PRIVACY POLICY

This Privacy Policy sets out the rules for the processing of personal data obtained via the online service https://najemokazjonalny24.pl (hereinafter: the “Online Service”).

The owner of the Online Service and at the same time the controller of personal data is R&L ESTATE RADZIVON TSITKO JEDNOOSOBOWA DZIAŁALNOŚĆ GOSPODARCZA, NIP: 5214033689, REGON: 526194043, entered in the Central Registration and Information on Business (CEIDG), with its registered office in Warsaw, e-mail: info@rlestate.company, phone +48 512 286 639, hereinafter “R&L ESTATE”.

The personal data collected by R&L ESTATE via the Online Service are processed in accordance with the GDPR.

§ 1 Type of data processed, purposes and legal basis

R&L ESTATE processes data of natural persons performing legal acts not directly related to their business activity, natural persons conducting business activity, and natural persons representing legal persons or organisational units without legal personality that have legal capacity under the law — hereinafter collectively referred to as “Users”.

Users’ personal data are collected in the following cases:

• using the contact form or placing an order — for the purpose of taking steps at the User’s request prior to entering into a contract and for the performance of the service contract (Article 6(1)(b) GDPR) and for the fulfilment of legal obligations (e.g. accounting) — Article 6(1)(c) GDPR;
• publishing reviews (e.g. via Google) — for the performance of the contract for the provision of this functionality (Article 6(1)(b) GDPR);
• sending a one-time e-mail requesting a review after order completion — as part of the Controller's legitimate interest (Article 6(1)(f) GDPR).

In the course of providing services related to the preparation of documents for an occasional lease, we may process, among other things: first name, last name, e-mail address, phone number, PESEL number, passport/ID number, address of the property and other information necessary to correctly prepare the documents.

For entrepreneurs, the scope of data may additionally include:

• the entrepreneur’s name (business name),
• NIP (tax identification number).

When using the Service, technical data may be collected automatically, such as: IP address, domain name, type of browser, access time, type of operating system and navigation data (e.g. clicks on links) — on the basis of R&L ESTATE’s legitimate interest (Article 6(1)(f) GDPR) for the purpose of improving the functionality of the Service, ensuring security and compiling statistics.

Data may also be processed for the purpose of establishing, pursuing or defending claims — Article 6(1)(f) GDPR.

Providing personal data is voluntary but necessary to use selected functionalities (including placing an order). The Service does not require the creation of a user account.

§ 2 To whom data are disclosed or entrusted and how long they are stored

Users’ personal data may be transferred to entities cooperating with R&L ESTATE in the operation of the Service and the performance of services:

• Processors — acting solely on the basis of data processing agreements (e.g. hosting and IT providers, accounting firms, providers of analytics/security tools).
• Controllers — entities that independently determine the purposes and means of processing (e.g. online payment operators and banks processing transaction data; review platforms such as Google).

The Service uses Google Analytics and Meta Pixel. Data are stored mainly in the countries of the European Economic Area (EEA). When data are transferred outside the EEA, R&L ESTATE ensures appropriate safeguards, including EU standard contractual clauses or equivalent mechanisms (e.g. the EU-U.S. Data Privacy Framework, where applicable).

Retention periods:

• data related to the contract and settlements — for the duration of the contract and thereafter until the expiry of limitation periods and for the period required by tax/accounting regulations (as a rule 5 years from the end of the tax year);
• enquiries from the contact form that do not result in a contract — up to 12 months or until a valid objection is raised;
• analytics/cookie data — in accordance with the lifecycle of cookies or until they are deleted by the User.

In the case of justified and lawful requests, data may be disclosed to competent state authorities (including the Police, Prosecutor’s Office, President of the Polish DPA).

§ 3 Cookie mechanism, IP address

The Online Service uses cookies, which are stored on the User’s device if the browser allows it.

R&L ESTATE uses:

• session cookies — deleted after the browser session ends;
• persistent cookies — stored until they are deleted or expire.

Cookies are used for:

• analyses and statistical research (Google Analytics),
• improving the functionality of the Service,
• measuring effectiveness and targeting content (Meta Pixel).

The cookie mechanism is safe — it does not in itself allow the retrieval of data from the User’s device or the installation of malicious software. The User may limit or disable cookies in the browser settings (this may affect the operation of some features).

R&L ESTATE may collect IP addresses for diagnostic, statistical and security purposes and for the administration of the Service. The Service may contain links to external sites (e.g. Google Maps with reviews); R&L ESTATE is not responsible for the privacy policies of such sites.

§ 4 Rights of data subjects

The User has the right to:

• withdraw consent (Article 7(3) GDPR), if processing is based on consent;
• object to processing (Article 21 GDPR), including to analytics/marketing based on legitimate interest;
• erasure of data (“right to be forgotten”) — Article 17 GDPR;
• restriction of processing — Article 18 GDPR;
• access to data and to receive a copy of them — Article 15 GDPR;
• rectification of data — Article 16 GDPR;
• data portability — Article 20 GDPR.

R&L ESTATE handles requests without undue delay and no later than within 1 month of their receipt (with the possibility of extending this period to 2 months in the case of complex requests — after prior notification).

The User has the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw.

§ 5 Services tailored to preferences and interests (profiling)

Profiling means automated processing of personal data in order to evaluate certain personal aspects of the User (e.g. preferences or interests). Users’ personal data may be processed in an automated manner (Google Analytics, Meta Pixel), but this will not produce legal effects concerning the User or similarly significantly affect them (Article 22 GDPR does not apply). The legal basis is the legitimate interest of R&L ESTATE (Article 6(1)(f) GDPR).

§ 6 Changes to the Privacy Policy

The Privacy Policy may be amended; R&L ESTATE will inform Users 7 days in advance by publishing the new version in the Service. Any questions related to the Privacy Policy should be sent to: info@rlestate.company.

Date of last modification: 23.10.2025.