This Privacy Policy sets out the rules for the processing of personal data by Too-Good Sp. z o.o. in connection with the use of our website used for booking apartments for short-term tourist stays. We care about protecting your privacy and make every effort to ensure that your personal data is processed in accordance with applicable laws, including Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

Data Controller

The controller of your personal data is PGH Masters Group Sp. z o.o., with its registered office in Kraków, ul. Rynek Główny 28, postal code: 31-010, registered in the National Court Register under number 0000920335, NIP: 6762602574, REGON: 389901612.

If you have any questions regarding the protection of personal data, you can contact us by e-mail: hello@too-good.pl or in writing at the address of our registered office.

What personal data do we collect?

While using our website and making a booking, we may collect the following personal data:

1. Contact details: first name, last name, e-mail address, phone number.
2. Booking-related data: stay dates, number of guests, stay preferences.
3. Payment data: payment card number, cardholder’s name and surname, card expiry date (processed through an external payment service provider).
4. Invoice details (if required): company name, address, tax ID (NIP).
5. Technical data: IP address, browser type, operating system, cookies, data on activity on the website.

For what purposes do we process your data?

We process your personal data for the following purposes:

1. Performance of the booking and provision of services: processing data necessary for concluding and performing the apartment rental agreement.
2. Payment processing: transmitting payment data to an external payment service provider.
3. Customer service: responding to inquiries, providing information about bookings and stays.
4. Direct marketing (with your consent): sending offers, promotions, newsletters.
5. Legal protection: for the purpose of preventing fraud, pursuing claims or defending against claims.
6. Analysis and improvement of the website: monitoring website traffic, improving its functionality and tailoring content to users’ needs.

Legal basis for data processing

We process your data on the basis of:

1. Performance of a contract (Art. 6(1)(b) GDPR) – in the case of processing data necessary for making a booking and providing services.
2. Legal obligation (Art. 6(1)(c) GDPR) – to the extent that the law requires us to store data (e.g. tax regulations).
3. Legitimate interests of the controller (Art. 6(1)(f) GDPR) – e.g. for the purpose of securing claims or analysing statistics.
4. User consent (Art. 6(1)(a) GDPR) – in the case of marketing activities or newsletter subscription.

To whom do we disclose your data?

Your data may be shared with the following entities:

1. Payment service providers – for the purpose of processing online payments (e.g. PayU, Stripe).
2. IT service providers – that support us in operating the website.
3. Accounting and legal firms – to the extent required by law.
4. Public authorities – when required by law (e.g. tax offices, law enforcement authorities).

How long do we store your data?

We store personal data for the period necessary to achieve the purposes for which it was collected:

1. Data related to the booking – for the duration of the agreement and the period of limitation of claims (up to 6 years).
2. Payment data – in accordance with the policy of the payment service provider.
3. Marketing data – until consent is withdrawn.
4. Data required by law – for the period required by applicable regulations (e.g. keeping invoices for 5 years).

Your rights

You have the right to:

1. Access to data – to obtain information about the personal data being processed.
2. Rectification of data – to correct inaccurate or incomplete data.
3. Erasure of data (“right to be forgotten”) – where the data is no longer necessary for the purposes for which it was collected.
4. Restriction of processing – in specific situations.
5. Data portability – to receive your data in a structured format.
6. Objection to processing – where processing is based on legitimate interests or for marketing purposes.
7. Withdrawal of consent – at any time, if the data was processed on the basis of consent.

To exercise these rights, please contact us at: hello@too-good.pl

Data security

We take care to protect your personal data by applying appropriate technical and organisational measures to ensure its security against unauthorised access, loss or destruction.

Cookies

Our website uses cookies to improve functionality and tailor content to your needs.

Changes to the Privacy Policy

We reserve the right to make changes to the Privacy Policy. The current version of the document will always be available on our website.

Contact

If you have any questions or concerns regarding the processing of personal data, please contact us:
E-mail: hello@too-good.pl
Address: ul. Św. Jana 18/U4, 31-018 Kraków
NIP: 6762602574
REGON: 389901612
KRS: 0000920335