Dear Sir or Madam,
you will find below the information about the rules of personal data processing which were collected by NE during your visit at NE website: https://www.nowodworskiestates.pl/ and https://www.privatehousebrokers.pl (hereinafter referred to as: “Website”).

I. GENERAL INFORMATION

  1. The administrator of your personal data collected during your visit at the Website is Nowodworski Estates Equity Sp. z o.o. (formerly: Nowodworski Estates Spółka z ograniczoną odpowiedzialnością Sp.k.) with its registered headquarter in Kraków, ul. Sukiennicza 8/U8, 31-069 Kraków (hereinafter referred to as:“Administrator”” or “We”).
  2. You can contact the Administrator via email: biuro@nowodworskiestates.pl or via phone: +48 12 350 29 50.
  3. Each entity / person using the Website is considered as its user (hereinafter referred to as: “User”).
  4. The Administrator processes the personal data of the User in accordance with applicable legal provisions, especially with Regulation (EU) 2016/679 of the European Parliament and the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (“GDPR”).
  5. We ensure the confidentiality of personal data which were collected by us. We use the appropriate technical and organizational safeguards, thanks to which we can ensure that your personal data is adequately protected against unauthorized access.

II. RIGHTS OF THE USERS

Each User who transmitted his personal data using one of the forms available on the Website has:

  • the right to access his personal data and the right to obtain a copy of the personal data (GDPR Article 15)
  • the right to correction of inaccurate or out of date personal data (GDPR Article 16)
  • the right to deletion of the personal data (GDPR Article 17)
  • the right to limitation of processing of the personal data (GDPR Article 18)
  • the right to transmission of the data (GDPR Article 20)
  • the right to object to the processing of the personal data on the basis of the legitimate interest of the Administrator (GDPR Article 21)
  • the right to lodge a complaint with a supervisory authority (Prezes Urzędu Ochrony Danych Osobowych) if the User considers that the processing of his personal data infringes GDPR (GDPR Article 77).

The right to access to the personal data, the right to obtain a copy of the personal data and the right to lodge a complaint with a supervisory authority are always applicable. Other rights are not absolute and they depend on fulfillment of the requirements of GDPR described in articles 16-21.

 

In order to exercise your rights please contact the Administrator via e-mail: biuro@nowodworskiestates.pl

III. PROCESSING OF THE PERSONAL DATA GIVEN VIA THE FORMS AVAILABLE ON THE WEBSITE

  1. “Contact with us” and “Write a message” forms

    Personal data submitted to the Administrator by the forms will be processed for the purpose of answering the questions referred. The legal basis of the processing is the legitimate interests pursued by the Administrator which is answering to the User’s messages and communication with the User (GDPR Article 6 paragraph 1 letter f). If the User asks the Administrator for the trade offer, his or her personal data will be processed on the legal basis of GDPR Article 6 paragraph 1 letter b) which is in order to take steps at the request of the User prior to entering into a contract.
    The personal data will be processed for the period of time necessary for the correspondence being processed. However, if as a result of an inquiry made via the form a cooperation or business relations will be established, the personal data will be stored for the period of this cooperation or relationship, for the period of the agreement and for the limitation period of the claims regarding the agreement.
    Giving the personal data such as name, surname, e-mail address is voluntary but necessary for the purpose of answering the User’s inquiry.
    Submitting the telephone number is voluntary (but not necessary) and serves to accelerate the telephone contact with the User. 
  2. Newsletter
    The personal data submitted to the Administrator via the newsletter registration form will be processed for the purpose of sending User emails with the news, trade and marketing materials such as information concerning new premissess, promotions and events related to Administrator’s activities. During the registration for the newsletter the User gives the consent to obtaining marketing and trade content to the given email address. The legal basis of processing the email address of the User is the legitimate interests pursued by the Administrator (GDPR Article 6 paragraph 1 letter f) which is sending trade and marketing content due to ordered newsletter.

    The personal data will be processed for the period of functioning the newsletter or to the User’s resignation of receiving the newsletter. The User may resign from receiving the newsletter at any time, by clicking on the appropriate link located on the bottom of every message with the newsletter which will cause deletion of the User’s personal data from the newsletter database.
    Submitting the email address is voluntary but necessary for the purpose of the newsletter registration. 
  3. “Czater” messenger – live chat

    The Administrator provides the possibility of online contact by the messenger provided by Czater.pl service. The User does not need to submit any personal data. The Administrator starts to process the User’s personal data only if the User voluntarily submits the personal data during the communication. The content of the conversation is automatically recorded and stored by the Administrator for the purpose of the assessment of the conversation quality.

    The User may obtain the copy of the conversation. For this purpose the User may download the conversation to a .txt file at User’s device or obtain the copy of the conversation to the submitted email address.
    The content of the conversation (including User’s personal data) will be stored for the period of 3 months. Afterwards, it will be removed or anonymised.

    If the messenger is offline, the User may leave a message to which we will respond as soon as the consultants are available again. For the purpose of receiving the answer the User submits his or her name, surname and e-mail address.
    The legal basis of processing personal data is the legitimate interests pursued by the Controller which is answering the User’s message and conversation with the User (GDPR Article 6 paragraph 1 letter f). 
  4. “Call back”

    The User may submit his or her telephone number for the purpose of starting a quick conversation with us or to arrange a conversation at a convenient time.
    The legal basis of processing personal data is the legitimate interests pursued by the Administrator which is starting a conversation with the User on his or her demand (GDPR Article 6 paragraph 1 letter f).
    The telephone conversations are recorded for the purpose of enhancing safety and improving quality of customer service (which is our legitimate interests according to GDPR Article 6 paragraph 1 letter f) and are stored for a period of 3 months. Afterwards, they will be removed or anonymised.
    Submitting the User’s telephone number is voluntary but necessary in order to start a quick conversation or to arrange a conversation at a convenient time using a form. Providing any personal data during the conversation is voluntary. 
  5. Add a selling offer / Add a lease offer 

    The User who wants to place a selling or lease offer on the Website may contact us by an “Add a selling offer” or “Add a lease offer” form.
    The personal data submitted via the form will be processed by the Controller for the purpose of analyzing the offer and contact with the User.
    The legal basis of processing User’s personal data is taking steps at the request of the User on purpose of  entering into a contract (GDPR Article 6 paragraph 1 letter b) and our legitimate interests according to GDPR Article 6 paragraph 1 letter f).
    The personal data will be stored for the period of the cooperation, for the period of the agreement and for the limitation period of the claims regarding the agreement.

    Submitting the User’s personal data indicated as required is voluntary but necessary for the purpose of establishing a cooperation. Providing other personal data at this stage is voluntary.

  6. Comments on the blog

    The User may express his or her opinion on the blog content using the function of adding comments. In order to do so, the User submits his or her name and email address. Submiting personal data is voluntary but necessary to make a comment.The legal basis of processing User’s personal data is our legitimate interests according to GDPR Article 6 paragraph 1 letter f) which is administration of the comments on the Website.

    User’s personal data will be processed by the Administrator until User’s objection to processing of personal data concerning him or her or until User’s request on deleting his or her comment from the Website.

IV. THE RECIPIENTS OF THE DATA

For the purpose of proper operating the Website and the forms the Administrator cooperates with the external entities (i.e. Website host provider, software provider). Performing some of the services may be associated with processing User’s personal data by those entities.

The Controller cooperates only with those recipients of the data which guarantee implementing appropriate technical and organizational measures in accordance with GDPR. The recipients of User’s personal data may be:

  1. Website host provider
  2. e-mail provider
  3. “Czater” messenger and “Call back” provider – EBROS Mariusz Rosa
  4. Newsletter tools provider

V. TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY

The Controller transfers personal data to a third country because of the use of services of external entities which store the personal data on the servers located outside the European Economic Area.

Personal data is stored in a third country while the Administrator cooperates with Amazon Web Services Inc and Google LLC. Those entities use standard contractual clauses providing a sufficient level of protection to the processed personal data accepted by the European Commission.