Privacy Policy & GDPR

§1. Controller

The controller of personal data of AptHub users (property owners and staff — Customers) across apthub.pl and apthub.eu is Geomarine Global Patryk Zajdel, ul. Szkolna 26, 38-430 Miejsce Piastowe, Poland, VAT ID 6842640364. Data matters: kontakt@apthub.pl.

§2. Customer data

We process account data (e-mail, name, irreversibly hashed password) to perform the contract (art. 6(1)(b) GDPR) for its duration plus 30 days; billing data for tax obligations (art. 6(1)(c)) for 5 years; the panel audit trail in our legitimate interest of security and accountability (art. 6(1)(f)); correspondence for 3 years. No profiling, no automated decisions with legal effect.

§3. Guests' data — processing on your behalf (art. 28 GDPR)

Guests' data (names, contacts, reservations, companions, property notes) belong to the Customer, who is their controller. AptHub processes them solely as a processor, on the Customer's documented instruction expressed by using the Service. Scope: guest identification and contact data, reservation and stay-payment data, automated messages. Sub-processors necessary for the Service (hosting, channel sync, e-mail delivery) are used under a general authorisation, with 14 days' notice of changes and a right to object.

Safeguards include database-level isolation of each property's data (row-level security), encrypted integration keys, encrypted transport, daily backups and an audit trail. On termination, entrusted data are returned and then deleted within 30 days. We assist with art. 32–36 GDPR duties and with data-subject requests, and notify the Customer of any breach without undue delay.

§4. Recipients

PayPro S.A. (Przelewy24, Poznań) for subscription payments; hosting and infrastructure providers; Cloudflare, Inc. (DNS/CDN, network traffic only); Beds24 GmbH (Germany, EEA) as the channel-synchronisation provider on plans with full portal sync (booking and guest data exchanged between portals and the Service; the Website plan uses only iCal calendar links); the Provider's accounting office. Transfers outside the EEA rely on Standard Contractual Clauses (art. 46 GDPR).

§5. Your rights

Access, rectification, erasure, restriction, portability and objection — via kontakt@apthub.pl. You may complain to the Polish supervisory authority (PUODO, ul. Stawki 2, 00-193 Warszawa) or your local one. Guests' requests concerning reservation data should go to the property (the controller); received by us, they are forwarded to the Customer without delay.

§6. Cookies

Only cookies essential to operate the Service: sign-in session, language and theme, security. No third-party marketing or analytics cookies — which is why there is no consent banner.

§7. Changes

Material changes are announced in the Service and by e-mail 14 days ahead. This is a translation of the Polish Polityka prywatności; in case of divergence the Polish text prevails. Effective 27 August 2026.