Privacy Policy

1. Data controller

The data controller is Serhii Kovlak, conducting business under the brand SERPAKOWSKI Nieruchomości, correspondence address: Złota 75A/7, 00-819 Warsaw, Poland, NIP: 1133184502, REGON: 543202915.

You can contact the controller via:

• e-mail: kontakt@serpakowski.pl
• phone: +48 453 053 969

2. Scope of processed data

Depending on how you use the website, we may process the following data:

• first name,
• phone number,
• e-mail address, if provided,
• message content or inquiry description,
• information related to searching for, renting, letting, selling or buying real estate,
• information provided in correspondence,
• technical data related to website use, such as IP address, browser and device information, date and time of visit, and cookies.

3. Purposes of data processing

Personal data may be processed for the following purposes:

• handling inquiries submitted through contact forms,
• contact by phone, e-mail or messengers,
• preparing a response, offer, or cooperation proposal,
• serving clients interested in rental, letting, purchase, or sale of real estate,
• handling B2B contacts and partnership cooperation,
• ensuring proper operation and security of the website,
• analyzing website usage and carrying out marketing activities — only where user consent is required and such consent has been granted,
• establishing, pursuing, or defending potential claims.

4. Legal bases for processing

Data is processed based on:

• Article 6(1)(b) GDPR/RODO — where processing is necessary to take steps at the request of the data subject prior to entering into a contract, or to perform a contract,
• Article 6(1)(f) GDPR/RODO — the controller’s legitimate interest, such as handling correspondence, contacting users, website security, protection against claims, and business development,
• Article 6(1)(a) GDPR/RODO — user consent, in particular for certain cookies, analytics, marketing tools, or voluntary marketing consents, if implemented.

5. Contact forms

The website may contain contact forms. Providing data in a form is voluntary, but necessary to handle your inquiry.

Data from the form may include first name, phone number, message content, website language, source page URL, and submission date.

Contact forms may be technically handled by Formspree. Data provided in the form may be transferred to Formspree for technical handling of the inquiry and forwarding to the controller. Inquiries may then be forwarded to the controller via e-mail or notifications, e.g., Telegram.

6. Contact via messengers

If you contact us via Telegram, WhatsApp, Viber, or another messenger, data provided in that communication is processed to handle contact and respond to your inquiry.

Use of messengers is also governed by the privacy policies of those service providers.

7. Hosting, email and technical support

The website may be technically supported by external service providers, in particular:

• website hosting provider,
• e-mail provider,
• contact form provider,
• analytics or marketing tool providers, if implemented and if the user gives the appropriate consent.

In particular, the website may use services such as Vercel, Formspree, and home.pl to the extent necessary for website operation, form handling, and communication.

8. Cookies

The website may use cookies and similar technologies.

Cookies may be used in particular to:

• ensure proper website operation,
• remember user preferences,
• collect statistics and analytics,
• carry out marketing and remarketing activities, if such tools are implemented.

Cookies necessary for website operation may be used without separate user consent. Analytics, marketing, or other optional cookies will be used only in accordance with applicable law and after obtaining required user consent, where such consent is required.

Detailed information on cookies may be described in a separate cookie policy in the future.

9. Analytics and marketing tools

The website may in the future use analytics or marketing tools such as Google Analytics, Google Ads, Meta Pixel, or similar solutions.

Such tools will be activated only to the extent compliant with applicable law, in particular after obtaining appropriate user consent where consent is required.

10. Data recipients

Personal data may be transferred to entities that support the controller in operating the website and handling contact, in particular:

• hosting and technical infrastructure providers,
• e-mail providers,
• contact form providers,
• analytics and marketing tool providers, if implemented in compliance with the law,
• entities providing legal, accounting, or administrative services, where necessary,
• public authorities, if the obligation to disclose data results from legal provisions.

11. Transfers of data outside the EEA

Some service providers used by the website may process data outside the European Economic Area.

In such cases, data transfers are carried out based on appropriate legal mechanisms provided by GDPR/RODO, such as standard contractual clauses or other safeguards required by law.

12. Data retention period

Data from contact forms and correspondence is stored for the period necessary to handle the inquiry, and then no longer than 12 months, unless longer retention is required by law or justified by protection against claims.

If a contract is concluded or cooperation starts, data may be stored for the period required by law, in particular tax, accounting, or claims-related regulations.

13. User rights

The data subject has the right to:

• access their data,
• rectify data,
• erase data,
• restrict processing,
• object to processing,
• data portability,
• withdraw consent to the extent processing is based on consent,
• lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).

To exercise your rights, you can contact the controller at: kontakt@serpakowski.pl.

14. Voluntary provision of data

Providing data is voluntary, but it may be necessary to handle your inquiry, prepare a response, contact you, or carry out cooperation.

15. Changes to this Privacy Policy

This Privacy Policy may be updated, in particular in the event of changes to website operations, implementation of new tools, or changes in legal regulations.

The current version of this Privacy Policy is always available on the website.

Area of operation: Warsaw, Poland.