We process personal data necessary to provide our services, including your name, contact details, booking information, payment and invoicing details, and, where required by law, identification details. Our website may also collect limited technical information, such as cookies and IP addresses.
3. Purpose and Legal Basis
Your personal data is processed to:
manage and fulfil reservations;
provide accommodation and related services;
process payments and issue invoices;
communicate with you regarding your reservation and stay;
comply with legal and tax obligations;
ensure the safety and security of our guests and property;
handle complaints and improve our services.
Processing is based on Article 6(1)(a), (b), (c) and (f) of the General Data Protection Regulation (GDPR), as applicable.
4. Data Sharing
We may share your personal data only where necessary to provide our services or to comply with legal obligations.
When a reservation is made through a booking platform or travel agency, including but not limited to Booking.com, Expedia Group (and its affiliated companies, brands and entities operating within the Expedia Group), or other B2B travel partners, these companies provide us with the personal data necessary to manage your reservation and accommodation.
Where required, we may also share relevant information with the booking platform, travel agency, their affiliated companies involved in the reservation, or other legitimate B2B travel partners regarding your booking, payment status, invoices, complaints, refund requests, quality of stay, or other matters directly related to the accommodation contract and customer service. Such information is shared only to the extent necessary to administer the reservation, fulfil our contractual obligations, comply with legal obligations, protect our legitimate interests, or resolve disputes.
We also share personal data, where necessary, with Hostaway or, and MEWS (Property Management System), payment providers, accounting services, and other service providers directly involved in delivering our accommodation services. All recipients process personal data in accordance with applicable data protection laws.
5. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by applicable law, including accounting, tax and other statutory retention obligations. Once retention is no longer required, personal data is securely deleted or anonymised.
6. Your Rights
Under the GDPR, you have the right to:
access your personal data;
request correction of inaccurate personal data;
request deletion of your personal data where applicable;
restrict or object to processing;
request data portability where applicable;
withdraw consent where processing is based on consent;
lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland.
7. Cookies
Our website may use cookies to ensure proper functionality, improve user experience and analyse website traffic. Where required by law, non-essential cookies are used only with your consent.
8. Contact
For any questions regarding the processing of your personal data, please contact:
Mariensztat 8 Boutique & City Hotel Mariensztat 8 00-302 Warsaw, Poland
We may update this Privacy Policy from time to time to reflect changes in legal requirements or our business operations. The latest version will always be available on our website.
