Privacy policy

This Privacy Policy sets out the rules for processing personal data of people using goldstarapartamenty.pl, making bookings and contacting Goldstar Apartament.

1. Personal data controller

The personal data controller is:

GOLDSTAR BUSINESS spółka z ograniczoną odpowiedzialnością

ul. Aleksandra Kotsisa 11/10

66-400 Gorzów Wielkopolski

NIP: 5993301961

REGON: 542403209

KRS: 0001187638

E-mail: kontakt@goldstarapartamenty.pl

Phone: +48 665 688 443

For matters concerning personal data processing, contact the Controller using the email address or phone number provided, or in writing at the company's registered address.

2. Categories of data processed

Depending on how the website and services are used, the Controller may process the following data:

— full name; — phone number; — email address; — booking and stay details; — details of the second Guest, if provided; — invoicing details, including company name, address and tax identification number; — information provided in messages, reports and complaints; — device IP address and basic technical data about website usage; — payment and payment status information.

The Controller does not obtain full payment card details or online banking login details. These data are processed directly by the payment provider.

3. Purposes and legal bases of data processing

Personal data are processed for the following purposes:

Accepting and fulfilling reservations and providing accommodation — as necessary to conclude and perform the contract.
Processing payments for bookings and additional services — as necessary for the performance of the contract.
Contacting the Guest before, during and after the stay — on the basis of contract performance or the Controller's legitimate interest.
Issuing and retaining invoices and maintaining accounting and tax records — on the basis of the Controller's legal obligations.
Handling complaints and reports, and pursuing or defending claims — on the basis of legal obligations and the Controller's legitimate interest.
Ensuring Guest safety, protecting property and preventing rule violations — on the basis of the Controller's legitimate interest.
Ensuring the proper operation, security and optimisation of the website — on the basis of the Controller's legitimate interest.
Using optional cookies, in particular analytics or marketing cookies — on the basis of the user's consent, where such consent is required.

4. Data recipients

Personal data may be shared with entities supporting the Controller's business operations, in particular:

— the BedBooking reservation system provider; — the Przelewy24 payment provider; — the website and hosting provider and administrator; — email and telecommunications providers; — the accounting firm; — providers of IT, technical, legal or maintenance services; — authorised public authorities where disclosure is required by law.

Data are shared only to the extent necessary for the specified purpose.

5. Payment provider

Online payments available on the website are processed by PayPro S.A., the operator of Przelewy24.

To make a payment, the user may be redirected to the payment provider's service. The payment provider processes data under its own terms and privacy policy.

The Controller receives only the information necessary to identify the payment and confirm its status.

6. Data retention period

Personal data will be retained:

— for the time needed to fulfil the booking and stay; — for the period required by tax and accounting regulations; — until the complaint procedure is complete; — until any applicable limitation period for claims expires; — for data processed on the basis of consent, until consent is withdrawn; — for data processed on the basis of legitimate interest, until an effective objection is raised or the processing purpose ceases.

7. Rights of data subjects

A person whose data are processed has the right, in the cases provided by law, to:

— access their data; — receive a copy of the data; — rectify inaccurate data; — erase data; — restrict processing; — data portability; — object to processing; — withdraw consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

To exercise your rights, contact the Controller at: kontakt@goldstarapartamenty.pl

8. Right to lodge a complaint

Anyone who believes that their personal data are being processed unlawfully has the right to lodge a complaint with:

President of the Polish Personal Data Protection Office, ul. Stanisława Moniuszki 1A, 00-014 Warsaw, Poland

9. Voluntary provision of data

Providing personal data is voluntary. However, data marked as required are necessary to make a booking, provide accommodation, process payment or respond to a message.

Failure to provide required data may prevent the contract from being concluded or performed.

10. Cookies

The website goldstarapartamenty.pl may use cookies, which are small pieces of information stored on the user's device.

Cookies may be used for:

— ensuring proper and secure website operation; — remembering user settings; — operating the form and booking system; — compiling anonymous statistics and analysing website usage; — supporting external services and embedded content.

Users can manage cookies through their browser settings or, if the website displays an appropriate panel, through the cookie consent settings.

Restricting essential cookies may cause some website or booking system features to malfunction.

11. External links and services

The website may contain links to external websites, the booking system, maps, the payment provider or other services.

After following a link to an external service, data processing also takes place under that operator's rules. The Controller recommends reading the service provider's privacy policy.

12. Data security

The Controller implements appropriate organisational and technical measures to protect personal data against loss, unauthorised access, disclosure, alteration or destruction.

Access to data is granted only to persons and entities that need it to carry out their assigned duties.

13. Automated decision-making

The Controller does not use personal data to make decisions concerning Guests based solely on automated processing that would produce legal effects or similarly significantly affect them.

14. Changes to the Privacy Policy

The Privacy Policy may be updated if the operation of the website, the services used or applicable regulations change.

The current version of the Privacy Policy is always available at goldstarapartamenty.pl.

This Privacy Policy takes effect on 21 July 2026.