By visiting our website, you entrust us with your data, which we process for specific purposes, but always with care to protect your privacy. This Privacy Policy serves as an aid to understanding what data we collect and for what purpose and what we use it for.

The information specified in this document is very important to you, because we have addressed matters related to the processing of personal data in it, especially with regard to the content of the provisions on the protection of personal data, including Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016. on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as “GDPR”). For this reason,

in this document we inform you about the legal grounds for processing  personal data, the methods of their collection and use, as well as the rights of data subjects related thereto.

We want you to read this document and here we are asking you.



What are personal data and what does their processing mean?

Personal data means information about an identified or identifiable natural person. The processing of personal data is basically any activity on personal data, regardless of whether it is performed in an automated manner or not, e.g. collecting, storing, recording, organizing, modifying, viewing, using, sharing, limiting, deleting or destroying. We process your personal data specified in this document for various purposes, and different methods of collection, grounds for legality of processing, use, disclosure and storage periods may be used in the processing process, which are always specified in relation to the purpose for which the data is provided by us processed.

When does this Privacy Policy apply?

This privacy policy applies to all cases where we are the personal data controller and we process personal data. This applies both to cases where we process personal data obtained directly from the data subject and to cases where we have obtained personal data from other sources.

How, based on what legal grounds and what type of personal data do we process?

In order to maintain transparency regarding the methods and legal grounds for the processing of personal data, as well as the purposes for which we process personal data, each time as the Data Administrator we indicate the necessary information in this regard to each person to whom we process personal data. Guided by the principle set out above, to make our explanation of these issues as clear as possible, we present in this document a list of personal data processing operations based on various grounds for the legality of the processing process, including whenever we indicate the basis for the legality of the processing based on the legitimate interest of the data controller, we try to analyze and balance our interest and the potential impact of the process on the data subject (both positive and negative consequences of the process) and the rights of the natural person under the law.

We declare that, as the Data Administrator, we do not process personal data based on our legitimate interest if we conclude that the impact on the data subject would outweigh our interests (then we can process personal data if, for example, we have the appropriate consent or it is required or allowed by law).



Data Administrator

Fulfilling Our legal obligation, we inform you that the Data Administrator personal data collected via website   is  G-Rental Sp. z o. o.  with its registered office in  Warsaw < i>(address: ul. Bocheńskiego 6)  – further (G-Rental Sp. z o. o.)
t: 400;”>within the meaning of the Personal Data Protection Act.

You have the right to contact us by sending us information to the e-mail address:

We protect your privacy, which is why we have appointed a person dealing with the protection of personal data in the person of Krzysztof Głuchowski, whom you have the right to contact by e-mail in case of any ambiguity regarding the processing of your personal data by us.

Categories of natural persons to whom the data relate:

Personal data processed on this website concerns:

  • natural persons (customers, potential customers, employees) contacting (contact form) to obtain information about the offer or to share comments on services or products, contacting to conclude a contract, as well as job seekers,
  • natural persons (website users) using information about the company, services/products made available on the website.



A natural person visiting a website or using services provided via an electronic website always has control over the personal data they provide to us.

In principle, our website limits the collection and use of information about their users to the minimum necessary to provide them with services at the desired level, pursuant to art. 18 of the Act of July 18, 2002 on the provision of electronic services.

Each time the purpose and scope of data processed by the Data Administrator results

from the necessary minimum associated with  with the need to provide services to the user

in cases:

  • adjusting the content of the page to the user’s expectations,
  • analyze server problems, prevent possible violations
    and ensuring website security,
  • analyzing statistics of website visits, including analyzing demographic data of users visiting the website (information about the region
    and the device from which the connection was made),
  • actions we take for your benefit. For example, if you want to ask us a question, you may be asked to provide a specific scope of personal data depending on the content of the selected issue.


  1. Purpose of collecting personal data

We collect your personal data for one of the purposes defined below:

  • in order to adjust the content of the website to your needs and interests and to properly manage the website. For this purpose, Cookies are used on our website (cookie policy), which allow us to exclusively remember the user’s session and the content of the message sent via the contact form in the event of an error on the website, create statistics that help understand how users use from the website and to identify violations and ensure the security of the website.
  • in order to enable you to contact us (via the contact form) and to provide you with a reliable answer depending on the content sent message. To achieve this, we ask you to provide different categories of data. We tried to ensure that the scope of the collected data was adequate (appropriate), and above all, minimal
    in relation to the goal we want to achieve, understood as
  • presenting you with a commercial offer in case of a request for an offer,
  • consideration of complaints/comments, if submitted,
  • provide technical support,
  • conduct recruitment,
  1. The scope of data processed by the website, depending on the purpose for which the data is processed, relate to:
  • contact form in scope:
  • Name;
  • Email address
  • Phone number;
  • Message content;
  • Website management, scope:
  • IP address;
  • Attachment.
  1. We can also process anonymized operational data related to visiting our website (so-called logs – IP address, domain). We use this data to generate statistics that help us administer the website. These data are aggregate and anonymous, i.e. they do not contain features identifying a natural person – the website user, and the Logs are not disclosed to third parties, with the reservation of the possibility of sharing information on the IP number of the website user’s data at the request of an authorized person under applicable law, state authorities in connection with proceedings conducted by them.
  2. Automatic processing of personal data

The information we collect in connection with the use of our online services/products made available on the website may be processed in an automated manner (including in the form of profiling), however, this will not cause no legal effects on a natural person or similarly significantly affect their situation. We attach particular importance to the issue of profiling and point out that:

  • we do not process any sensitive data for profiling,
  • for the purposes of profiling, we usually process data that has previously been pseudonymized or data that has been aggregated by us
  • if we cannot achieve the goal otherwise than by profiling non-pseudonymized or non-aggregated personal data, we use typical data for this: e-mail address and IP or cookies
  • we profile in order to analyze or forecast personal preferences and interests of people using our website or products or services and matching the content on our website,< /span>
  • we profile for marketing purposes, i.e. matching the marketing offer to www. preferences.
  1. Recipients

We do not share personal data with companies, organizations or persons outside G-Rental Sp. z o. o.  if one of the following circumstances does not occur:

  • The user has consented to this action – in this case, we share personal data with companies, organizations and people outside G-Rental Sp. z o. o. if the user agrees.
  • There are legal reasons – in this case we share personal data with companies, org

organizations and persons from outside G-Rental Sp. z o. o. if we believe in good faith that the disclosure, use, preservation or disclosure of data is justified
in relation to:

  • striving to meet the requirements of applicable law, regulations, legal processes or legally binding requests of state institutions.
  • enforcing the applicable Terms of Use (website regulations), including investigating potential violations;
  • monitor site traffic, time spent, etc.
  • detection and prevention of fraud and other fraud, security and technical issues;
  • protection of property rights or security of the Data Administrator, website users, and other persons as required or permitted by law.
    1. Change processing purpose

    We don’t expect it, but we can’t rule it out. We know for sure that if the purpose of processing your data changes, we will inform you about such a situation so that you are aware

    and could exercise your rights.



    The legal basis for the processing of personal data is the premise:

    • processing is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract. This basis refers to the data collected via the contact form that has been made available on our website. In this case, providing personal data is necessary to perform a specific activity at your request in accordance with the purpose of processing, e.g. if you do not provide us with your e-mail address, we will not be able to answer your inquiry in accordance with the content of the message sent.

    We ask you not to provide information from special categories of personal data via the contact form (such as information about race or ethnic origin, political views, religious or philosophical beliefs, trade union membership, physical or mental health information, genetic data, biometric data, information about sex life or sexual orientation and criminal history). If such information is provided for any reason, we declare that, as the Data Administrator, in order to ensure transparency of data processing for a specific purpose, we will remove such content of such a message, of which we will inform you to the condemned e-mail address.

    • your consent to the presentation of services and products and the provision of commercial information about services and products by means of electronic communication, in particular e-mail in relation to the submitted inquiry;
    • your consent, to process certain categories of data always for a specific purpose, for which we ask you to give us, for example, your number telephone number in order to contact you in the specific subject of the message sent,
    • necessity to implement the legitimate goals of the Data Administrator, which are expressed by:
    • website management,
    • adapting its content to your needs and expectations and ensuring the security of your data in cyberspace,
    • marketing of own services and products.




Our goal is to protect you from the negative consequences of processing your personal data. For this purpose, we have tried to optimize the storage time of your data collected via www.  We defined this time:

  1. if the Data Administrator processes personal data on the basis of consent, the processing period lasts until the user withdraws this consent;< /li>
  2. if the Data Administrator processes personal data on the basis of the legitimate interest of the data administrator, the processing period lasts until the above-mentioned ends. interest (e.g. the period of limitation of civil law claims) or until the data subject objects to further such processing – in situations where such an objection is entitled under the law;
  3. if the Data Administrator processes personal data because it is necessary due to applicable law, the periods of data processing for this purpose are specified in these regulations (for example, it is required by law to retain your Personal Data for a longer period, or if your Personal Data is needed to bring or defend legal claims, the company will retain your Personal Data until the end of the relevant retention period or until the allegations in question;
  4. in the absence of specific legal or contractual requirements, the basic data storage period for records and other documentary evidence prepared during the performance of the contract is a maximum of 10 years.



Cookies are small text information in the form of text files, sent by the server and saved on the website visitor’s side (e.g. on the hard drive of a computer, laptop or also on the smartphone’s memory card – depending on what device the visitor to our website uses).

Detailed information on Cookies, as well as the circumstances of their creation can be found, among others here: Cookies Policy



It’s worth knowing what rights you have in connection with the processing of your personal data:

  • At any time you have the right to withdraw your consent, which will stop the processing of personal data processed on the basis of consent. Withdrawal of consent does not affect the compliance of the processing of personal data that we have made on the basis of the consent given before its withdrawal. This right can be exercised by sending an e-mail to:
  • You have right to request deletion (right to be forgotten ) personal data concerning you from IT systems and files. This right will be exercised by the Administrator, unless the Administrator has a legal obligation to retain and thus process data, despite the right to be forgotten. This right can be exercised by sending an e-mail to: (please insert your address)
  • You have the right to access your data (release requests data backup). This right can be exercised by sending an e-mail to:
  • You have right to rectification (data update)< /span>. Please be advised that updating the data will not delete the data before updating, which is related to the obligation to maintain the integrity of the data processed by the Administrator for a specific purpose. This right can be exercised by sending an e-mail to:
  • You have the right to restrict processing , including right to object to data processing referring to a specific situation. Please be advised that the indicated right will be implemented by the Administrator only in a situation where the performance of a specific action is not contrary to applicable law, which obliges the Administrator to process data. This right can be exercised by sending an e-mail to:
  • Additionally you have the right to transfer of your data from IT systems for the benefit of the indicated entity and to file a complaint to the Supervisory Office about the Data Administrator’s actions in the processing of personal data.



We make every effort to protect users against unauthorized access, unauthorized modification, disclosure and destruction of information on  held by G-Rental Sp. z o. o. In particular:

  • we use SSL encryption;
  • we control our methods of collecting, storing and processing information,
    including physical security measures to protect against unauthorized access to the system;
  • we grant access to personal data only to these employees and contractors
    and representatives who must have access to them to process them for our needs. Furthermore, they are contractually obligated to maintain strict confidentiality,
  • and in the event of failure to meet these obligations, they may suffer consequences, in total
    with termination of cooperation.



Any questions, concerns or concerns about the content of this Privacy Policy or how we process personal data, as well as complaints about these matters (although we hope that you will not need to raise such complaints), please send an email with details of the complaint to:

Any complaints we receive will be investigated and responded to.


Naturally, we do not limit contact with us and we enable direct contact at the headquarters in Warsaw, as well as contact by letter (mail) or telephone contact, and for this purpose we provide the following contact details:

G-Rental Sp. z o. o.

Bocheńskiego 6

04 – 478 Warsaw



This Privacy Policy may change from time to time. User Rights Consequent

from this Privacy Policy will not be restricted without your express consent. Any changes to the Privacy Policy will be posted on this page and we will provide more prominent notice of significant changes (for some services combined

with sending an appropriate e-mail notification). We also keep previous versions of this Privacy Policy in an archive for users to consult.

This document was last updated on 02/01/2023.

Change log.