Privacy Policy

In short: this website is for reading and browsing, not for collecting data. It sets no cookies, shows no adverts, sells nothing about you, and has no accounts or forms that send us anything. Booking an Athens home happens on our separate booking page, run by Hostfully — what you type there goes to Hostfully and Stripe, never through this site. If you want to reach us, you write to us yourself — by email or WhatsApp, from your own apps, using the details on this site — and we only ever hold what you choose to send. A few technical exceptions, all spelled out below: we count visits, without cookies and without knowing who you are; maps are fetched from OpenFreeMap; our date pickers ask our own server which nights are free; the “Add to my calendar” button in your booking email opens a page here with your dates, and nothing about who you are; if you pick a city on our apartments page, your browser remembers it (section 6); and, as with any website, our host keeps ordinary server logs. And when you stay in one of our Athens homes, whether you booked on our own booking page or through Booking.com, Airbnb or another booking site, we keep a short guest record in our own system (section 5). That is the whole story; the rest of this page simply spells it out.

1. Who we are

This site is run by the family behind Maya’s Residence, an aparthotel business in Gdańsk, Poland and Athens, Greece.

Data controller: Zarządzanie Apartamentami Maya’s Flats & Resorts, Toruńska 22, 80-747 Gdańsk, Poland. Stays in Athens are hosted by MAYA’S GREECE HOSPITALITY AND SERVICES A.E., 47 Gounari Street, Piraeus 18531, Greece — tax number (ΑΦΜ) 802844488, commercial registry (ΓΕΜΗ) 183825901000.

For anything in this policy, write to info@celestinresidence.pl or WhatsApp +48 884 828 718.

2. What this site does not do

Being honest here is easy, because the list is long:

• No accounts or logins. There is nothing to sign up for.
• No advertising trackers. No ad pixels, no marketing tags, and nothing that follows you from this site to another one.
• No profile of you. What we count is counted in aggregate — we cannot pick you out of it, then or later, and there is nothing to sell even if we wanted to.
• No cookies. The site’s own code sets none at all — which is also why there is no cookie banner.
• No advertising, and we never sell or share data for marketing.
• No forms that submit to us. Nothing you type on this site is sent to our servers, and there is no message form. To reach us you write to our email address or WhatsApp number yourself, from your own app.
• No card details on this site. Athens homes are booked and paid on our separate booking page, run by Hostfully with card payments by Stripe (see below). Online booking for our Gdańsk homes opens soon.
• No location requests. The map never asks where you are.

3. What happens when you browse

Hosting and server logs. The site is served by Vercel, our hosting provider and data processor. Like any host, Vercel keeps standard access logs, which include visitors’ IP addresses, for security and operations. Our legal basis is our legitimate interest in keeping the site secure and running. Vercel is a US company; transfers are safeguarded under the EU–U.S. Data Privacy Framework and standard contractual clauses, as applicable.

The map. When a map loads, your browser fetches it (tiles, styles, lettering) directly from OpenFreeMap (tiles.openfreemap.org), and at that moment your IP address reaches OpenFreeMap, as with any direct web request. On the apartments list this happens only if you switch to the map view. On a home’s own page the area map loads with the page, without you asking — corrected here on 4 August 2026, because this section previously said the map never loads unless you ask for it, and on those pages that was not true. Our legal basis is our legitimate interest in showing you where the homes are. OpenFreeMap states in its own privacy policy that it keeps no IP addresses in its regular server logs, uses no cookies or tracking technologies, and logs IPs only during security incidents, deleting them within 30 days — see openfreemap.org/privacy. That is their statement, which we pass on rather than guarantee. On the apartments list, if you never switch to the map view, this connection never happens.

Checking whether a home is free. The calendars on our Athens homes’ pages, and in the search bar on our home page, cross out the nights that are already taken, and to know which those are they ask our own server. On a home’s page this happens as the page opens; in the search bar, only when you reach for the dates or choose a home. Each of those questions names only a home and the coming six months — never your dates, your party size or anything about you. Once you have picked a check-in and check-out date — on a home’s page, on our apartments list, or on our Book direct page, where every Athens home is checked at once — those dates are sent to our server with the home (and, if that home is taken, with our other Athens homes, to find you one that is free) so it can tell you honestly whether they are taken. This happens as soon as you pick the dates, without a button press. No name, email or phone is involved in any of this — there is nothing about you in it. The answers come from a copy of our booking calendar, refreshed from our booking system, Hostfully, through the day, so they are never a promise: the booking page has the final word. On an Athens home’s own page, when that copy says your dates are free, we check with Hostfully once more, live, to be sure — again with only the dates and the home. Our legal basis is our legitimate interest in showing you honestly which nights are free, and in not inviting you to book a home that is already taken.

Booking an Athens home online. When you press Book now, your browser opens our booking page at book.hostfully.com in a new tab. The link carries only the home, your dates and your party size — nothing about who you are. Everything you then type there (name, contact details, card) goes to Hostfully, which runs our reservations, and to Stripe, which processes the card payment; it never passes through mayaflats.com, and each of them handles it under its own privacy policy. We receive your booking details from Hostfully so that we can host you. On this site we only count, in aggregate, that a Book button was pressed.

Everything else stays with us. Photos and videos are served from our own site — live apartment photos are fetched by our server behind the scenes, never by your browser — fonts are self-hosted, and nothing from an advertising or social network loads anywhere. The visit-counting script is Vercel’s own, served from this domain, and it sends its counts to Vercel — our host and data processor, named above.

4. Counting visits

From August 2026 we count how many people read these pages, and which pages they read. Without it we are guessing about our own website — whether anyone finds the Athens homes, whether a page is worth writing. It is done with Vercel Web Analytics, our host’s own tool, chosen because it is the least invasive one we could find that still answers the question.

Vercel states that it uses no cookies for this and stores nothing on your device — that is their published statement, which we pass on rather than guarantee, as with the map below. So there should be no identifier kept in your browser, nothing to clear afterwards, and nothing that could recognise you on anyone else’s website. To avoid counting the same person twice in one day, Vercel works out a short-lived code from the request itself, on its own servers, and discards it after 24 hours. Vercel does not publish how that code is calculated; it says the visit records themselves are not tied to or associated with any individual or IP address.

What is recorded with a visit: the page address — including anything carried in it, such as the dates, guest numbers or search words you chose while browsing homes — the link that brought you, the time, your approximate location from your IP (country, region and city, never your exact position), your device type, and your browser and operating system with their versions. The one exception is the calendar page our booking email links to (section 5): there we record the page itself, never the dates or the home carried in its address. We will also record when someone presses a Book now button, or a link to our email or WhatsApp — which button, on which page — because otherwise we cannot tell a page that works from one that is merely read. What happens after that is not part of this: the booking is made on our booking page, and a message is composed in your own email or WhatsApp app; neither passes through us.

Our legal basis is our legitimate interest in understanding whether our own site works. Our position is that because this stores nothing on and reads nothing from your device, it does not require a consent banner under the ePrivacy rules — and we would rather not put one in front of you for something that cannot identify you anyway. If you would prefer not to be counted at all, any content blocker will stop it, and nothing on the site breaks if you do.

5. What happens when you book, or write to us

Booking happens on our booking page, described in section 3: nothing you type there passes through this site. Writing to us happens in your own app: the email address and WhatsApp number on this site are plain links, and what you write leaves your device only when you decide to send it — the site never sees any of it. (Until 22 September 2026 the site also offered “enquiry” buttons that pre-drafted such a message, including one that handed the draft to Google’s web Gmail; those are gone.)

Adding your stay to your calendar. After you book an Athens home on our booking page, Hostfully emails you your booking details on our behalf. The email’s “Add to my calendar” button opens a page on this site, and its link carries only your check-in and check-out dates, the number of nights and which home you booked — never your name, email or booking reference. The page reads them in your browser and turns them into a calendar entry holding your dates, the home, our address and how to reach us — nothing about you. If you choose Google Calendar or Outlook, your browser opens their calendar with that entry already filled in, so it reaches Google or Microsoft, under their own privacy policies. If you choose Apple Calendar, or download the file, our server builds the calendar file from the same dates and home and keeps nothing. Our visit counting (section 4) never records those dates or the home: your browser takes them out of the page address before the count is sent. As with any web request, the addresses of the page and the file, dates included, reach our host, Vercel, and can appear in its standard access logs (section 3). Our legal basis is our legitimate interest in helping you keep track of the stay you booked with us (GDPR Article 6(1)(f)).

Our guest records. When you book one of our Athens homes — on our own booking page, or through Booking.com, Airbnb or another booking site — Hostfully, which runs our bookings, passes a copy of the booking to our own internal system, Maya OS (hosted for us by Supabase and Vercel). From it we keep a short guest record, so that we can look after your stay. For Athens stays the controller of these records is MAYA’S GREECE HOSPITALITY AND SERVICES A.E. (section 1). Only the owners can see them, and we never sell them or share them for anyone’s marketing. We send you news by email only if you have told us yes. (What accounting and tax law makes us keep about a booking stays with our booking system and our accountant, not in this record.)

If you booked on our own booking page and it gave us your email address or phone number, the record holds your name, email address, phone number and country, how many times you have stayed with us and what you have spent, so that we can also recognise you if you come back. We keep it for ten years after your last stay and then delete it automatically; ask us and we delete it sooner. Our legal basis is our legitimate interest in looking after our guests and welcoming them back (GDPR Article 6(1)(f)); you can object at any time, and we will delete your record.

If you booked through Booking.com, Airbnb or another booking site, that site passes your booking to us through Hostfully. From it we keep your full name, your phone number if the site gives us one, your country, and the details of your booking: the home, your dates, the price and which site you booked on. This record never holds the email address the booking site gives us — it only forwards messages through that site. We use this record to look after your stay and for our business records, and we may contact you about your stay by phone, SMS or WhatsApp (WhatsApp is run by Meta). We keep it for up to three years after you check out and then delete it automatically. Hostfully, which runs our bookings for us, keeps the booking itself, as the booking site sent it, as part of our booking history. Our legal basis is carrying out your booking (GDPR Article 6(1)(b)) and our legitimate interest in keeping proper business records (Article 6(1)(f)). You can ask to see this record, ask us to delete it, or object to our keeping it: write to info@celestinresidence.pl or WhatsApp +48 884 828 718. Section 7 sets out all your rights.

If you email us at info@celestinresidence.pl, we receive whatever you choose to send — typically your name, email address, dates and questions. It sits in our business mailbox, hosted by Microsoft (Outlook). Our legal basis is taking steps at your request before any booking (GDPR Article 6(1)(b)).

If you WhatsApp us, your message and phone number pass through WhatsApp (Meta) under WhatsApp’s own terms and privacy policy — but only because you chose that channel and pressed send. Nothing from Meta loads on our pages.

How long we keep it. We keep correspondence with you while we are in conversation and usually no more than 90 days after our last exchange, in case you come back to book. If a booking follows, we keep the related correspondence for as long as accounting and tax law requires. If you wrote to us and it went nowhere and you would like it deleted, ask and we simply will.

6. The one thing stored on your device

If you choose Gdańsk or Athens with the city buttons on our apartments page, that choice is saved in your browser’s local storage (a single item called mayaCityV1, holding only “gdansk” or “athens”) so that a few small accent colours on the site match that city next time. It is saved only when you press one of those buttons yourself — opening a page saves nothing. It is purely functional: one of two fixed words, never sent anywhere, and useless for tracking. It stays on your device until you clear your browser’s site data for mayaflats.com (usually under settings → privacy → clear browsing data). In private browsing it may simply not persist, which is fine.

Earlier versions of the site also saved a colour-scheme choice (an item called mayaCwV1). The site no longer keeps it: every page now deletes that item from your browser if it finds one.

7. Your rights

Under the GDPR you can ask us, at any time and free of charge, to: see the data we hold about you, correct it, delete it, restrict how we use it, object to our use of it, or receive a copy in a portable form. Write to info@celestinresidence.pl or contact Yoav Nir, and we will answer within a month.

You are never required to give us any data — the whole site works without it. We make no automated decisions about you and do no profiling.

If you believe we have handled your data badly, you may complain to a supervisory authority: in Poland, the UODO (uodo.gov.pl); in Greece, the Hellenic Data Protection Authority (dpa.gr); or the authority in your own country.

8. Changes to this policy

Online booking for our Athens homes opened on 21 September 2026, and we updated this policy ourselves for that day, and again on 22 September 2026, when the enquiry buttons left the site, and on 23 September 2026, when we corrected section 6 on what is stored on your device. On 26 September 2026 we added the calendar page our booking email links to (section 5), and corrected the paragraph on checking whether a home is free (section 3), which said every answer for our Athens homes came live from Hostfully. On 29 September 2026 we added our guest records (section 5), and later that day changed how long we keep them and whose we keep. On 30 September 2026 we extended them to guests who book through Booking.com, Airbnb or another booking site, earlier stays included. A review by a lawyer is still to come. If the site ever starts doing more, we will update this page and change the date at the top. The current version is dated 30 September 2026.