Privacy policy

1. Who is the controller of your data

The controller of personal data is Eleven Estate & Co. Spółka z ograniczoną odpowiedzialnością, registered office at ul. Wilcza 8/25, 00-532 Warsaw, Poland, entered in the register of entrepreneurs of the National Court Register under number KRS 0001247492, tax ID (NIP) 7011318821, statistical ID (REGON) 544999844, share capital PLN 20,000.

For all matters concerning personal data write to biuro@eleven-estate.com or call +48 535 673 427. We have not appointed a data protection officer - we handle these matters directly.

2. What data we collect

From the contact form - your name, phone number, e-mail address and the content of the message, together with the information whether you are listing a property or looking for one. Providing this data is voluntary, but without it we cannot reply.

Automatically - IP address, date and time of the visit, browser type and operating system. This data is recorded in the server logs, as on any website.

From browser storage - details in section 7.

We do not collect sensitive data, we do not profile and we do not make automated decisions.

3. Why and on what legal basis

• Replying to your enquiry and discussing cooperation - Art. 6(1)(b) GDPR (steps prior to entering into a contract), and where the matter does not lead to a contract, Art. 6(1)(f) GDPR (our legitimate interest in handling correspondence).
• Security and correct operation of the website - Art. 6(1)(f) GDPR (legitimate interest in maintaining the site and protecting it from abuse).
• Accounting and tax obligations, if cooperation begins - Art. 6(1)(c) GDPR.
• Establishing, pursuing or defending claims - Art. 6(1)(f) GDPR.

4. How long we keep the data

• Correspondence that does not lead to cooperation - up to 12 months from the last contact.
• Data related to a concluded contract - for its duration and then for the period required by tax law and until claims become time-barred.
• Server logs - in line with the hosting provider's policy, typically up to a dozen or so months.

5. Who we share the data with

We do not sell data or share it for third-party marketing. We do, however, use providers that process data on our behalf:

• GoDaddy - website hosting and the mail server that receives messages from the form.
• Google - typefaces loaded from Google Fonts. When the page loads, your IP address is sent to Google.
• Advisors, our accounting office, law firms and notaries - only where this is necessary to complete a specific transaction.

Some of these providers are based outside the European Economic Area. In such cases the transfer is based on the standard contractual clauses approved by the European Commission or other mechanisms provided for in Chapter V GDPR.

6. Your rights

You have the right to: access your data and obtain a copy, rectify it, erase it, restrict processing, data portability and to object to processing based on our legitimate interest. Where processing is based on consent, you may withdraw it at any time - without affecting what happened before.

To exercise these rights simply write to biuro@eleven-estate.com. We reply within one month at the latest.

You may also lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland.

7. Cookies and browser storage

This website does not set any cookies. We use no analytics, no advertising pixels and no tracking tools, so we do not ask you for cookie consent - there is nothing here to consent to.

Our hosting provider, GoDaddy, injects its own monitoring script into the page, which used to save the files _tccl_visitor, _tccl_visit and _scc_session. We have blocked it with a Content Security Policy rule - browsers do not execute it, so those files are no longer created.

In browser storage (localStorage) we keep a single item - ee-lang, the language version of the site you chose. It is needed for the site to work, it does not identify you and it never reaches us or anyone else. It disappears when you clear the site data in your browser.

If we ever add analytics or another tool that saves cookies, we will ask for your consent first and update this document.

8. Security

The site runs over an encrypted HTTPS connection. Access to the mailbox that receives enquiries is limited to the team members who work with clients.

9. Changes to this policy

If we change the way we process data - for example by adding an analytics tool or a newsletter sign-up form - we will update this document and change the effective date at the top of the page.