Privacy policy

The policy is addressed to users of the sonarestates.com website. The Policy describes the rules for collecting and using the data of website users, which are collected directly from them or via cookies and similar technologies.

§1

General provisions

1. The privacy policy defines how Users' personal data is collected, processed and stored, which is necessary to provide electronic services via the website sonarestates.com (hereinafter: the Website).

2. The website collects only personal data necessary to provide and develop the services offered on it.

3. Personal data collected via the Website are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95 /46/WE (General Data Protection Regulation, hereinafter referred to as GDPR) and the Personal Data Protection Act of May 10, 2018.

§2

Data administrator

1. The administrator of personal data collected via sonarestates.com is Soñar Estates, address: ul. Ułanów 64c/1c, 31-460 Kraków, NIP: 9452272670, REGON: 525203219, e-mail address: kontakt@sonarestates.com  (hereinafter: Administrator).

2. In matters related to the processing of your data by the Administrator, you can contact using the above address details

§3

Purpose of collecting personal data

Personal data may be processed in order to:

• analysis of network traffic, ensuring security within the Website and adapting content to the needs of users on the basis of the Administrator's legitimate interest (Article 6(1)(f) of the GDPR);

• answering questions, providing the ordered offer and conducting correspondence in order to settle the matter, based on your consent and the legitimate interest of the administrator, which is the implementation of user requests (Article 6(1)(a) and (f) of the GDPR);

• recruitment purposes for the positions listed in the Service Career tab, based on your consent and the legitimate interest of the administrator, which is the fulfillment of user requests (Article 6(1)(a) and (f) of the GDPR).

§4

Type of personal data processed

1. The Administrator may process the User's personal data: name and surname, date of birth, address of residence, e-mail address, telephone number, NIP, PESEL number (in the case of concluding an agency agreement, recruitment purposes), ID number (in the case of concluding an agency agreement, recruitment purposes ), the IP address of the User's computer

2. The administrator collects data related to your activity, such as time spent on the website, search phrases, number of subpages displayed, date and source of the visit.

§5

The period of personal data processing

Users' personal data will be processed for the period of:

• when the basis for data processing is the performance of the contract - until the statute of limitations for claims after its performance,

• when the basis for data processing is consent - until the consent is revoked, and after the consent is revoked, until the limitation period for claims.

In both cases, the limitation period is 6 years, and for claims for periodic benefits and claims related to conducting business activity - 3 years (unless a special provision provides otherwise).

§6

Sharing personal data

1. The recipients of your personal data may be:

• authorized employees and associates of the Administrator who have been entrusted with the processing of personal data in writing and who are responsible for violating the rules of processing,

• our partners, including credit brokerage companies, developers, other real estate agencies under the concluded cooperation agreement, entities whose services we use as part of our business in the form of law offices, notaries, banks, IT companies providing us with IT solutions,

• conducting postal or courier activities, and other entities processing personal data on the basis of a personal data processing agreement;

• public authorities and entities performing public tasks or acting on behalf of public authorities, to the extent and for the purposes resulting from the provisions of generally applicable law,

2. Users’ personal data will not be transferred outside the European Economic Area (EEA).

§7

User Rights

1. The Website User has the right to: access their personal data, rectify it, delete it, limit processing, transfer it, object to processing, withdraw consent at any time (which does not affect the lawfulness of processing based on consent before its consent undo).

2. Providing data by you for purposes related to handling the case is voluntary, but necessary. Failure to provide them may make it difficult or impossible to consider the case.

3. Providing data necessary for static analysis of Website users is voluntary. You can use the so-called incognito mode in order to browse the website without providing the Administrator with information about your visit to the Website. Using the incognito mode, and therefore not providing data, does not affect the ability to use the Website.

4. A notification about the withdrawal by the User of the entitlement resulting from the listed rights should be sent to the address [e-mail address].

5. The administrator fulfills or refuses to comply with the request immediately - maximum within a month of its receipt.

6. The user has the right to submit a complaint to the President of the Office for Personal Data Protection if he considers that the processing violates his rights and freedoms (GDPR).

§8

Cookies

1. The website collects information using cookies - session, permanent and third-party cookies.

2. Collecting cookies supports the correct provision of services on the Website and serves statistical purposes.

3. The user can specify the scope of access of cookies to his device in the browser settings.

§9

Use of cookies and similar technologies

1. The website enables the collection of information about the user via cookies and similar technologies, the use of which is most often associated with the installation of this tool on the user's device (computer, smartphone, etc.). This information is used to remember the user's decisions (selection of the font, contrast, acceptance of the policy), maintain the user's session (e.g. after logging in), remember the password (with consent), collect information about the user's device and his visit to ensure security, but also analysis of visits and content customization.

2. Information obtained through cookies and similar technologies are not combined with other data of Website users, nor are they used to identify them by the Administrator.

3. The user can set the browser to block certain types of cookies and other technologies, by specifying, for example, that only those that are necessary for the correct display of the website will be allowed. By default, most browsers allow the use of all cookies, but the user can change these settings at any time, he can also delete already installed cookies. Each of the browsers allows such action through one of the options available in the settings or preferences.

4. The user can also use the website in the so-called incognito mode, which blocks the possibility of collecting data about his visit.

5. Using the website without changing the browser settings, i.e. with the default acceptance of cookies and similar technologies, means consent to their use for the purposes specified above. The administrator does not use the information obtained for marketing purposes.

6. Information about some user behavior is logged in the server layer. These data are used only to administer the Website and to ensure the most efficient service of the hosting services provided.

7. Browsed resources are identified by URL addresses. The following data may be recorded: time of arrival of the order or inquiry, time of sending the response, name of the User's station - identification carried out by the HTTP protocol, information about errors that occurred during the implementation of the HTTP transaction, URL address of the page previously visited by the User - in the event that the transition to the Website was made via a link, information about the User's browser, information about the IP address. The data indicated above are not associated with specific persons browsing the Website.

§10

  Automated decision making and profiling

1. Users’ data may not be processed in an automated manner, so that any decisions could be made against them as a result.

2. Users' data may be profiled in order to adjust the content and personalize the offer after their consent.

§11

Final Provisions

1. The Administrator has the right to make changes to the Privacy Policy, but the Users' rights will not be limited.

2. Information about the introduced changes will appear in the form of a message available on the Website.

3. In matters not covered by this Privacy Policy, the provisions of the GDPR and the provisions of Polish law shall apply.