence and contact details provided through WhatsApp to:

  • respond to your enquiry;

  • provide information about a property;

  • discuss availability;

  • arrange or manage a reservation;

  • provide support relating to your stay.

Using WhatsApp is voluntary. You may contact the Controller by telephone or through the Website’s contact form instead.

8. External Maps and Links

The Website may contain links to Google Maps or other external mapping and navigation services.

When you select an external link, you leave the Website. The provider of the external service may process information such as:

  • your IP address;

  • device information;

  • approximate or precise location;

  • activity within the external service.

The Website may also contain links to booking platforms, payment providers, social media services or websites operated by third parties.

The Controller is not responsible for the privacy practices, security or content of external websites. Before using an external service, you should review its privacy policy.

9. Cookies and Similar Technologies

The Website uses or may use cookies and similar technologies.

Cookies are small files stored on a user’s device when visiting a website. They may be used to ensure the proper operation of the Website, remember user preferences, analyse Website traffic or support advertising activities.

Necessary cookies

Necessary cookies support basic Website functions, security and consent settings.

They may be used without optional consent where they are strictly necessary for the operation of the Website or provision of a service requested by the user.

Preference cookies

Preference cookies may remember settings selected by a user, such as language or display preferences.

Analytics cookies

Analytics cookies may help the Controller understand:

  • how visitors use the Website;

  • which pages are visited;

  • how long users remain on particular pages;

  • whether technical errors occur.

Marketing cookies

Marketing cookies may be used to:

  • measure advertising performance;

  • create advertising audiences;

  • limit the frequency of advertising;

  • display advertising based on a user’s activity.

Non-essential cookies are activated only where the user has provided the required consent.

Users may accept, reject or manage optional cookies through the cookie consent tool available on the Website. Cookies may also be removed or blocked through browser settings.

Restricting necessary cookies may affect the availability or proper operation of certain Website functions.

Detailed information about active cookies, their providers, purposes and storage periods should be available through the cookie settings panel or a separate Cookie Policy.

10. Recipients of Personal Data

Personal data may be disclosed to entities supporting the Controller in operating the Website and providing accommodation or rental services, including:

  • hosting and server providers;

  • Website administrators and IT service providers;

  • contact form and communication service providers;

  • property owners or property managers;

  • authorised local representatives;

  • cleaning and maintenance service providers;

  • guest support providers;

  • accounting, tax and legal advisers;

  • payment service providers;

  • booking and reservation platforms;

  • providers of analytics and advertising tools;

  • cookie consent management providers;

  • public authorities where disclosure is required by law.

Personal data is disclosed only to the extent necessary for the relevant purpose.

Where required, service providers process personal data under appropriate data processing agreements. Some providers may also act as independent data controllers in relation to the services they provide.

The Controller does not sell personal data to third parties.

11. International Data Transfers

The Website presents properties located in different countries and may use international technology, communication, booking, hosting or payment providers.

For this reason, personal data may be processed outside the country in which you reside, including outside the European Economic Area.

Where the GDPR applies, transfers of personal data outside the European Economic Area are carried out using an appropriate legal mechanism, such as:

  • an adequacy decision issued by the European Commission;

  • standard contractual clauses approved by the European Commission;

  • another lawful transfer mechanism permitted under applicable data protection law.

12. Data Retention

Personal data is retained only for as long as necessary for the purpose for which it was collected.

In particular:

  • data relating to general enquiries may be stored for the duration of the correspondence and for a reasonable period afterwards;

  • data relating to a reservation or agreement may be stored for the duration of the agreement and until the expiry of applicable limitation periods;

  • accounting and tax documentation may be retained for the period required by law;

  • data processed on the basis of consent may be retained until consent is withdrawn or the purpose of processing ends;

  • technical logs may be stored for the period necessary to ensure Website security and investigate technical incidents;

  • data required for legal claims may be retained until the claims are finally resolved or time-barred.

The retention period may be extended where this is necessary to comply with a legal obligation or protect the Controller against claims.

13. Your Data Protection Rights

Subject to the conditions provided by applicable law, you may have the right to:

  • request access to your personal data;

  • receive a copy of your personal data;

  • request correction of inaccurate or incomplete information;

  • request deletion of your personal data;

  • request restriction of processing;

  • object to processing based on legitimate interests;

  • request data portability;

  • withdraw consent at any time;

  • lodge a complaint with a competent data protection authority.

Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.

Where processing is based on the Controller’s legitimate interests, you may object to such processing on grounds relating to your particular situation.

To exercise your rights, contact the Controller by telephone:

[PHONE NUMBER]

The Controller may request additional information where necessary to verify the identity of the person submitting the request.

14. Right to Lodge a Complaint

You have the right to lodge a complaint with the data protection supervisory authority competent for your place of residence, place of work or the location of the alleged infringement.

Where the Controller is subject to Polish data protection law, the competent supervisory authority is:

President of the Personal Data Protection Office
Prezes Urzędu Ochrony Danych Osobowych

A complaint may also be submitted to another competent supervisory authority within the European Economic Area where permitted by law.

15. Voluntary Provision of Data

Providing personal data through the Website is generally voluntary.

However, certain information may be necessary to:

  • respond to an enquiry;

  • check property availability;

  • prepare or confirm a reservation;

  • enter into or perform an agreement;

  • provide accommodation or guest support;

  • comply with applicable legal requirements.

Failure to provide required information may make it impossible to respond to your enquiry or provide the requested service.

16. Automated Decision-Making

The Controller does not use personal data collected directly through the Website to make decisions based solely on automated processing that produce legal effects or similarly significantly affect users, unless expressly stated otherwise.

Where advertising tools are used, they may analyse Website activity to determine advertising audiences or personalise advertisements.

Such processing depends on the user’s cookie choices and is also subject to the privacy rules of the relevant advertising provider.

17. Data Security

The Controller uses appropriate technical and organisational measures intended to protect personal data against:

  • unauthorised access;

  • accidental loss;

  • unlawful disclosure;

  • alteration;

  • destruction;

  • misuse.

Access to personal data is limited to persons and service providers who require it for legitimate purposes connected with operating the Website or providing accommodation and rental services.

However, no method of transmitting information over the internet or storing data electronically can guarantee complete security.

18. Children’s Privacy

The Website and accommodation services are not directed at children acting independently.

Where information concerning a child is required in connection with a family reservation or stay, it should be provided by a parent or legal guardian and limited to what is necessary to organise and provide the requested service.

19. Changes to this Privacy Policy

This Privacy Policy may be updated where necessary due to:

  • changes to the Website;

  • introduction of new services or technologies;

  • changes in the way personal data is processed;

  • implementation of new booking, payment or analytics tools;

  • changes in applicable law.

The latest version of the Privacy Policy will be published on the Website together with the date of the most recent update.

20. Contact

For all questions concerning this Privacy Policy, the processing of personal data or the exercise of data protection rights, please contact:

Krzysztof Wawrzyniak
Owner of purestayrental.com

Telephone: +1 (949) 887-6204