Privacy Policy

1. About us 

Katarzyna Bobilewicz, conducting business under the name Katarzyna Bobilewicz with its registered office in Krakow (31-006), ul. 3 Grodzka - owner of Scharffenberg Apartments in Krakow (hereinafter referred to as "we"/"us"/"our") - is the entity responsible for processing personal data obtained from or about you ("you", "you", "the Client"/"the Client"). As our registered office is located within the European Union, we process personal data in accordance with European data protection legislation and other applicable statutory provisions. We attach great importance to the privacy of our customers and other persons whose personal data is processed by us.



2. What is personal data?

Personal data is information that allows you to be directly or indirectly identified as a natural person ("indirectly", i.e. in combination with other information) based on elements such as your name, postal address, e-mail address, telephone number or unique device identifier.



3. Use of personal data

a. The Scharffenberg Apartments comply with regulations protecting privacy, including in particular the General Data Protection Ordinance No. 679/2016, the so-called FAMILY. We strive to ensure that every person whose personal data is processed has full information about the scope, purpose and manner of processing of their personal data and information about their rights. The Administrator uses in his activity only data necessary for the realization of each of the purposes for which the personal data are processed. We do not collect or process more or different types of personal data than those necessary for the purposes indicated below. We use personal data only in accordance with the provisions of this Privacy Policy, unless you have given your separate consent for other use of your personal data. If we plan to use your personal data processed with your consent for purposes other than those set out in such consent, we will inform you in good time in advance and, if you give your consent, we will process the data for those other purposes.

b. The Client's personal data shall be processed on the basis of a rental agreement concluded between the Client and Scharffenberg Apartments resulting from making a booking of a flat on the website or through the booking portal. The purpose of personal data processing is to perform the lease agreement and additional services which are provided by Scharffenberg Apartments at the Customer's request. Moreover, the Client's personal data may be processed by means of video monitoring. The purpose of video monitoring is to protect the Client and other persons staying in or around the Apartments.

c. We would like to inform you that providing personal data is both a contractual and statutory requirement (when documenting sales made to the Client with a VAT invoice). Failure to provide personal data makes it impossible to conclude the Apartment Rental Agreement, as well as to issue a VAT invoice. 

d. We would like to inform you that your personal data will be kept for the entire duration of the lease agreement and for the period of limitation of possible claims, including tax and civil claims. On the other hand, personal data processed by video surveillance will be stored for 30 days, unless due to a special circumstance (e.g. an accident) it is necessary to store the video surveillance recording for a longer period. 

e. In the case of booking accommodation in Scharffenberg Apartments through the booking portal, the categories of the Client's personal data provided to us by these entities may include, in particular, the name and surname, date of stay, e-mail address and telephone number of the Client. The exact source from which the Scharffenberg Apartments have obtained the Customer's personal data can be obtained at the Reception desk.

f. We may be obliged to use and archive personal data for legal and compliance purposes - e.g. to prevent, detect, investigate, prevent data loss and fraud and to combat other forms of abuse of our services and IT systems. We also have the right to use your personal information in order to comply with internal and external control requirements, to ensure information security, to protect and exercise our rights, to safeguard our privacy, to ensure the safety of persons and property, or to protect the property of others.



4. Provision of personal data

We will only disclose your personal data for the purposes described below to the entities indicated below - unless you expressly consent to the transfer of your personal data to third parties of other categories listed elsewhere. We take all steps to ensure that your personal data is processed, protected and transmitted legally.

a. Third-party service providers
If necessary, we contract out to other companies and individuals to carry out certain tasks related to our services on our behalf under data processing agreements. We also cooperate with external entities in order to fulfil the lease agreement. 

These are in particular:
●  accounting companies - in terms of accounting services and financial settlements
●  law firms - to pursue possible claims under lease agreements or in other cases for legal defence 
●  insurance companies - in order to conclude an insurance contract, claim claims from insurance contracts, etc. 
●  IT companies and companies providing support and management of the IT infrastructure of Suites in order to provide hosting for our databases and applications, provide maintenance services
●  courier and mail companies - to send correspondence

Data made available to external service providers shall be transferred only to the extent required for the purpose. External service providers may not use the personal data received from us for any other purpose, in particular for their own benefit or that of third parties. Third-party service providers are contractually obliged to respect the confidentiality of your personal data.

b. Transfer of assets
In the event of a reorganisation, restructuring, merger or sale or other transfer of assets (collectively "transfer of assets"), we may transfer information, including personal data, to the extent permitted and where appropriate, provided that the receiving party agrees to treat your personal data in accordance with applicable data protection law. We are committed to continuing to protect the confidentiality of personal data and to notify relevant users in the event that their personal data becomes subject to another privacy policy.

c. Public administrations
We will disclose your personal data to public authorities if required by law. For example, we respond to subpoenas from courts, law enforcement agencies, regulatory authorities and other public administration bodies, including bodies outside your country of residence.

d. Transfer of personal data abroad
Your personal data will not be transferred to a third country.



5. Cookie policy 

Cookie policy Cookies ("cookies") are small text files that are automatically created by your web browser when you visit websites. Cookies usually contain the name of the website from which they come from, the time they are stored on the end device and a unique number. 

Scharffenberg Apartments is an entity that places cookies on its user's device and has access to them. 

We use cookies for this purpose: 
●  to adjust the content of our website to the user's individual preferences, first of all these files recognize his device in order to display the website according to his preferences;  
  prepare statistics to help you learn about your users' preferences and behaviour; the analysis of these statistics is anonymous and allows you to adjust the content and appearance of the website to the prevailing trends. The statistics are also used to assess the website's popularity; 
●  the possibility of undertaking marketing activities. 

Our website uses two basic types of files (cookies) - session and permanent. Session cookies are temporary and are stored until you leave our site (by entering another site or turning off your browser). Fixed files are stored in the user's terminal device until they are deleted by the user or for the time resulting from their settings. The user of our website can at any time change the settings of his browser to block the use of files (cookies) or each time obtain information about their placement in his device. Other available options can be checked in the settings of your web browser. Please note that most browsers are set by default to accept the storage of files (cookies) on your device. Please be informed that changes in your browser settings may limit access to some functions of our website. Cookies, which are used by our website, and which are placed in the user's terminal device can be made available to our partners and advertisers cooperating with us.



6. Security

We take data security very seriously. We apply appropriate security measures and implement appropriate physical, electronic and administrative procedures to protect the information collected against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access to personal data transmitted, stored or processed. Our information security policies and procedures are aligned with generally accepted international standards. They are regularly reviewed and updated to reflect business needs, technological changes and regulatory requirements. Access to your personal information is restricted to employees, service providers and entities that have a business need to know this information or need it for the performance of their duties.

In the event of a personal data breach, we apply the relevant provisions on notification of such breaches.



7. Your rights

Each data subject has specific rights related to the personal data collected. This applies to the whole process of data processing described in this Privacy Policy. We respect the rights of individual persons and treat your concerns accordingly. 

The following list contains information concerning your rights under data protection regulations: 

The right to withdraw consent: If the processing of personal data is based on your consent, you may withdraw your consent at any time by following the procedure described in the relevant consent form. We guarantee that you can withdraw your consent in the same way that it was given, e.g. by electronic means.  

The right to correct data: You may receive from us the correction of your personal data. We strive to ensure that the personal data in our possession or under our control is accurate, complete, up-to-date, relevant and based on the latest available information. Where appropriate, we provide access to self-service portals where you can view and correct your personal data.

Right to restrict data processing: You may receive assurances from us about the restriction of the processing of your personal data, if any:
  You challenge the accuracy of this information during the period in which we need to verify its adequacy,
  the processing of data is unlawful and you have submitted a request for a restriction instead of the deletion of personal data,
●  We no longer need your data, but you need it in connection with the establishment, exercise or defence of legal claims, or
●  You do not agree to data processing when we check that our rights take precedence over your rights.


Right of access to personal data: You may ask us to provide you with information about your personal data in our possession, including information about the categories of personal data in our possession or control, about what the data is used for, where we have received it (if not directly from you) and to whom it has been disclosed (if applicable). You may receive from us free of charge one copy of the personal data we hold about you. We reserve the right to charge for each subsequent copy issued.

Right to data transfer: At your request, we will transfer your personal data to another controller, if technically possible, provided that the processing is carried out with your consent or is necessary for the performance of a contract. Instead of receiving a copy of your personal data, you may choose the option in which we transfer the data to another controller directly indicated by you.

The right to erase data: You can receive assurances from us about the deletion of your personal data if:
●  the data is no longer necessary for the purposes for which it was collected or processed;
  you have the right to object to further processing of your personal data (see below) and choose to exercise this right;
●  processing is based on your consent, you have withdrawn your consent and there are no longer any legal grounds for processing the data;
●  the processing of your personal data was unlawful; the processing is not necessary
●  to meet a legal obligation requiring us to process them;
●  the statutory requirements for data archiving, in particular, apply;
●  this is related to the establishment, execution or defence of legal claims.

Right to object: You have the right to object - at any time - to the processing of your personal data on the basis of a specific situation, provided that the processing is not based on your consent, but on our legitimate interest or that of a third party. In this case, we interrupt the processing of your personal data, unless we can provide convincing legal evidence and can demonstrate an overriding interest in the processing or the establishment, exercise or defence of legal claims. If you object to the processing of your data, you must specify whether you wish to have your data deleted or to have it restricted by us.

Right of complaint: If you suspect a breach of the applicable data protection legislation, you can lodge a complaint with the data protection supervisory authority in your country of residence or in the country where the alleged breach occurred.

Period: We will try to fulfil your request within 30 days. However, this period may be extended due to reasons relating to a particular law or the complexity of the request.

Access Restrictions: In some cases we cannot provide you with access to all or part of your personal data due to statutory provisions. If you are denied access to your data, we will give you the reason for this.

No identification: In some cases we are unable to verify your personal data because of the identifiers provided by you in your application. Personal data that we cannot search for if you provide your name and e-mail address include: data collected through cookies in your browser.

In the event that we are unable to identify you as the data subject, we cannot comply with your request to exercise your rights as set out in this section - unless we receive additional information to enable us to identify you.

Exercise of your rights: In order to exercise your rights, please contact us in writing, e.g. by e-mail or post. Contact information can be found at the end of this Privacy Policy.



8. Storage of your personal data

In principle, we delete your personal data if it is no longer necessary for the purposes for which it was collected. However, statutory requirements may require us to store your personal data for a longer period of time, e.g. the obligation to report adverse effects.



9. Contact information

If you have any questions about data protection, or if you have any questions about the exercise of your rights, please contact us:

Scharffenberg Apartments
tel. +48 531 280 005


Scharffenberg Apartments Team