Privacy Policy

We care, not only about our flats, but above all we care about you. While we respect your right to privacy, know that we process your data in accordance with the applicable legal regulations.

We would like to encourage you to familiarise yourself with our data protection rules, which are established on the basis of Regulation (EU) 2016/678 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (RODO).


The administrator of your personal data, i.e. the entity that decides on the purposes and means of processing your personal data, is OOMPH S.A. with its registered office in Warsaw (00-021) at Burakowska 16b/u1, NIP: 5252741098, KRS: 0000719892, hereinafter referred to as OOMPH.


OOMPH offers comprehensive services related to the rental of flats, as well as real estate services. In fulfilling our business objectives, we process your personal data for the following purposes:

  • for the purpose of acting in order to conclude and perform a contract (Article 6(1)(b) RODO);
  • for the purpose of sending marketing content on the basis of your consent (Article 6(1)(a) RODO);
  • for the purpose of processing the bookings you make through the portals we cooperate with, i.e., Expedia Inc, Flatio sp. z o.o., Slowhop sp. z o.o., AlohaCamp S.A. (Article 6(1)(b) RODO);
  • for the purposes of billing, accounting and financial reporting (Article 6(1)(c) of the DPA);
  • for the purpose of sending the newsletter you have requested (Article 6(1)(b) RODO);
  • for the purpose of running the contact form (Article 6(1)(f) RODO);
  • for customer satisfaction surveys, e.g. through the use of questionnaires;
  • in order to improve the quality of the services offered by OOMPH (Article 6(1)(f) RODO);
  • for social media purposes, e.g. Facebook, Instagram, TikTok, LinkedIn (Art. 6(1)(f) DPA);
  • for the purpose of dealing with complaints, requests and claims (Article 6(1)(b), (c) and (f) RODO);
  • for the establishment, investigation and defence of claims (Article 6(1)(f) RODO);
  • for the purpose of processing cookies (Art. 6(1)(f) RODO). OOMPH uses the necessary cookies to enable the basic functions of the website. In addition, in the case of statistical research, marketing or recording your preferences using cookies, OOMPH will obtain your consent to store cookies on your device.


OOMPH, when recruiting and employing staff, processes personal data for purposes:

  • for the management of human resources – employees and associates (Article 6(a, b, c and f) RODO; Article 9(2)(a, b, h) RODO);
  • for the purpose of recruitment (Article 6(1)(a), (c) RODO – for employee candidates); Article 6(1)(a) and (b) RODO – for associate candidates.


OOMPH is obliged to process your data for a legally defined period of time:

  • contracts with contractors for the period of time specified in the contract, necessary for OOMPH to fulfil its obligations requiring data processing;
  • financial accounts for a period of time until the expiry of data retention obligations under the law, in particular the retention of accounting documents (5 years after the year in which the legal event occurred that obliged the issuing of the accounting document);
  • to carry out marketing until you have lodged an objection, i.e. until we have been informed in the manner you have chosen that OOMPH has ceased to send you marketing information, or until the statute of limitations for claims has expired;
  • recruitment for up to 6 months after the end of the recruitment process and, in the case of consent given for further recruitment processes, for no longer than one year;
  • employment of employees in accordance with the current legislation requiring the archiving of employment law documents, i.e. we keep personnel files for a period of 50 or 10 years. The 10-year retention period for employee records applies to employees hired after 1.01.2019. For other employees, records will be kept for a period of 50 years;
  • granted consent for marketing activities until it is withdrawn;
  • cookies for the periods indicated in section VIII or until you object to the processing.


In connection with its activities, OOMPH will disclose your personal data to the following entities:

  • business persons, including lawyers and solicitors, who cooperate with OOMPH in the provision of consultancy services to OOMPH clients;
  • to state authorities or other entities authorised by law;
  • entities that support us in our activities on our behalf, in particular: providers of external ICT systems to support our activities, entities that audit our activities, an entity that provides accounting services or entities that cooperate with OOMPH in the framework of marketing campaigns, where such entities will process data on the basis of a contract with OOMPH and only in accordance with our instructions;
  • payment service providers within the meaning of the Payment Services Act of 19 August 2011, i.e. Stripe, as well as banks, in the event of a settlement requirement;
  • in the case of job applicants, also online recruitment portals.


The provision of data is necessary in order to conclude contracts and to account for the activities carried out and for OOMPH to comply with legal requirements. This means that if you wish to make use of the services we offer, you must provide your personal data.

For the rest (in particular the processing of data by OOMPH for marketing purposes), the provision of data is voluntary.


In relation to the processing of your personal data, by OOMPH, you have the right to:

  • access to their data and receive a copy of their data;
  • rectification (amendment) of your data;
  • delete your data;
  • restrict the processing of your data;
  • portability of your data – where the legal basis for processing is consent (Article 6(1)(a) or Article 9(2)(a) RODO) or contract (Article 6(1)(b) RODO);
  • to object to the processing of his/her personal data – where the legal basis for the processing is a legitimate interest (Article 6(1)(f) RODO);
  • revoke consent at any time, without affecting the lawfulness of the processing carried out on the basis of consent before revocation;

In addition, you have the right to lodge a complaint with the supervisory authority, i.e. the President of the Data Protection Authority.



Cookies are small text files that can be used by websites to enable you to use the website as smoothly as possible. The law states that we may store cookies on your device if this is necessary for the operation of our website (Section 173 (3) of the Telecommunications Act). For all other types of cookies, we need your consent.

As some of the cookies we use constitute personal data, we want you to be aware of your rights under the RODO:

  • OOMPH stores https requests directed to the server;
  • Your personal data will be processed in order to provide basic functions of our website such as navigating our website and accessing secure areas of our website. If you have given the appropriate (voluntary) consent, your data will also be processed to provide you with services, offers and communications tailored to your preferences and to analyse website traffic and provide social features (depending on the preferences you have indicated).

Thank you for your attention, OOMPH.