MIRO Rooms Rentals Privacy Policy

Effective Date: July 1, 2025

This Privacy Policy (the “Policy”) of MIRO Rooms Rentals (the “Operator,” “we,” “our,” or “us”) describes how we collect, store, use, process, and protect the personal data of individuals (the “User,” “you,” or “data subject”) in connection with our property management services offered via our website miro-rooms.rentals (the “Site”). This Policy is drafted in accordance with the EU General Data Protection Regulation (“GDPR”) and applicable national data protection laws.

1. Definitions

• Personal Data means any information relating to an identified or identifiable natural person.
• Processing means any operation performed on personal data, including collection, recording, storage, structuring, use, disclosure, erasure, and destruction.
• Consent means any freely given, specific, informed, and unambiguous indication of the data subject’s wishes by which they signify agreement to the processing of their personal data.
• Controller or Operator means the legal entity determining the purposes and means of processing personal data.

2. Categories of Personal Data Collected

We process only the personal data you voluntarily provide through forms on our Site, including:

• Identification and Contact Data: first name, last name, email address, and telephone number.
• Correspondence Data: messages, requests, comments, and any attachments you submit.

We do not collect or process any special categories of personal data (e.g., racial, health, religious, or political information).

3. Purposes and Legal Bases for Processing

We process your personal data for the following purposes on the corresponding legal bases under Article 6 of the GDPR:

1. Performance of a Service Agreement (Art. 6(1)(b)): to provide property management services to you.
2. Communication and Support (Art. 6(1)(b)): to respond to inquiries, provide reports, and manage ongoing service delivery.
3. Legal Compliance (Art. 6(1)(c)): to comply with statutory reporting and record-keeping obligations.
4. Marketing and Promotions (Art. 6(1)(a)): only if you have given explicit consent for newsletters, offers, or announcements.

4. Data Retention

• Data necessary to fulfill service agreements are retained for the duration of the contract and for an additional three (3) years thereafter for accounting, record-keeping, and dispute resolution.
• Contact form submissions are retained until you withdraw consent or for one (1) year after last interaction.

Upon expiry of these periods, we will either securely delete or irreversibly anonymize your data.

5. Disclosure to Third Parties

We disclose personal data to third parties only in the following circumstances:

1. Legal Requirement: where mandated by law, court order, or governmental authority.
2. Service Providers: our hosting, email, and IT infrastructure partners bound by confidentiality and security agreements.
3. Your Instruction: when you expressly request transfer of data to third parties.

We never sell or rent your personal data, except as permitted by law or with your explicit consent.

6. Data Security Measures

We implement appropriate organizational and technical safeguards to protect personal data against unauthorized access, loss, alteration, or disclosure, including:

• TLS/SSL encryption (HTTPS) for data in transit.
• Role-based access controls ensuring “least privilege.”
• Periodic security audits and vulnerability assessments.
• Secure data storage with encryption at rest where required.

7. Your Data Protection Rights

Under the GDPR, you have the following rights:

1. Access: request a copy of your personal data.
2. Rectification: correct inaccurate or incomplete data.
3. Erasure: request deletion of data when processing is unlawful or no longer needed.
4. Restriction: limit processing in certain circumstances.
5. Objection: object to processing for direct marketing.
6. Withdraw Consent: withdraw any consent given, without affecting prior lawful processing.
7. Complain: lodge a complaint with a supervisory authority (e.g., your national Data Protection Authority).

To exercise any rights, please contact us at [email protected]. We will respond within one (1) month of receipt.

8. Changes to This Policy

We may update this Policy at any time. All changes will be posted on this page with the new effective date. We encourage you to review this Policy periodically.

Operator Contact Information:
MIRO Rooms Rentals
Email: [email protected]
Phone: +371 29 64 29 29