1. Data controller
The controller of personal data of Users of zyskznieruchomosci.pl is Smart Raven Solutions, ul. Jana Sebastiana Bacha 12, 52-116 Iwiny, Tax ID (NIP): 7481534692 (the Controller). The Controller can be contacted via the contact form or by email: biuro@zyskznieruchomosci.pl.
2. Scope, purposes and legal bases of data processing
We process personal data in accordance with the GDPR for the following purposes:
- a) Email address and password — registration, Account management and authorisation (Article 6(1)(b) GDPR).
- b) First name, surname, phone number, photo and company logo — provided voluntarily in the profile for personalisation and contact (Article 6(1)(b) GDPR).
- c) Listing content, property photos and analysis history — provision of Portal services (Article 6(1)(b) GDPR). Advertisers must not publish third parties’ personal data without a legal basis.
- d) Technical data (IP, system logs, browser) — ensuring security and detecting abuse (Article 6(1)(f) GDPR).
3. Notifications and prohibition of spam
The Portal sends system notifications necessary to manage accounts and listings. Commercial and marketing communications (Newsletter) are sent only with separate, freely given consent (Article 6(1)(a) GDPR). The Controller does not send unsolicited commercial communications.
4. Data recipients, processors and transfers outside the EEA
Data is not sold to third parties. Data is entrusted to trusted processors: cloud infrastructure providers (Supabase), email system providers, analytics providers (Google Analytics) and payment providers (e.g. Przelewy24 for any transactions).
Data transfers outside the EEA (e.g. to the USA) take place only under Standard Contractual Clauses or the Data Privacy Framework.
5. Data retention period
Data is processed for as long as the Account is held. Once the Account is deleted, data is erased without delay, except for data necessary to defend against claims or meet legal requirements.
6. Data security and incident response procedures
We use HTTPS/SSL encryption, secure password hashing and Row-Level Security (RLS) access rules in the database. In the event of a personal data breach, the Controller follows an internal response procedure, reports the breach to the Supervisory Authority (PUODO) within 72h and notifies affected Users as required by the GDPR.
7. Cookies and consent management
The Portal uses the following cookies:
- a) Essential — required for the website to function properly (session, security).
- b) Analytics and functional — used only with the User’s explicit consent given via the cookie banner on their first visit.
Users can change their cookie consent preferences at any time in their browser settings or by clicking the “Cookie Settings” link in the Portal footer.
8. Your rights
Under the GDPR, you have the right to access, rectification, erasure (“right to be forgotten”), restriction of processing, data portability, objection and the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO).
Requests can be submitted to: biuro@zyskznieruchomosci.pl.
9. Automated decision-making
Data is not used for automated decision-making or profiling that produces legal effects.
10. Privacy Policy changes and contact
This Policy may be updated. Please send any questions to: biuro@zyskznieruchomosci.pl.