Privacy Policy

In short: this website is for reading and browsing, not for collecting data. It sets no cookies, shows no adverts, sells nothing about you, and has no accounts or forms that send us anything. If you want to reach us, you write to us yourself — by email or WhatsApp, from your own apps — and we only ever hold what you choose to send. A few technical exceptions, all spelled out below: we count visits, without cookies and without knowing who you are; maps are fetched from OpenFreeMap; picking dates on a home asks our own server whether it is free; and, as with any website, our host keeps ordinary server logs. That is the whole story; the rest of this page simply spells it out.

1. Who we are

This site is run by the family behind Maya’s Residence, an aparthotel business in Gdańsk, Poland and Athens, Greece.

Data controller: Zarządzanie Apartamentami Maya’s Flats & Resorts, Toruńska 22, 80-747 Gdańsk, Poland. Stays in Athens are hosted by our Greek operating company, named in your booking confirmation.

For anything in this policy, write to info@celestinresidence.pl or WhatsApp +48 884 828 718.

2. What this site does not do

Being honest here is easy, because the list is long:

• No accounts or logins. There is nothing to sign up for.
• No advertising trackers. No ad pixels, no marketing tags, and nothing that follows you from this site to another one.
• No profile of you. What we count is counted in aggregate — we cannot pick you out of it, then or later, and there is nothing to sell even if we wanted to.
• No cookies. The site’s own code sets none at all — which is also why there is no cookie banner.
• No advertising, and we never sell or share data for marketing.
• No forms that submit to us. Every “send” button opens your own email or WhatsApp app with a message drafted for you; your enquiry is never posted to or stored on our servers.
• No payments on the site. Bookings today are arranged by correspondence after you enquire.
• No location requests. The map never asks where you are.

3. What happens when you browse

Hosting and server logs. The site is served by Vercel, our hosting provider and data processor. Like any host, Vercel keeps standard access logs, which include visitors’ IP addresses, for security and operations. Our legal basis is our legitimate interest in keeping the site secure and running. Vercel is a US company; transfers are safeguarded under the EU–U.S. Data Privacy Framework and standard contractual clauses, as applicable.

The map. When a map loads, your browser fetches it (tiles, styles, lettering) directly from OpenFreeMap (tiles.openfreemap.org), and at that moment your IP address reaches OpenFreeMap, as with any direct web request. On the apartments list this happens only if you switch to the map view. On a home’s own page the area map loads with the page, without you asking — corrected here on 4 August 2026, because this section previously said the map never loads unless you ask for it, and on those pages that was not true. Our legal basis is our legitimate interest in showing you where the homes are. OpenFreeMap states in its own privacy policy that it keeps no IP addresses in its regular server logs, uses no cookies or tracking technologies, and logs IPs only during security incidents, deleting them within 30 days — see openfreemap.org/privacy. That is their statement, which we pass on rather than guarantee. On the apartments list, if you never switch to the map view, this connection never happens.

Checking whether a home is free. If you pick a check-in and check-out date on a home’s page, those dates and that home’s name are sent to our own server so it can look at our calendar and tell you honestly whether the dates are taken. This happens as soon as you pick the dates, without a button press. No name, email or phone is involved — there is nothing about you in it. For our Athens homes the question is passed on to our booking system, Hostfully, so the answer is the live one. Our legal basis is our legitimate interest in not inviting you to enquire about a home that is already booked.

Everything else stays with us. Photos and videos are served from our own site — live apartment photos are fetched by our server behind the scenes, never by your browser — fonts are self-hosted, and nothing from an advertising or social network loads anywhere. The visit-counting script is Vercel’s own, served from this domain, and it sends its counts to Vercel — our host and data processor, named above.

4. Counting visits

From August 2026 we count how many people read these pages, and which pages they read. Without it we are guessing about our own website — whether anyone finds the Athens homes, whether a page is worth writing. It is done with Vercel Web Analytics, our host’s own tool, chosen because it is the least invasive one we could find that still answers the question.

Vercel states that it uses no cookies for this and stores nothing on your device — that is their published statement, which we pass on rather than guarantee, as with the map below. So there should be no identifier kept in your browser, nothing to clear afterwards, and nothing that could recognise you on anyone else’s website. To avoid counting the same person twice in one day, Vercel works out a short-lived code from the request itself, on its own servers, and discards it after 24 hours. Vercel does not publish how that code is calculated; it says the visit records themselves are not tied to or associated with any individual or IP address.

What is recorded with a visit: the page address — including anything carried in it, such as the dates, guest numbers or search words you chose while browsing homes — the link that brought you, the time, your approximate location from your IP (country, region and city, never your exact position), your device type, and your browser and operating system with their versions. We will also record when someone presses an enquiry button — which button, on which page — because otherwise we cannot tell a page that works from one that is merely read. The message you then write is not part of this: it is composed in your own email or WhatsApp app and never passes through us.

Our legal basis is our legitimate interest in understanding whether our own site works. Our position is that because this stores nothing on and reads nothing from your device, it does not require a consent banner under the ePrivacy rules — and we would rather not put one in front of you for something that cannot identify you anyway. If you would prefer not to be counted at all, any content blocker will stop it, and nothing on the site breaks if you do.

5. What happens when you enquire

No enquiry leaves your device until you decide it does. When you tap an enquiry button, the site opens your own email or WhatsApp app with a pre-drafted message. You can edit it, send it, or close it and walk away — the site never sees any of it.

If you have no mail app and use the “Open in Gmail” link instead, your drafted message is handed to Google in the web address that opens, under Google’s own terms — again, only because you chose that route. The “copy the note” button touches nobody: it puts the text on your own clipboard and nothing else.

If you email us at info@celestinresidence.pl, we receive whatever you choose to send — typically your name, email address, dates and questions. It sits in our business mailbox, hosted by Microsoft (Outlook). Our legal basis is taking steps at your request before any booking (GDPR Article 6(1)(b)).

If you WhatsApp us, your message and phone number pass through WhatsApp (Meta) under WhatsApp’s own terms and privacy policy — but only because you chose that channel and pressed send. Nothing from Meta loads on our pages.

How long we keep it. We keep enquiry correspondence while we are in conversation and usually no more than 90 days after our last exchange, in case you come back to book. If a booking follows, we keep the related correspondence for as long as accounting and tax law requires. If your enquiry went nowhere and you would like it deleted, ask and we simply will.

6. The one thing stored on your device

If you pick a colour scheme with the site’s colourway picker, your chosen palette name is saved in your browser’s local storage (a single item called mayaCwV1) so the pages keep your colours next time. It is purely functional: one of a handful of fixed palette names, never sent anywhere, and useless for tracking. It stays on your device until you clear your browser’s site data for mayaflats.com (usually under settings → privacy → clear browsing data). In private browsing it may simply not persist, which is fine.

7. Your rights

Under the GDPR you can ask us, at any time and free of charge, to: see the data we hold about you, correct it, delete it, restrict how we use it, object to our use of it, or receive a copy in a portable form. Write to info@celestinresidence.pl or contact Yoav Nir, and we will answer within a month.

You are never required to give us any data — the whole site works without it. We make no automated decisions about you and do no profiling.

If you believe we have handled your data badly, you may complain to a supervisory authority: in Poland, the UODO (uodo.gov.pl); in Greece, the Hellenic Data Protection Authority (dpa.gr); or the authority in your own country.

8. Changes to this policy

If this site ever starts doing more — online booking and payment are planned, and this policy will be rewritten and reviewed by a lawyer before that launches — we will update this page and change the date at the top. The current version is dated 4 August 2026.