Privacy Policy

The data controller is AXG Aleksander Posmyk, ul. Graniczna 29, 40-017 Katowice, NIP 954-246-23-80.

For any matter concerning your personal data you can contact us by email at ap [at] axg.pl or by post to the registered office address.

• Contact form and enquiries (name, email, phone, dates, number of guests, message): to answer your enquiry and prepare a quote. Legal basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract).
• Booking and stay (the data above plus invoice details and, where required for check-in, ID details): to perform the rental agreement, settle payments and issue invoices. Legal basis: Art. 6(1)(b) and (c) GDPR.
• Technical data (IP address, country, browser) recorded when the form is submitted: to protect the website against abuse and spam. Legal basis: Art. 6(1)(f) GDPR (legitimate interest).
• Correspondence and stay history: to establish, exercise or defend legal claims. Legal basis: Art. 6(1)(f) GDPR.

If you book through a booking platform (such as Booking.com or Airbnb), we receive your booking details (name, contact details, dates, number of guests) from the platform operator to the extent needed to host your stay. The platform is a separate controller of your data and has its own privacy policy.

You are not obliged to provide your data, but without it we cannot answer your enquiry or process a booking. We do not use automated decision-making or profiling.

Data may be shared with processors acting on our behalf, only to the extent necessary to provide the service:

• Cloudflare, Inc. – website hosting and the Turnstile service that protects the form against bots.
• Resend, Inc. – delivery of emails sent from the contact form.
• Google LLC – the embedded Google Map in the Location section (loaded from Google’s servers).
• Accountants, legal advisers, payment providers and banks – for payment processing, accounting and compliance with legal obligations.

Some of these providers are based outside the European Economic Area (USA). Transfers rely on the European Commission’s adequacy decision (EU‑US Data Privacy Framework) or standard contractual clauses.

• Enquiries that do not result in a booking: up to 12 months from the last contact.
• Booking and stay data: for the period required by tax and accounting law (generally 5 years from the end of the year in which the document was issued).
• Form security data (IP, browser): up to 12 months.

You have the right to access your data, to have it rectified or erased, to restrict its processing, to data portability, and to object to processing based on legitimate interest. To exercise these rights, contact us by email.

You also have the right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl).

alexander.apartments does not use cookies for marketing or analytics and contains no tracking scripts, which is why it shows no cookie banner. The Google Map in the Location section does not load automatically: the Google script (which may set cookies on your device) is fetched only after you click “Show map”, which constitutes your consent under Article 399 of the Polish Electronic Communications Act. The Cloudflare Turnstile form protection works without cookies and starts only when you click into the form.

This policy may be updated, for example when service providers change. The current version is always available on this page together with the date of the last update.