Privacy policy

The document consists of two parts:

Part I -Personal data processing rules

Part II -Cookie Policy

I. How we protect and process personal data

The administrator of your personal data is:

Piętra. The company is headquartered in Warsaw, at 18 Twarda, which means that we are responsible for the secure use of your data in accordance with applicable laws.

How to contact us about your personal data?

If you have any questions about the processing of your personal data and the use of rights related to processing, please contact us at:
e-mail: pietra.warsaw@gmail.com

How do we process your personal data? 
The specific rules for processing your personal data may vary depending on the stage and nature of cooperation, so to facilitate the transfer, we will describe the situations of individual groups of persons whose data we process. At the end of the Privacy Policy, you will find information that relates to all the processes mentioned in it(for example, the rights of the data subject, information about profiling).

PEOPLE WE CONTACT TO OFFER COOPERATION

We process your personal data for the following purposes::

• submit to you an offer of our services in accordance with Article 6 (1). F GDPR (legitimate interest of the administrator) – we process your data only for the duration of the call.

Who we share your data with:

• organizations that maintain our IT systems, ICTs, or provide us with ICT tools;
• entities providing legal assistance;
• organizations that carry out postal or courier activities (for correspondence management).

Data source

We received your personal data (including your first and last name, phone number, and email address) from the portal where you placed your property ad.

PEOPLE INTERESTED IN WORKING WITH PIETRA

We process your personal data for the following purposes::

• provide you with an offer of our services in accordance with your request, i.e. in accordance with Article 6 (1). B GDPR (processing is necessary to take measures at the request of the data subject before entering into a contract) – until you enter into a contract or receive information from you about your disinterest in the offer;
  • exercise of our legitimate interests in accordance with Article 6 (1). f RODO:
  • direct marketing and promotion of our services – including by email and telephone, if you agree on the basis of certain provisions-until the date when you submit a reasonable objection or withdraw your consent on the basis of certain provisions.
• establishing, investigating or defending against claims – until the expiration of any claims, for example, as a result of non-compliance with the mediation agreement – until the date when you object or withdraw your consent, if the basis for processing your personal data is the legitimate interest of the administrator or your voluntary consent;
• identification and verification of the identity of the client and the actual beneficiary, which we are required to do even before starting cooperation as a mandatory institution-in accordance with Article 6 (1). c of the GDPR, i.e. processing is necessary to fulfill our legal obligations under the law of March 1, 2018 On Combating Money Laundering and Financing of Terrorism. terrorism-until the obligations arising from the provisions of the law of March 1, 2018 on Countering Money Laundering and the Financing of Terrorism cease.;

Who we share your data with:

• organizations that maintain our IT systems, ICTs, or provide us with ICT tools;
• entities providing legal assistance;
• organizations that carry out postal or courier activities (for correspondence management).

Is the provision of personal data mandatory?

Your provision of personal data is voluntary, but without providing it, you will not be able to provide you with the offer of our services. In turn, measures to conclude an intermediary agreement will only be possible if personal data is provided in accordance with the law (in accordance with the law on Combating Money Laundering and Terrorist Financing of March 1, 2018).

PERSONS WHO SIGNED THE MEDIATION AGREEMENT WITH US, AS WELL AS THEIR REPRESENTATIVES, PROXIES, AND PERSONS DESIGNATED FOR CONTACT UNDER THE AGREEMENT

We process your personal data for the following purposes::

• implementation of the mediation agreement concluded with the floor, including the implementation of real estate transactions in accordance with Article 6 (1). B GDPR, if you are a party to the contract or in accordance with Article 6 (1). F GDPR, i.e. for the implementation of the legitimate interests of the floors, if you are a representative, contact person or a representative appointed by a party to the agreement for its conclusion or implementation-during the term of the agreement;
• application of financial security measures, including identification and verification of the identity of the client and the actual beneficiary, to which we are obliged as a mandatory institution-in accordance with Article 6 (1). c of the GDPR, i.e. processing is necessary to fulfill our legal obligation under the Anti-Money Laundering Act of March 1, 2018 and financing of terrorism – during the period during which Pietra is required, in accordance with the provisions of generally recognized legislation, to store documents and information, including: in accordance with the Law of March 1, 2018 on Countering Money Laundering and Terrorist Financing, i.e. on the principles specified in article 49 of the aforementioned law;
• exercise of legitimate interests, i.e. on the basis of Article 6 (1). F of the GDPR, based on:
  • direct marketing and promotion of our services – including by email and telephone, if you give your consent under certain provisions-until the date of a reasonable objection or withdrawal of consent expressed under certain provisions;
  • determination, investigation or defense of claims – before the statute of limitations expires, and in the case of complaints, judicial, tax or administrative proceedings-also during their validity period;
  • linking the parties to the transaction and seeking to minimize risks and ensure the security of the planned real estate transaction – during the term of the contract.

Who we share your data with:

• contractors in real estate transactions (for example, a party that sells / buys real estate) and, in legitimate cases, real estate agencies that cooperate in this transaction;
• realtors working with the floor:
• to the notary before whom the transaction with respect to the property or related actions is to take place, or to other entities directly involved in the transaction process;
• entities that provide us with accounting, auditing, legal, tax or accounting services;
• organizations that maintain our IT systems, ICTs, or provide us with ICT tools;
• organizations that carry out postal or courier activities (for correspondence management).

Additionally,

• when you are a person interested in buying a property, we share your data:
  • developers I work with to find buyers for their proposed properties;
  • intermediaries or mortgage contract consultants – if you agree to the transfer of data;

Is the provision of personal data mandatory?

The provision of personal data is mandatory in accordance with the provisions of the law on combating money Laundering and terrorist Financing – to the extent that this law applies to the agreement concluded with you. In addition, the provision of data is necessary for the conclusion and implementation of an intermediary agreement. Otherwise, the provision of data is voluntary. In the absence of the personal data required by law and the data required for the performance of the contract, we will not be able to conclude the contract or provide you with services.

If you are a representative of our client or a person appointed by him to perform the contract, we
also inform you that we process your personal data in relation to the data disclosed by the client, most often: first name, last name, phone number and/or email address. The source of this data is the floor client that you represent.

REAL ESTATE SEEKERS (SIGNING INTEREST FORMS OR PROPERTY SUBMISSION CARDS)

We process your personal data:

• in accordance with Article 6 (1). F of the GDPR, i.e. for the implementation of the legitimate interests of persons who are in:
  • realisation of your expectations, i.e. submission of proposals for real estate – before the date of submission of a reasonable objection;
  • providing us and developers with the opportunity to fulfill their mutual obligations-until the date of filing a reasonable objection;
  • in order to minimize risks and ensure the security of the planned real estate transaction – until the date of a reasonable objection;
  • establishing, investigating or defending against claims – before the statute of limitations expires, and in the case of complaints, judicial, tax or administrative proceedings-also during their validity period;
  • direct marketing and promotion of our services – including by email and telephone, if you give your consent under certain provisions-until the date of a reasonable objection or withdrawal of consent expressed under certain provisions;
• in accordance with Article 6 (1). a of the GDPR, i.e. on the basis of your consent, in order to provide data to organizations cooperating with the floor-intermediaries or mortgage contract consultants-until the consent is withdrawn.

Who we share your data with:

• contractors in real estate transactions (seller party) and in legal cases: real estate agencies cooperating in this transaction;
• developers I work with to find buyers for their proposed properties;
• to the notary before whom the transaction with respect to the property or related actions is to take place, or to other entities directly involved in the transaction process;
• entities that provide us with accounting, auditing, legal, tax or accounting services;
• organizations that maintain our IT systems, ICTs, or provide us with ICT tools;
• organizations that carry out postal or courier activities (for correspondence management);
• intermediaries or consultants for mortgage contracts – if you agree to the transfer of data;

Is the provision of personal data mandatory?

The provision of personal data by you is voluntary, but without providing it, you will not be able to provide you with real estate offers in accordance with your expectations, including the presentation of real estate.

PEOPLE WHO CONTACT YOU BY PHONE, THROUGH CONTACT FORMS, OR THROUGH A PORTAL THAT PUBLISHES REAL ESTATE ADS

We process your personal data for the following purposes::

If you contact us-by phone, by correspondence, by e-mail, through contact forms or through an online portal that publishes real estate ads – your personal data is processed to respond to your request, which is our legitimate interest in accordance with article 6 (1) lit. f RODO. Your data will be processed during the time required to resolve your question (no more than 30 days to answer the question you have asked) or until the date when you submit a reasonable objection.

Who we share your data with:

Your personal data-depending on the subject of your request-may be shared with service providers or IT solution providers of Pietra, real estate agents working with Pietra, or legal entities.

Data source

Persons who have contacted us through an online portal that publishes real estate ads, we also inform you that: we process the data that you provided in the contact form (for example, first/ last name/ phone number/ email address). The source of this data is the real estate web portal that you sent the request to.

Is the provision of personal data mandatory?
Your provision of personal data is voluntary, but we will not be able to answer your question without providing it.

EXERCISE OF THE RIGHTS HELD BY THE DATA SUBJECT UNDER THE GDPR

We process your personal data for the following purposes::

• to exercise your right under the GDPR/ response to the request, i.e. in connection with a legal obligation imposed on us, in accordance with article 6 (1). C of the GDPR;
• exercise of etagi’s legitimate interest in establishing, investigating or defending against claims under section 6 (1). f RODO.

Who we share your data with:

• organizations that maintain our IT systems, ICTs, or provide us with ICT tools;
• organizations that carry out postal or courier activities (for correspondence management);
• entities that provide us with consulting, auditing, and legal services;
• government agencies that are authorized to request access to your data in accordance with applicable law.

How long do we store your personal data:

We process your personal data during the time required to respond to your request, and after that time until the statute of limitations related to your request expires.

Is the provision of personal data mandatory?
Providing data is a mandatory requirement. Without providing it, we will not be able to fulfill your request.

INDIVIDUALS PARTICIPATING IN THE RECRUITMENT PROCESS UNDER PIETRO’S DIRECTION

We process your personal data for the following purposes::

• for the purpose of implementing the recruitment process-to the extent required by the provisions of the law (in the case of an offer of employment based on an employment contract in accordance with article 221 § 1 of the Labour Code), i.e. on the basis of article 6 (1). C GDPR;
• take the necessary measures to conclude an employment contract/cooperation in accordance with article 6 (1). b RODO;
• exercise of etagi’s legitimate interest in establishing, investigating or defending against claims under section 6 (1). f RODO;
• if you provide data other than what is required by law – on the basis of your consent, for the purpose of the recruitment process, i.e. pursuant to article 6 (1). a RODO.

Who we share your data with:

• entities that provide us with HR services, recruitment agencies;
• organizations that maintain our IT systems, ICTs, or provide us with ICT tools;
• organizations that carry out postal or courier activities (for correspondence management);
• entities that provide us with consulting services and legal assistance;
• medical institutions that conduct research in the field of occupational medicine – in case of employment on the basis of an employment contract.

How long do we store your personal data:

Your personal data is processed throughout the entire recruitment process (no longer than 3 months). In case of reasonable information about the possibility of claims, personal data will also be stored until the statute of limitations expires.

Is the provision of personal data mandatory?

The provision of personal data required by law is mandatory, but otherwise it is voluntary. In the absence of personal data required by law, your candidacy will be rejected.

INFORMATION ABOUT ALL OF THE ABOVE CATEGORIES

What rights do you have regarding the protection of personal data:

According to the GDPR,you have the following rights in connection with the processing of your personal data:

• data access – You can get information related to the processing of your personal data and a copy of such personal data;
• correcting(for example, correcting, updating) data;
• deleting data;
• data transfer (if processing is carried out on the basis of consent or contract, in an automated way);
• processing restrictions (for example, suspending certain operations with data or not deleting data-pending verification or dispute resolution);
• right to object: an objection may be filed against the processing of your personal data-in the following situations:
  • If your data is processed on the basis of our legitimate interests or for the purpose of performing a task carried out in the public interest, you can object for reasons related to your specific situation. In this case, we will no longer be able to process objectionable personal data on this basis, unless we prove that there is another valid legally justified basis for processing the data (exceeding your interests, rights and freedoms) or a basis for establishing, approving or defending claims.
  • If your data is processed for direct marketing purposes, an objection to such processing can be made without giving any reason. In this case, we will no longer be able to process personal data for direct marketing purposes.
• If your data is processed on the basis of your consent, you also have the right to::
  • revocation of consent: you can revoke your consent at any time. However, this will not affect the legality of the use of your data until such consent is revoked.

Right to file a complaint:
Regardless of the above-mentioned powers, you have the right to file a complaintwith the Chairman of the Office for Personal Data Protectionif you believe that your personal data is being processed illegally. However, we ask that you contact us in advance for a peaceful explanation of your case before you decide to contact the authority.

Automated decision-making Pietra does not use automated decision-making or profiling.

Will your data extend beyond the European Economic Area (EEA)?
We are not currently transmitting We do not plan to transfer your data outside the EEA (including the European Union, Norway, Liechtenstein and Iceland).

II. COOKIE POLICY

Introduction

We are glad that you have visited our website. We want you to feel comfortable on it, so we have prepared this cookie policy (i.e., popular ‘cookies’) for you. Thanks to it, you will learn m.in.:

• What are cookies?
• What are cookies and why do we use them?
• How do they affect your privacy?
• What rights do you have under the GDPR[1] and electronic communication rights [2]?

What are cookies? 

Simply put, cookies are small text files that are stored on your computer or smartphone when you browse our website. There are different types of cookies. We have divided them into two groups for you:

• You must use our website.
• The others.

The cookies required for the use of our website are used to: m.in. to ensure the stability of its operation (they measure traffic, protecting us from congestion), remember your chosen privacy preferences, or fill out the online forms provided by us. We use these cookies by default, i.e. we store them on your computer or smartphone when you log in to our website (in accordance with section 173 (3) of the Telecommunications Act).

We only use other cookies when you give us your consent to do so. You will learn more about them in the next part of our policy.

What cookies do we use? 

Necessary cookies-ensure the proper functioning of our website and its main functions. Without them, you will not be able to use our online services correctly. These cookies are exempt from the need to obtain your consent (Section 173 (3) of the Telecommunications Act).
Name	Goal	Shelf life
Cookiebot	Saves the user’s consent status for cookies for the current domain.	13196 days
Google	Waiting	1 day
ID5	Determines whether the user has accepted the cookie consent window. This ensures that the cookie consent window is not re-presented when you log in again.	session
Nativo	It is used to determine whether the user has accepted the marketing category in the cookie banner. This cookie is required to comply with the GDPR on the website.	1 year old
embed.lendi.pl	AWSALB registers which server cluster serves the user. This is used in the context of load balancing to optimize user interaction.	7 days
	AWSALBCORS registers which server cluster serves the user. This is used in the context of load balancing to optimize user interaction.	7 days

Functional cookies-allow you to “remember” the user’s settings (for example, language, font size).
Name	Goal	Shelf life
Google	maps / add_204 is used in the context of map integration on a web page. A cookie stores the user’s interaction with the map to optimize its functionality.	session

Statistical cookies;– our website uses cookies provided by Google and Media.net Analytical cookies allow us to track the number and sources of visits, so that we can measure and improve the performance of our website. This type of cookie helps us understand which subpages are visited most often or less frequently, and how visitors navigate through our site. If you refuse to store analytical cookies on your computer or smartphone, your visit will not be included in our statistics, but at the same time, this will not limit any functionality on our site.
Name	Goal	Shelf life
Google	_registration of a unique identifier that is used to generate statistics about how the user uses the website.	2 years old
	_ga_ # is used by Google Analytics to collect data about the number of visits to the website, as well as the dates of the first and last visit.	2 years old
	Td records statistics about user behavior on the website. Used for internal analysis by the website operator.	session
	visitor-id this cookie is used to collect information about the user. This information is stored internally for analysis by the website operator. Internal analysis is used by websites to optimize their domains.	1 year old

Marketing cookies – we use these cookies to personalize the content that is displayed to you. Marketing cookies may be used in our advertising campaigns, which are conducted on third-party websites. If you agree to the use of marketing cookies, you can receive information about the websites of our trusted partners where you have responded to our ads. If you opt out of marketing cookies, you will be shown generic and non-personalized ads. As with analytical cookies, if you refuse to store marketing cookies on your computer or smartphone, this will not limit any of the functionality of our website.
Name	Goal	Shelf life
Meta Platforms, Inc.	lastexternalreferrer detects how the user got to the page by registering their last URL.	Solid
	lastexternalreferrertime covers how the user got to the page by registering their last URL.	Solid
	_fbp is used by Facebook to deliver a series of advertising products, such as real-time bidding by third-party advertisers.	3 months
Adobe Inc.	demconf.jp sets a unique identifier for the user, which allows third-party advertisers to send appropriate ads to the user. This service is provided by third-party ad centers that simplify real-time bidding for advertisers.	Session
	demdex uses a unique identifier that is used for semantic content analysis, registers user navigation on the website and combines it with offline data from surveys and similar registrations to display targeted ads.	180 days
	dpm issues a unique identifier for the user, which allows third-party advertisers to send appropriate ads to the user. This pairing service is provided by third-party ad centers that facilitate real-time bids for advertisers.	180 days
Appnexus	apj registers a unique identifier that identifies the device of the returning user. The ID is used for targeted advertising.	3 months
	setuidTo cookie is set by the site’s audience manager to determine the time and frequency of user data synchronization. Cookie data synchronization is used to synchronize and collect user data from multiple websites.	Session
	uuid2 registers a unique identifier that identifies the device of the returning user. The ID is used for targeted advertising.	3 months
Google	IDEVISION	1 year old
	ads / GA-Audiences is used by Google AdWords to re-attract visitors who are likely to turn into customers based on the visitor’s online behavior on various websites.	Session
	pagead / 1P-conversion / # / pending	Session
	_gcl_a is used by Google AdSense to experiment with the effectiveness of advertising on various websites using their services.	3 months
ID5	callback collects user behavior data from multiple websites to present more relevant ads. It also allows the website to limit the number of times visitors see the same ad.	Session
	cag provides the user with relevant content and advertising. This service is provided by third-party ad centers that simplify real-time bidding for advertisers.	Session
	it generates a unique identifier for the user, which allows third-party advertisers to send the appropriate ads to the user. This pairing service is provided by third-party ad centers that facilitate real-time bids for advertisers.	Session
	cip provides the user with relevant content and advertising. This service is provided by third-party ad centers that simplify real-time bidding for advertisers.	Session
	spasp provides the user with relevant content and ads. This service is provided by third-party ad centers that simplify real-time bidding for advertisers.	Session
Media.net	data-cp provides the user with relevant content and advertising. This service is provided by third-party ad centers that simplify real-time bidding for advertisers.	30 days
	data-c-ts collects user data on various websites.This information is used to make ads more relevant.	30 days
Nativo	suid / 1017 provides the user with relevant content and advertising. This service is provided by third-party ad centers that simplify real-time bidding for advertisers.	Session
Teads	UM is used to identify the user during different sessions and on different devices. This allows the site to show relevant ads to the user. This service is provided by third-party ad centers that simplify real-time bidding for advertisers.	Session
Telaria	tv_UICRCollects information on user behaviour on multiple websites. This information is used in order to optimize the relevance of advertisement on the website.	30 days
	TVID collects information about user behavior on many websites. This information is used to optimize the adequacy of advertising on the site.	1 year old
Triplelift	The xuid provides the user with relevant content and ads. This service is provided by third-party ad centers that simplify real-time bidding for advertisers.	Session
bidswitch.netmatching.ivitrack.com	sync [x2]collects data on user behavior and interaction to optimize the website and make ads on the site more relevant.	Session
exchange.mediavine.com	am_tokens provides the user with relevant content and ads. This service is provided by third-party ad centers that simplify real-time bidding for advertisers.	14 days
	am_tokens_eu-v1 presents relevant content and ads to the user. This service is provided by third-party ad centers that simplify real-time bidding for advertisers.	14 days
	criterion provides the user with relevant content and ads. This service is provided by third-party ad centers that simplify real-time bidding for advertisers.	14 days
	mv_tokens generates a unique identifier for the user, which allows third-party advertisers to send appropriate ads to the user. This pairing service is provided by third-party ad centers that facilitate real-time bids for advertisers.	14 days
	mv_tokens_eu-v1 generates a unique identifier for the user, which allows third-party advertisers to send appropriate ads to the user. This pairing service is provided by third-party ad centers that facilitate real-time bids for advertisers.	14 days
omnitagjs.com	ayl_visitor This cookie records data about the user. This information is used to optimize the adequacy of advertising.	30 days
	The visitor / syncTo cookie is used to assign certain visitors to segments, and this segmentation is based on the behavior of visitors on the website. Segmentation can be used to manage larger groups.	Session
thebrighttag.com	A csTo cookie is used to optimize ad adequacy by collecting visitor data from multiple websites-the exchange of visitor data is usually provided by a third-party data center or advertising exchange.	Session

You can also find a detailed description of cookies in the cookies banner, which is used to provide consent to the use of cookies.

Consent to the installation of cookies

When you visit our website, you will be shown a banner informing you that it uses cookies. If you select ‘allow all’, this means that you accept all cookies placed on our website and confirm that you have read the information about cookies and the purposes for which they are used, as well as when the data collected through cookies is shared with our partners.

Please note that the necessary cookies do not require your consent, as these types of cookies ensure the full and uninterrupted operation of our website. These cookies are exempt from the need to obtain your consent in accordance with section 173 (3) of the Telecommunications Act.

No consent to the installation of cookies

If you do not want our cookies to be stored on your device, you can choose the “denied”option. By selecting this option, you will opt out of all but technically necessary cookies that we use on our site.

Changing your cookie settings

You can manage your cookie preferences in detail by selecting individual types of cookies (‘functional ‘,’ statistical ‘,’ marketing’) or the option’Cookies’ in the cookie banner that you display.Show details’. The ‘show details’ option lists all cookies used on the website and allows you to accept or reject each of them individually.

Personal data

Since some of the cookies we use are personal data, we want you to know the rights that you have under the GDPR:

The administrator of your personal data, i.e. the entity that determines the purposes and methods of processing, is Pietra. LLC with its headquarters in Warsaw.

Your personal data will be processed to ensure the main functions of our website (art. f RODO). If you have given the appropriate (voluntary) consent, your data will also be processed to provide you with services, offers and messages that correspond to your preferences, as well as to analyze traffic on the site and provide social functions (depending on your preferences) (Article 6, paragraph 1, lit. a RODO).

For more information about the rules for processing personal data and your rights, please refer to our Privacy Policy.

Revocation of consent

Please note that you can change your consent at any time by using the cookie agreement management platform or by contacting us:

• email to the following address: Piętra. Sp. z o.o. Warsaw, 00-824, ul.Twarda 18;

The revocation of consent does not affect the legality of data processing that was performed prior to its revocation.

Changes to the cookie Policy;

We reserve the right to change this cookie policy at any time. Any changes to the cookie policy will be posted on the website https://pietra.pl/polityka-prywatnosci

Welcome to contact us if you have any questions or concerns.

Thank you for your trust in us.

[1] Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of Natural Persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (text relevant to the EEA).

[2] Law of July 12, 2024 Law on Electronic Communications (i.e. of 2024, item 1221 of late ed.)