Privacy and cookie policy
Last updated: 20 October 2026
Who is the data controller
The controller of your personal data is myNEST sp. z o.o., ul. Ratajczaka 25/9, 61-814 Poznań, Poland, VAT ID (NIP) 7792527820, KRS 0000907083, REGON 389226702 (“myNEST”, “we”).
For any data protection matters, email info@mynest.pl or call +48 501 616 016.
What data we process and why
Booking your stay. Bookings and payments are handled by the IdoBooking reservation system. We process the data you provide when booking: name, contact details, dates and number of guests, invoice details and payment information. We do this to conclude and perform the short-term rental agreement (Art. 6(1)(b) GDPR), to issue accounting documents and meet tax obligations (Art. 6(1)(c) GDPR), and to send you check-in instructions before arrival.
Contact. When you email, message or call us, we process the data needed to reply: your name, email address or phone number and the content of your message, based on our legitimate interest in answering you (Art. 6(1)(f) GDPR) or, if it concerns a booking, steps taken before concluding an agreement (Art. 6(1)(b) GDPR).
Checking availability on the site. When you choose dates and the number of guests, the site sends only this information to our server to show available apartments and prices. This is not personal data and we do not link it to you.
Server security. The server hosting the site automatically records technical data about visits (including IP address, date and time, page address and browser type). This is used to keep the site secure and working properly (Art. 6(1)(f) GDPR) and is kept for a short time.
Who we share data with
Data may be received only by companies that help us run our business, under contracts and only as far as necessary: the provider of the IdoBooking reservation system, payment operators handling payments in that system, the hosting company for the website and email, our accounting office and the people preparing the apartments.
If you book through another platform (e.g. Booking.com, Airbnb), that platform also processes your data under its own privacy policy.
If you agree to analytics or marketing cookies, data about your use of the site is also received by Google Ireland Ltd. (Google Analytics) and Meta Platforms Ireland Ltd. (Meta Pixel) — see “Cookies” below. These companies may transfer data to the USA under the European Commission’s EU–US Data Privacy Framework adequacy decision and standard contractual clauses.
We do not sell personal data.
How long we keep data
Booking data is kept for the period required by tax and accounting law (usually 5 years from the end of the year of the stay) and, where necessary, until any claims become time-barred.
Correspondence is kept until the matter is resolved or, if it concerns a booking, as long as that booking’s data.
Your rights
You have the right to access, rectify, erase or restrict the processing of your data, to data portability, and to object to processing based on legitimate interest. To exercise these rights, email info@mynest.pl.
You may also lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl.
Providing data when booking is voluntary, but without it we cannot accept the booking or issue an invoice.
Cookies and browser storage
Cookies are small files stored in your browser. On our website analytics and advertising tools are turned on only with your consent, given in the banner on your first visit. Until you agree, we do not set such cookies or connect to these tools. The legal basis is your consent (Art. 6(1)(a) GDPR and Art. 399 of the Polish Electronic Communications Law).
You can change or withdraw your consent at any time via Cookie settings (also linked at the bottom of every page). Withdrawal does not affect the lawfulness of earlier processing.
Analytics — Google Analytics 4 (Google Ireland Ltd.). We measure how many people visit the site, where they come from and which pages they use, so we can improve it. Google does not store IP addresses. Cookies: _ga, _ga_* — up to 2 years. Data in Google Analytics is kept for 14 months.
Marketing — Meta Pixel (Meta Platforms Ireland Ltd.). We measure whether Facebook and Instagram ads lead to bookings and may show ads to people who visited our site. Meta receives information about pages visited, dates searched and moving on to booking, together with a browser identifier. We are joint controllers with Meta for collecting this data; Meta then processes it under its own policy (facebook.com/privacy/policy). Cookie: _fbp — up to 90 days.
Necessary. Your choice is stored in your browser’s local storage for 12 months, and your chosen dates and number of guests in session storage, which is cleared when you close the browser. This information never leaves your device.
Fonts and images are loaded from our own server.
The IdoBooking reservation system, where you complete your booking, has its own cookie banner and policy; with your consent Google Analytics and Meta Pixel may also run there, so we know which ads lead to bookings. When you go to Google Maps or our social media profiles, the policies of those services apply.
Changes to this policy
If the way we process data changes (for example, if we add traffic measurement tools), we will update this policy and ask for your consent where required.