Privacy policy
This is an English translation provided for convenience. In case of any discrepancy, the Polish version prevails.
This policy explains what personal data we process when you use the website https://roomy.com.pl, why, on what legal basis, and what your rights are. It covers only the website and the contact form. Residents receive separate information on data processing when signing the tenancy agreement.
1. Data controller
The controller of your personal data is Sylwia Węgrzyn, running a business under the name Fibre Line Sylwia Węgrzyn, ul. Przemysłowa 1, 38-200 Jasło, Poland, NIP (tax ID): 6852071979, REGON: 180585357 – the operator of Roomy Student Living, ul. Podkarpacka 25, 35-082 Rzeszów (the "Controller", "we").
For any matters regarding personal data, contact us:
- email: roomypodkarpacka25@gmail.com
- phone: +48 505 166 121 (Mon–Fri 7:00–15:00)
- by post: Fibre Line Sylwia Węgrzyn, ul. Przemysłowa 1, 38-200 Jasło, Poland
The Controller has not appointed a data protection officer.
2. What data we process, why and on what basis
a) Contact form and correspondence
When you send an enquiry through the form, by email, by phone or via Facebook, we process the data you give us: name and surname, phone number, email address (optional), the subject, the room type you are interested in and the content of your message. Messages sent through the form automatically include the date and your IP address – used to protect against spam and abuse.
Purposes and legal bases:
- answering your enquiry, presenting our offer, adding you to the waiting list and taking steps before a tenancy agreement is concluded – Art. 6(1)(b) GDPR (steps taken at your request before entering into a contract);
- correspondence on other matters (e.g. residents' matters, garage spaces) – Art. 6(1)(f) GDPR (our legitimate interest in handling the questions sent to us);
- protecting the form against spam and abuse – Art. 6(1)(f) GDPR.
Providing your data is voluntary, but without your name and phone number we cannot answer an enquiry sent through the form.
b) Using the website
When you visit the website, the server automatically records technical data in its logs: IP address, date and time of the request, the page address, browser and operating system type. We process this data to keep the website working correctly and securely – Art. 6(1)(f) GDPR.
c) Establishing, pursuing or defending claims
In the event of a dispute, data may be processed to the extent necessary to establish, pursue or defend claims – Art. 6(1)(f) GDPR.
3. Cookies and similar technologies
Under Art. 399 of the Polish Electronic Communications Law (Prawo komunikacji elektronicznej), storing information on your device or accessing it requires your consent, unless it is necessary to provide the service you are using. That is why on your first visit we show a banner where you can accept or reject each category. You can change your choice at any time in "Cookie settings" in the website footer.
Necessary (always on, no consent required)
| Name | Type | Purpose | Retention |
|---|---|---|---|
| PHPSESSID | session cookie | securing the contact form (anti-spam token) | until you close the browser |
| roomy-consent | browser storage (localStorage) | remembering your cookie choice | 12 months |
| roomy-theme | browser storage (localStorage) | remembering your chosen theme (light / dark) | until you delete it |
Analytics and marketing (only with consent)
The website currently does not use any analytics or marketing tools (e.g. Google Analytics, Meta Pixel, Google Ads). If we add them, they will run only after you give your consent in the banner, and this policy will be updated to describe them. The legal basis will then be your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time without affecting the lawfulness of processing before withdrawal.
External resources
To load quickly and display correctly, the website loads some resources from external providers' servers. When this happens, the provider receives your IP address and technical information about your browser:
- fonts – Google Fonts (Google Ireland Ltd.),
- animation library – cdnjs (Cloudflare, Inc.).
The website does not embed Google Maps or Facebook plugins. The "Show on map" link and the link to our Facebook page lead to external services with their own privacy rules.
You can also manage cookies and website storage in your browser settings (e.g. delete or block them). Blocking the necessary mechanisms may prevent the contact form from working.
4. Data recipients
Your data may be received by entities that provide services to us and process data on our behalf:
- the website hosting provider – Hostinger,
- the email provider receiving messages from the form – Google (Gmail),
- providers of the external resources described in section 3 (Google, Cloudflare),
- entities supporting us with IT, accounting and legal advice – to the extent necessary.
Data may also be disclosed to public authorities where required by law.
5. Transfers outside the EEA
Google and Cloudflare may also process data outside the European Economic Area, in particular in the USA. In that case, the transfer is based on a European Commission adequacy decision (EU-US Data Privacy Framework) or on standard contractual clauses approved by the European Commission.
6. How long we keep data
- form enquiries and correspondence – for as long as needed to handle them, and then for up to 12 months after the last contact (e.g. for the waiting list or follow-up questions); if we sign a tenancy agreement – as set out in the information provided with the agreement;
- technical data used to protect the form against spam – up to 1 hour;
- server logs – according to the hosting provider's settings, usually a few weeks;
- data processed in connection with claims – until the claims become time-barred.
7. Your rights
You have the right to:
- access your data and receive a copy,
- rectify your data,
- have your data erased,
- restrict processing,
- data portability – for data processed on the basis of a contract or consent,
- object to processing based on our legitimate interest,
- withdraw consent at any time – where processing is based on consent (e.g. in "Cookie settings"),
- lodge a complaint with the President of the Personal Data Protection Office (Prezes UODO, ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl).
To exercise your rights, write to roomypodkarpacka25@gmail.com.
We do not make decisions about you based solely on automated processing, including profiling (Art. 22 GDPR).
8. Security
The website uses an encrypted HTTPS (SSL/TLS) connection. The form is protected against automated spam, and only authorised Roomy staff have access to the messages.
9. Changes to this policy
We may update this policy, e.g. when website features or the law change. The current version is always available on this page.
This policy is effective from 5 November 2026.
Fibre Line Sylwia Węgrzyn – Roomy Student Living
ul. Przemysłowa 1, 38-200 Jasło, Poland
NIP: 6852071979, REGON: 180585357
Email: roomypodkarpacka25@gmail.com