Privacy Policy

This Privacy Policy explains how we collect, use, and protect your personal information when you use the FindMyStay platform. The platform is developed and operated by THEVIPGROUP Sp. z o.o.

For the purposes of the General Data Protection Regulation (GDPR) and applicable Polish law, the official Data Controller is:

Our Data Privacy and Usage operations are strictly governed by European GDPR and local Data protection legal norms. Specifically, we comply with the Polish Act on Providing Services by Electronic Means (Ustawy o swiadczeniu uslug droga elektroniczna) and the Polish Telecommunication Law (Prawa telekomunikacyjnego). We aim to explain in a clear and simple way how to book an accommodation and how we protect your data.

To facilitate secure mid-to-long-term rentals, we must collect specific categories of data:

We adhere to the principle of data minimization. We only hold your data for as long as legally or operationally necessary.

• Data Retention: Identity verification data is handled entirely by Stripe Identity and subject to Stripe's data retention policies. We do not store identity documents on our own servers.
• Basic profile and booking history data are retained for as long as your account is active, or as required by Polish tax and accounting laws (typically 5 years).

To provide our services, we share necessary data with highly secure, compliant third-party processors. We do not sell your data to marketers.

• Stripe (Payments & Identity):We use Stripe to process all credit card and BLIK payments, as well as to conduct KYC (Know Your Customer) and KYB (Know Your Business) checks. When you capture your Government ID and selfie, this biometric data is processed securely by Stripe. FindMyStay does not store your raw credit card numbers or your facial recognition models on our servers.
• Hosting Providers:Our databases are hosted on secure, encrypted cloud servers located within the European Economic Area (EEA).

Under GDPR, we process your personal data under the following legal bases:

• Contractual Necessity: Processing is required to fulfill the rental booking, transfer funds, and enforce our Terms and Conditions.
• Legal Obligation: We must collect tax IDs (NIP/KRS) and verify identities to comply with European Anti-Money Laundering (AML) directives.
• Legitimate Interest: We use platform analytics to improve our website and protect against fraud.

Under European law, you possess the following rights regarding your personal data:

• Right to Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You can request that we correct any inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your account and personal data, provided there are no active bookings or overriding legal retention requirements (e.g., tax records).
• Right to Restrict Processing: You may ask us to suspend the processing of your data under certain circumstances.
• Right to Data Portability: You can request to receive your data in a structured, commonly used, machine-readable format.

To exercise any of these rights, please contact us at Support@findmystay.eu.We will respond to all requests within 30 days.

We may update this Privacy Policy periodically to reflect changes in our operational practices or legal obligations. We will notify all active users via email of any material changes before they take effect.