Last updated: 22.03.2023

Introduction

FlatAway (“we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your personal data when you use our website and services, as well as your data protection rights under the General Data Protection Regulation (GDPR) and other applicable laws. By using our website and services, you acknowledge that you have read and understood this Privacy Policy.

  1. Personal Data We Collect

We may collect the following categories of personal data from you:

a. Identity Data: Includes first name, last name, date of birth, and government-issued identification (e.g., passport, driver’s license).

b. Contact Data: Includes email address, phone number, and physical address.

c. Financial Data: Includes payment card details and billing information.

d. Transaction Data: Includes details of your booking history, property inquiries, and payment history.

e. Technical Data: Includes internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our website.

f. Usage Data: Includes information about how you use our website and services.

g. Marketing and Communications Data: Includes your preferences for receiving marketing communications from us and third parties, as well as your communication preferences.

  1. How We Collect Your Personal Data

We collect your personal data through various means, including:

a. Direct interactions: We collect personal data when you create an account, book a property, submit an inquiry, or communicate with us (e.g., email, phone, chat).

b. Automated technologies: We collect technical and usage data through cookies, server logs, and other similar technologies when you use our website.

c. Third parties: We may receive personal data about you from third parties, such as payment processors, analytics providers, and marketing partners.

  1. How We Use Your Personal Data

We use your personal data for the following purposes:

a. To provide and manage your bookings and inquiries.

b. To process payments and refunds.

c. To manage and maintain your account.

d. To communicate with you about our services, promotions, and updates.

e. To personalize and improve your experience on our website.

f. To comply with legal and regulatory requirements.

g. To protect our rights and interests, as well as the rights and interests of our users and third parties.

We will only use your personal data for the purposes for which it was collected, unless we reasonably consider that we need to use it for another reason that is compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will notify you and explain the legal basis for doing so.

  1. Legal Basis for Processing Personal Data

We process your personal data on the following legal basis:

a. Performance of a contract: We process your personal data to fulfill our contractual obligations to you, such as providing you with the booked property.

b. Legitimate interests: We process your personal data for our legitimate interests, such as improving our services, maintaining a secure website, and analyzing user behavior to optimize our website.

c. Consent: We may process your personal data based on your consent, such as sending you marketing communications. You have the right to withdraw your consent at any time.

d. Legal obligations: We process your personal data to comply with applicable laws and regulations, such as tax and reporting obligations.

  1. Data Retention

We will retain your personal data for as long as necessary to fulfill the purposes for which it was collected or as required by law. After that, we will securely delete or anonymize your personal data.

  1. Disclosure of Personal Data

We may share your personal data with the following categories of recipients:

a. Service providers: We may share your personal data with third-party service providers who perform services on our behalf, such as payment processing, customer support, and website hosting.

b. Property owners and managers: We may share your personal data with property owners and managers in order to facilitate your bookings and inquiries.

c. Legal and regulatory authorities: We may disclose your personal data to comply with legal or regulatory requirements, enforce our terms and conditions, or protect our rights and interests, as well as the rights and interests of our users and third parties.

d. Business transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, we may transfer your personal data to the acquiring entity.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We only allow third-party service providers to process your personal data for specified purposes and in accordance with our instructions.

6.1 Third-Party Links

Our website may contain links to third-party websites, products, or services that are not owned or controlled by us. Please be aware that we are not responsible for the privacy practices of such third-party websites or services. This Privacy Policy does not apply to any personal data that you provide to these third parties. We encourage you to review the privacy policies of any third-party websites or services you visit before providing your personal data to them.

  1. International Transfers

Your personal data may be transferred to and processed in countries outside of the European Economic Area (EEA). We will ensure that appropriate safeguards are in place to protect your personal data in accordance with the GDPR and other applicable laws.

  1. Data Security

We implement appropriate technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. However, no method of transmission or storage is completely secure, and we cannot guarantee the absolute security of your personal data.

  1. Data Subject Rights

Under the GDPR, you have the following rights regarding your personal data:

a. Right to access: You have the right to obtain a copy of your personal data that we hold.

b. Right to rectification: You have the right to request the correction of any inaccurate or incomplete personal data.

c. Right to erasure: You have the right to request the deletion of your personal data under certain circumstances.

d. Right to restrict processing: You have the right to request the restriction of processing your personal data under certain circumstances.

e. Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller under certain circumstances.

f. Right to object: You have the right to object to the processing of your personal data under certain circumstances, including for direct marketing purposes.

g. Right to withdraw consent: If we process your personal data based on your consent, you have the right to withdraw your consent at any time.

To exercise any of these rights, please contact us at support@flataway.com . We may require you to verify your identity before responding to your request.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last updated” date at the top of this Privacy Policy. You are advised to review this Privacy Policy periodically for any changes.

11. Contact Us

If you have any questions about this Privacy Policy or our data processing practices, please contact us at:

FlatAway Ltd.

27 Solunska Str., Sofia 1000, Bulgaria

support@flataway.com

12. Children’s Privacy

Our website and services are not intended for use by children under the age of 16 without the supervision and consent of a parent or guardian. We do not knowingly collect personal data from children under the age of 16 without verifiable parental consent. If a parent or guardian becomes aware that their child has provided us with personal data without their consent, they should contact us at [Insert Company Email]. If we become aware that we have collected personal data from a child under the age of 16 without verifiable parental consent, we will take steps to remove that data from our systems.”

Join our community & never miss a thing

Ready to rent?

Reserve your next flat away in just a few clicks! Enjoy smooth communication with our expert team and relish the comfort of an apartment fully equipped for remote work.
Book now