Privacy Policy

1. Controller

The website and the personal data submitted through its enquiry form are controlled by GREY HOUSE sp. z o.o., 34 Kalwaryjska Street, unit 29A, 30-504 Kraków, Poland, KRS 0000821089, tax ID (NIP) 6793194113, REGON 385156940 (“Grey House” or the “Controller”). For data protection matters, contact bruno@greyhouse.es or write to the registered office.

Data may be disclosed to the development's developer, PETRA-TRANS LOGISTYKA, INWESTYCJE PIOTR WÓJCIAK, 122A Poniatowskiego Street, 34-700 Rabka-Zdrój, Poland, tax ID (NIP) 7351035039, only to the extent needed to handle an enquiry, arrange a viewing and conduct the sales process.

2. Data we process

• form data: name, email address, telephone number, selected apartment and message;
• information generated while handling the enquiry, arranging a viewing or negotiating;
• technical data needed to operate and secure the website, such as IP address, device type, request time and server logs.

3. Purposes and legal bases

• responding, presenting the offer, arranging a viewing and taking pre-contractual steps — Article 6(1)(b) GDPR;
• website security, abuse prevention and establishing, exercising or defending legal claims — the Controller's legitimate interests, Article 6(1)(f) GDPR;
• compliance with legal, tax or accounting duties where applicable — Article 6(1)(c) GDPR.

4. Recipients

Data may be disclosed to the development's developer, PETRA-TRANS LOGISTYKA, INWESTYCJE PIOTR WÓJCIAK, 122A Poniatowskiego Street, 34-700 Rabka-Zdrój, Poland, tax ID (NIP) 7351035039, only to the extent needed to handle an enquiry, arrange a viewing and conduct the sales process.

• hosting and network security providers (currently Cloudflare);
• the transactional email provider used to deliver the enquiry (currently Resend);
• email, IT, legal and accounting providers, only where necessary and under an appropriate agreement or legal rule.

5. Retention

Enquiries that do not result in a continuing relationship are retained for no longer than 12 months after the last contact. If an enquiry leads to a reservation or contract, data is kept for the duration of that process and then for the period required by law or needed for limitation of claims. Security logs are retained according to hosting configuration and security needs.

6. Transfers outside the EEA

Some infrastructure providers may process data outside the European Economic Area. Any such transfer relies on an adequacy decision, Standard Contractual Clauses or another GDPR mechanism. Contact the Controller to obtain information about the safeguards used.

7. Your rights

• access to your data and a copy;
• rectification, erasure or restriction;
• data portability where applicable;
• objection to processing based on legitimate interests;
• a complaint to the Polish President of the Personal Data Protection Office (uodo.gov.pl) or your local supervisory authority.

8. Voluntary provision

Providing data is voluntary, but your name, email, telephone number and message are required to answer and handle the enquiry. Without them, we may be unable to contact you.

9. Cookies and external services

The website currently uses no advertising or analytics cookies. It may use only technical mechanisms necessary for language handling, security and requests. The interactive map downloads tiles from OpenStreetMap servers; that provider may receive your IP address and browser technical data under its own privacy rules.

10. Automated decisions and security

We do not use the data for solely automated decisions producing legal effects. We use proportionate organisational and technical safeguards, including form validation, request limiting and access controls.

11. Changes

We may update this policy when the website, providers or legal requirements change. The current version and update date are always published here.