Privacy and Cookie Policy
1. Personal Data Administrator
The Administrator of the personal data of users of the website krainamieszkan.pl is:
KRAINA MIESZKAŃ Sp. z o.o.
ul. Święty Marcin 29/8
61-806 Poznań
NIP: 7831913764
REGON: 529845819
KRS: 0001131035
Contact regarding issues related to the processing of personal data:
biuro@krainamieszkan.pl
In the further part of the document, the company is referred to as "Administrator."
GDPR means the Regulation of the European Parliament and Council (EU) 2016/679 of April 27, 2016, concerning the protection of natural persons in relation to the processing of personal data and the free movement of such data.
2. Scope of the Privacy Policy
This Privacy Policy and Cookie Policy describes the principles of processing personal data of individuals who:
use the website krainamieszkan.pl,
send a message using the contact form,
contact the Administrator by phone or via email,
inquire about apartments offered for sale,
ask about interior design or finishing,
request a quote or valuation,
take actions aimed at concluding a contract with the Administrator.
3. Scope of processed data
Depending on the method of contact and the nature of the matter, the Administrator may process:
first and last name,
email address,
phone number,
content of the message,
information provided during a phone call or correspondence,
information necessary to prepare an offer or valuation,
data necessary for concluding and executing the contract,
data related to settlements, invoices, and payments,
IP address and technical data regarding the device, browser, and method of using the site,
information stored in cookies.
The user should not provide in the form or message data that is not necessary to provide a response, prepare an offer, or execute the contract.
4. Purposes and legal bases for data processing
4.1. Handling inquiries and maintaining contact
Data provided through the form, email, or during a phone call may be processed for the purpose of:
responding to the message,
providing information about the offer,
providing information about the apartment,
providing information about design and finishing services,
scheduling a call, meeting, or apartment presentation,
conducting further correspondence related to the inquiry.
The basis for processing is the legitimate interest of the Administrator in maintaining communication with individuals interested in the offer, in accordance with Article 6(1)(f) of the GDPR.
If the inquiry concerns preparing an offer or concluding a contract, the basis for processing is also Article 6(1)(b) of the GDPR, that is, taking action at the request of the data subject before concluding a contract.
4.2. Preparing an offer or valuation
Data may be processed for the purpose of:
understanding the client's needs,
preparing a proposal for cooperation,
preparing a valuation,
determining the scope of the project or finishing work,
conducting negotiations before concluding a contract.
The basis for processing is Article 6(1)(b) of the GDPR.
4.3. Concluding and executing a contract
Data may be processed for the purpose of concluding and executing a contract concerning, in particular:
the sale of an apartment,
preparing an interior design,
finishing the apartment,
coordinating work and deliveries,
contacting the client during the execution of the contract,
handling payments and settlements.
The basis for processing is Article 6(1)(b) of the GDPR.
4.4. Fulfilling legal obligations
Data related to concluded contracts, invoices, payments, accounting, and documentation may be processed for the purpose of fulfilling obligations arising from tax, accounting, and other legal provisions.
The basis for processing is Article 6(1)(c) of the GDPR.
4.5. Establishing, pursuing, and defending claims
Data may be processed to establish, pursue, or defend against claims related to the conducted correspondence, presented offer, concluded contract, or provided services.
The basis for processing is the legitimate interest of the Administrator in protecting its rights, in accordance with Article 6(1)(f) of the GDPR.
4.6. Security and proper functioning of the site
Technical data, including IP address and system logs, may be processed for the purpose of:
ensuring the proper functioning of the site,
ensuring the security of the site and the form,
detecting technical errors,
preventing abuse and attacks,
protection against unauthorized access.
The basis for processing is the legitimate interest of the Administrator aimed at ensuring the security of the service, in accordance with Article 6(1)(f) of the GDPR.
4.7. Optional cookies
If optional cookies are activated on the site, in particular analytical, marketing, or advertising cookies, they will only be used after obtaining the user's consent.
In such cases, the basis for processing personal data will be Article 6(1)(a) of the GDPR.
Consent may be withdrawn at any time using the cookie settings available on the site.
5. Voluntariness of data provision
Providing personal data is voluntary.
However, providing an email address and other data marked as required in the form is necessary for the Administrator to receive a message and respond.
Failure to provide the data necessary to prepare an offer, conclude, or execute a contract may prevent these actions from being carried out.
6. Data recipients
Data may be transferred to entities that assist the Administrator in operating the site and conducting business, in particular:
WebWave system providers and hosting services,
email service providers,
entities providing IT support and website security,
accounting offices,
law firms and advisors,
banks and payment operators,
notaries,
contractors, suppliers, and subcontractors involved in executing the contract,
entities providing design, construction, finishing, or service services, if necessary for the execution of the order,
public authorities, if the obligation to transfer data arises from legal provisions.
Entities processing data on behalf of the Administrator may use it only to the extent necessary to perform the services entrusted to them.
7. Data transfer outside the European Economic Area
The Administrator does not independently transfer personal data to countries outside the European Economic Area, unless necessary due to the operation of the chosen service provider.
Some IT service providers or social media operators may process data outside the European Economic Area.
In such cases, data transfer should occur based on mechanisms provided by the GDPR, in particular:
decisions of the European Commission stating an adequate level of protection,
standard contractual clauses,
other safeguards required by legal provisions.
8. Data retention period
Data provided in the course of a regular inquiry is retained for the time necessary to provide a response and conduct correspondence, and then no longer than 12 months from the last contact.
If the inquiry leads to the preparation of an offer or negotiation of a contract, data is retained until the discussions are concluded, and then for the period necessary to protect against potential claims.
Data related to a concluded contract is retained for the duration of its execution, and then for the period resulting from the provisions regarding the limitation of claims.
Accounting, tax, and settlement documents are retained for the period required by applicable legal provisions.
Data processed based on consent is retained until it is withdrawn, unless earlier deletion of data is required by legal provisions or the data is still needed to defend against claims.
Technical data and logs are retained for the time necessary to ensure security, fix errors, and protect the site from abuse.
Data is deleted or anonymized when it is no longer needed for the purposes for which it was collected, unless further retention is required by legal provisions.
9. Rights of data subjects
The person whose data is processed may have the right to:
obtain information about data processing,
access their data,
receive a copy of the data,
rectify inaccurate data,
complete incomplete data,
delete data,
restrict data processing,
data portability,
object to processing,
withdraw consent at any time,
file a complaint with the President of the Personal Data Protection Office.
The scope of individual rights depends on the legal basis, purpose, and circumstances of data processing.
Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.
To exercise your rights, you should contact the Administrator at the following address:
biuro@krainamieszkan.pl
10. Right to object
If data is processed based on the legitimate interest of the Administrator, the person whose data is being processed may object at any time for reasons related to their particular situation.
Upon receiving an objection, the Administrator will cease processing the data unless they demonstrate the existence of compelling legitimate grounds for the processing or the data is necessary for the establishment, exercise, or defense of legal claims.
11. Complaint to the supervisory authority
Anyone who believes that their personal data is being processed in violation of the regulations has the right to lodge a complaint with:
The President of the Personal Data Protection Office.
12. Automated decision-making and profiling
Data from website users is not used for decisions made solely in an automated manner that would have legal effects for the user or similarly significantly affect them.
The Administrator does not conduct profiling of website users for the purpose of individually determining housing prices or the conditions of the presented offer.
13. Cookies
13.1. What are cookies?
Cookies are small pieces of information stored on the user's device while using the website.
They can serve, among other things, to ensure the proper functioning of the site, enhance security, and remember user settings.
13.2. Necessary cookies
The site may use cookies that are necessary for:
proper display of the site,
ensuring its basic functions,
handling the contact form,
remembering cookie settings,
ensuring the security of the site,
protecting against abuse.
Necessary cookies can operate without additional user consent, as they are needed for the proper functioning of the site or for providing a service requested by the user.
13.3. Optional cookies
Analytical, marketing, advertising cookies, and other cookies not required for the proper functioning of the site may only be used after obtaining user consent.
The user can accept or reject individual categories of cookies and later change their decision using the cookie settings available on the site.
Withdrawing consent does not affect the lawfulness of prior use of cookies.
13.4. Browser settings
The user can also delete or block cookies in their web browser settings.
However, restricting or blocking necessary cookies may cause some elements of the site or the contact form to not function properly.
14. Contact form
The contact form is used to send messages to the Administrator.
The data provided in the form is used to:
receive and handle messages,
provide responses,
maintain further contact,
prepare information, offers, or estimates.
Submitting the form does not result in the user being subscribed to the newsletter or automatically receiving advertising information.
The user should provide only the data necessary to handle their inquiry in the form.
15. Social media and external sites
The site contains links to the Administrator's profiles on external social media, in particular:
Facebook,
Instagram,
TikTok.
Clicking the link will redirect you to the external service.
The operator of the respective service independently determines the rules for processing personal data and using cookies.
Before using an external service, the user should familiarize themselves with its privacy policy and cookie settings.
The Administrator has no influence on the operation of external websites or the scope of data collected by their operators.
16. Data security
The Administrator applies appropriate technical and organizational measures to protect personal data against:
unauthorized access,
loss,
destruction,
unauthorized alteration,
disclosure to unauthorized persons.
The site uses an encrypted HTTPS connection.
Access to the data is restricted to the Administrator and individuals and entities that need it to carry out specific tasks.
17. Changes to the Privacy Policy
The Privacy Policy may be changed in the event of:
a change in the way the site operates,
the launch of new services or forms,
the introduction of analytical or advertising tools,
changes in the suppliers used,
changes in applicable laws.
The current version of the Privacy Policy will be published on the website along with the date it comes into effect.
Headquarters
Kraina Mieszkań Sp. z o.o. ul. Święty Marcin 29/8
61-806 Poznań
NIP 7831913764
REGON 529845819
KRS 0001131035
Contact
Menu
Follow us