Privacy Policy

This policy explains what personal data we receive through landy-agency.pl, why we need it, who we share it with, how long we keep it and what rights you have.

1. Who is responsible for your data

The controller of your personal data is Landy Agency, represented by Roman Stepanov, a business registered in CEIDG (the Polish business register), tax ID (NIP): 6762652939, Kraków, Poland.

For any questions about personal data, email us at estate.landyagency@gmail.com.

2. What data we collect

When you send an enquiry through the form on the website, we receive:

• your name and phone number (required);
• your email address and message, if you provide them;
• the name of the property, if you sent the enquiry from a property card;
• the page language, the date and time of the enquiry, and a note that you have read this policy.

Providing data is voluntary, but without your name and phone number we cannot contact you.

In addition, when you visit the website, the hosting server automatically receives technical request data, including your IP address. We use it only to protect the form against spam and do not store it in our database.

3. Why and on what legal basis

• To respond to your enquiry and contact you about the property you are interested in. Legal basis: your request, that is, steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
• To protect the website and the form against abuse. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR).

We do not make automated decisions about you and do not profile you.

4. Who we share data with

Your data is seen by the agency staff who handle enquiries. We also use the following services, which process data on our behalf:

• Vercel Inc.: website hosting. Enquiries are processed on servers in Frankfurt (Germany).
• Supabase Inc.: the enquiry database, servers in Frankfurt (Germany).
• Telegram: delivery of the enquiry to the agency’s private work group so we see it quickly.
• Resend Inc.: internal email notifications to the agency if an enquiry could not be delivered to Telegram. Processed in Ireland.

Vercel, Supabase and Resend are US companies. Transfers of data outside the European Economic Area are covered by the standard contractual clauses approved by the European Commission and, for certified companies, also by the EU-US Data Privacy Framework. Telegram stores the data of EEA users in data centres in the Netherlands, but the company that runs it is registered outside the EEA. Passing your enquiry to Telegram is necessary to act on your request to be contacted, that is, to take steps at your request before entering into a contract (Art. 49(1)(b) GDPR).

We do not sell your data or share it for advertising.

5. How long we keep data

We keep the contact details from an enquiry (name, phone, email, message) for 12 months from the day it was sent. After that, they are automatically deleted from the database. Only anonymised data remains for statistics: the enquiry date, the page language and the property name. We delete copies of enquiries in the Telegram work group under the same rule.

If you ask us to delete your data sooner, we will do so without undue delay. Database backups are kept for a limited time and overwritten automatically, so deleted data disappears from them as well.

6. Your rights

You have the right to:

• access information about your data and obtain a copy;
• have inaccurate data corrected;
• request deletion of your data;
• restrict processing;
• receive your data in a portable format;
• object to processing based on our legitimate interest.

To exercise these rights, email estate.landyagency@gmail.com. We will reply within one month.

You can also lodge a complaint with the supervisory authority: Prezes Urzędu Ochrony Danych Osobowych (the Polish Data Protection Authority), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.

7. Cookies and visit statistics

The website does not use advertising or tracking cookies. The only cookie (NEXT_LOCALE) remembers your chosen language if you changed it, and disappears when you close the browser.

For visit statistics we use Vercel Web Analytics. It does not use cookies and does not let us identify who visited the website: we only see aggregated data, for example which pages were opened and from which country, browser and device. The technical visit identifier is deleted within 24 hours.

8. Contact via Telegram

If you write to us via Telegram, the conversation takes place in the messenger itself and Telegram’s own privacy policy also applies to it.

9. Changes to this policy

If we change this policy, the new version will appear on this page with a new update date.