Privacy Policy

Rrini is a property rental platform operating in Kosovo. This policy explains what personal data we collect, how we use it, and your rights.

The data controller is Rrini Solutions L.L.C., a company registered in Kosovo (Business No. 812433770), Rr. Mujo Ulqinaku 11, Prishtinë, Republic of Kosovo.

You can reach us about privacy at admin@rrini.com or by phone at +383 49 300 120.

Account data: name, email address, phone number, and password (stored encrypted) when you register.

Profile data: profile photo if you choose to upload one.

Booking data: dates, times, property, booking type, price, and booking status for reservations you make or receive.

Access data: the access code or entry instructions issued for your booking, the exact window they are valid for, and when access was released to you. A code belongs to one booking and stops working when that stay ends.

Readiness data: when a property was expected to be ready for your stay, when it was actually confirmed ready, and which cleaner or staff member confirmed it.

Cleaning activity: for people working as cleaners, we record the tasks assigned to you, when you started, when you finished, and when you marked a property ready. This is a record of work, and it is used to run turnovers and to check that access was released correctly.

Communication data: messages sent between guests and hosts through the platform.

Usage data: IP address, browser type, pages visited, and actions taken — collected automatically via server logs.

Google sign-in: if you sign in with Google, we receive your name, email, and profile photo from Google.

• To create and manage your account.
• To process and display bookings.
• To issue your access code and open it only for the window of your stay.
• To schedule cleaning and to tell you when your property is ready.
• To send booking confirmations and notifications by email.
• To show your listings or bookings to relevant users.
• To investigate what happened when a stay goes wrong — a late cleaning, a code that did not work, a refund request.
• To detect and prevent fraud or abuse.
• To improve the platform through anonymised analytics.

We do not sell your personal data to third parties.

We process your data on the following legal bases:

• Contract: processing necessary to fulfil your bookings and account.
• Legitimate interest: security, fraud prevention, property access control, and platform improvement.
• Consent: marketing emails, if you opt in.

We share your data only where necessary:

• Hosts: guests' names and booking details are shared with the host of a confirmed booking.
• Guests: the host's name and contact details are shared with confirmed guests.
• Cleaners: cleaners are given the property, the times they need to work to, and what needs doing. They are not given guest names or guest contact details.
• Smart lock provider: at the few properties with a smart lock, the code and its start and end time are sent to the lock provider so the lock will accept it. No guest name is sent.
• Payment processing: card payments are handled securely by Paysera. We never receive or store your full card details.
• Service providers: cloud hosting and CDN (Cloudflare), file storage, transactional email delivery, SMS delivery, and error/performance monitoring (Sentry). These providers process data on our behalf under data processing agreements.
• Legal obligations: we may disclose data if required by law or to protect the rights and safety of users.

We keep your account data for as long as your account is active. Booking records are kept for 5 years for accounting and legal purposes. You can request deletion of your account at any time (see Section 8).

An access code stops working at the end of the stay it was issued for. The record that a code was issued, and the window it covered, is kept with the booking record so we can answer questions about who could enter a property and when. Readiness and cleaning records are kept for the same period, for the same reason.

Essential cookies keep you logged in, remember your language, protect against CSRF, and store your saved stays. These are strictly necessary and always on.

Preference & performance cookies and similar technologies help us understand and fix errors. These are only used if you accept them in the cookie banner.

Partner referrals If you reach Rrini through a link on a partner site, we set one first-party cookie recording which partner sent you, so they can be credited for a booking you make. It is set and read only by Rrini, is never shared with the partner or anyone else, and expires within days.

We also keep a record of the visit itself: the partner, the time, the page you arrived on, the domain of the site you came from, and your browser type. Your IP address is stored only as a one-way digest, never in a readable form. Unlike the cookie, these records are kept indefinitely, so that a commission paid months later can still be accounted for.

We do not use third-party advertising or cross-site tracking cookies. You can change your choice at any time by clearing your browser storage for this site.

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data from your profile settings.
• Delete your account by contacting us at admin@rrini.com.
• Object to processing based on legitimate interest.
• Port your data in a machine-readable format on request.

To exercise any of these rights, email us at admin@rrini.com.

Access, readiness and cleaning records attached to a completed booking are part of that booking record. We keep them for the retention period in Section 6 even if you close your account, because they are how we prove who was let into a property and when.

We use encryption in transit (HTTPS), hashed passwords, and access controls to protect your data. No system is completely secure; if you suspect unauthorised access to your account, contact us immediately.

Access codes are shown only to the guest whose booking they belong to, and only once the property is confirmed ready.

We may update this policy periodically. We will notify you of significant changes by email or through the platform. The date at the top of this page always reflects the latest version.

For privacy questions or data requests: admin@rrini.com