This Privacy Policy defines the principles of processing and protecting the personal data of individuals visiting the website (hereinafter referred to as the “Website”), as well as individuals using the services provided by the Controller and those corresponding with the Controller.
The Controller of your personal data is GÓRZYŃSCY Spółka z ograniczoną odpowiedzialnością with its registered office in Warsaw, ul. Grzybowska 87, 00-844 Warsaw, Poland, entered into the Register of Entrepreneurs of the National Court Register kept by the District Court for the Capital City of Warsaw in Warsaw, 13th Commercial Division of the National Court Register under KRS number: 0001031112, REGON: 525053441, NIP: 5273052085, with a share capital of PLN 5,000 (hereinafter referred to as: the “Controller” or “GÓRZYŃSCY”).
You can contact the Controller:
– In writing to the registered office address: ul. Grzybowska 87, 00-844 Warsaw, Poland.
– Via e-mail: dziendobry@gorzynscy.com.
Depending on how you interact with the GÓRZYŃSCY brand, the purposes and legal bases for data processing are structured as follows:
1. When using the Contact Form or sending an e-mail (Correspondence)
– Purpose of processing: Handling the inquiry, sending an initial offer or service valuation, and conducting further correspondence.
– Legal basis:
– Article 6(1)(b) of the GDPR – to the extent that the inquiry relates to actions aimed at entering into a contract (e.g., inquiry about a brokerage offer).
– Article 6(1)(f) of the GDPR (legitimate interest of the Controller) – for all other correspondence and answering general questions.
– Storage period: For the time necessary to handle and conclude the correspondence, but no longer than 12 months from the last contact, unless the correspondence constitutes part of the documentation related to a concluded contract.
2. When entering into a Real Estate Brokerage Agreement
– Purpose of processing: Conclusion, performance, and settlement of the real estate brokerage agreement, as well as handling official administrative matters on your behalf based on a separate order.
– Legal basis: Article 6(1)(b) of the GDPR (necessity for the performance of a contract or to take steps prior to entering into a contract).
– Storage period: For the duration of the contract and until the expiry of the limitation periods for claims arising from it (as a rule, 3 years for claims related to business activity and 6 years for other claims under the Polish Civil Code).
3. Compliance with public law and accounting obligations
– Purpose of processing: Invoicing, maintaining accounting records, and fulfilling tax obligations towards state institutions (e.g., the Tax Office).
– Legal basis: Article 6(1)(c) of the GDPR (compliance with a legal obligation to which the Controller is subject under tax law and the Accounting Act).
– Storage period: For the periods required by tax law provisions (as a rule, 5 years from the end of the calendar year in which the tax payment deadline expired).
4. When subscribing to the Newsletter
– Purpose of processing: Sending cyclical commercial, industry information, and real estate offers by electronic means.
– Legal basis: Article 6(1)(a) of the GDPR (voluntary consent of the data subject) in conjunction with national provisions regulating the sending of commercial information by electronic means.
– Storage period: Until you withdraw your consent (unsubscribe from the subscription).
5. For the Establishment, Exercise, or Defense of Legal Claims
– Purpose of processing: Ensuring the possibility of defending the legal and procedural interests of the Controller.
– Legal basis: Article 6(1)(f) of the GDPR (legitimate interest consisting in the establishment, exercise, and enforcement of claims and defense against them).
– Storage period: Until the expiry of the limitation periods for claims resulting from the provisions of law.
Every User, to the extent resulting from the provisions of the GDPR, has the following rights:
– Right of access (Article 15 GDPR): The right to obtain confirmation as to whether or not data is being processed, and to receive the first copy of it free of charge.
– Right to rectification (Article 16 GDPR): The right to request the correction of inaccurate or completion of incomplete personal data.
– Right to erasure (“right to be forgotten” – Article 17 GDPR): The right to request the deletion of data in cases provided for by law (e.g., when consent is withdrawn or data is no longer necessary).
– Right to restriction of processing (Article 18 GDPR): The right to request a temporary suspension of data operations during the verification of data accuracy or the consideration of an objection. This restriction lasts for the period necessary for the Controller to achieve this purpose.
– Right to data portability (Article 20 GDPR): The right to receive your data in a structured, machine-readable format (e.g., CSV), if the processing is based on consent or a contract and is carried out by automated means.
– Right to object (Article 21 GDPR): The right to object at any time to the processing of data based on the legitimate interest of the Controller (Article 6(1)(f) GDPR), including direct marketing and profiling.
– Right to withdraw consent (Article 7(3) GDPR): If processing is based on consent, the User has the right to withdraw it at any time without affecting the lawfulness of processing based on consent before its withdrawal.
To exercise the above rights, please contact the Controller at: dziendobry@gorzynscy.com.
The User also has the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland), if they consider that the processing violates the provisions of law.
Your personal data may be shared or entrusted only to the following categories of entities:
– Authorized employees and associates of the Controller who are bound by confidentiality.
– Entities processing data on behalf of GÓRZYŃSCY based on data entrustment agreements (IT service providers, hosting providers, CRM systems for real estate management, external accounting services, legal advisors).
– Independent data controllers with whom the Controller cooperates at your express request (e.g., banks and independent mortgage advisors if you wish to finance a property, interior architects, developers).
– Public administration authorities and law enforcement agencies, if the obligation to share data results directly from generally applicable provisions of law.
The Controller uses the services of third-party providers (such as Google LLC for e-mail and analytical tools, and Meta Platforms, Inc. for marketing tools and social media plugins), whose data centers may be located in the United States (USA).
The transfer of data to the USA takes place based on:
– The European Commission’s adequacy decision of 10 July 2023 – EU-US Data Privacy Framework – in relation to entities entered on the list of certified participants.
– Standard Contractual Clauses (SCC) approved by the European Commission – in relation to entities not covered by the above certification, thereby ensuring the highest standard and safety of data.
Personal data of Users may be processed by automated means, including profiling, in order to optimize and match real estate offers and marketing communications to the user’s preferences based on their behavior on the Website. This processing is carried out solely for the purpose of matching advertisements, does not produce any legal effects concerning the Users, and does not similarly significantly affect their situation.
- The Website uses cookies, which are IT data, in particular text files, stored on the User’s terminal equipment.
- The Controller uses two basic types of cookies:
– Session cookies: Temporary files stored on the User’s terminal equipment until logging out, leaving the website, or turning off the web browser.
– Persistent cookies: Files stored on the User’s terminal equipment for the time specified in the cookie parameters or until deleted by the User. - Classification of cookies based on the purpose of their use:
– Necessary cookies: Enable the proper and secure operation of the Website and its basic functions. They are installed automatically and do not require the User’s consent (Article 6(1)(f) of the GDPR – legitimate interest consisting in ensuring the efficient operation of the website).
– Analytical and performance cookies: Help monitor traffic statistics (e.g., Google Analytics). The use of these files is based on the voluntary consent of the User (Article 6(1)(a) of the GDPR) expressed in the cookie management window (Cookie Banner).
– Marketing and social cookies: Used to track behavior and match ads on networks such as Facebook (Meta Pixel), LinkedIn, or Instagram. The use of these files is based exclusively on the voluntary consent of the User (Article 6(1)(a) of the GDPR). - The User can change the settings regarding cookies at any time directly in their web browser (Chrome, Firefox, Safari, Edge, Opera, etc.) or through the privacy management panel on our website. Disabling optional cookies does not prevent browsing the Website but may affect the availability of certain personalized features.
The Controller reserves the right to introduce changes to this Privacy Policy, which may be affected by changes in the law or the technological development of the Website. Users will be informed of any changes in a visible and understandable manner on the Website pages.
