Last updated: 24 July 2026
This Privacy Policy explains how we process the personal data of people using the realsymanagement.pl website, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Polish data protection law.
1. Data controller
The controller of your personal data is:
Realsy Management Sp. z o.o.
ul. Henryka Sienkiewicza 34a/29, 50-335 Wrocław, Poland
KRS: 0001062684
NIP (VAT ID): 8971928387
Contact for data protection matters:
E-mail: biuro@realsymanagement.pl
Phone: +48 573 408 404
We have not appointed a Data Protection Officer. For all matters related to data processing, please write to the e-mail address above.
2. What data we collect
2.1. Data you provide voluntarily in forms
When you fill in a contact form, a property enquiry, a valuation request, a mortgage consultation request, or apply for a job, we collect:
- first and last name,
- phone number,
- e-mail address,
- the content of your message,
- details of the property your enquiry concerns (e.g. development, floor area, district, expected price),
- for job applications — the documents you send us (CV) and the position applied for.
2.2. Data collected automatically
When a form is submitted we also record technical information that allows us to handle your enquiry and measure the effectiveness of our marketing:
- the address of the page the enquiry was sent from,
- visit source — campaign parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content) and advertising click identifiers (gclid for Google Ads, fbclid for Meta),
- referring page address,
- interface language and device type (desktop / mobile),
- truncated IP address — the last segment is set to zero, so it cannot identify a specific device,
- the consent given, together with the date and time of submission.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Responding to your enquiry and taking steps at your request prior to entering into a contract (phone contact, presenting offers, arranging viewings) | Art. 6(1)(b) GDPR |
| Processing based on the consent you give by ticking the box in a form | Art. 6(1)(a) GDPR |
| Recruitment — considering your job application | Art. 6(1)(a) and (b) GDPR, Art. 221 of the Polish Labour Code |
| Measuring advertising performance, statistics and improving the website | Art. 6(1)(a) GDPR (consent for analytics and marketing cookies) |
| Ensuring the security of the website, preventing abuse and spam | Art. 6(1)(f) GDPR (legitimate interest) |
| Establishing, pursuing or defending legal claims | Art. 6(1)(f) GDPR |
| Complying with legal obligations, including tax and accounting | Art. 6(1)(c) GDPR |
4. Recipients of the data
Your data may be entrusted to providers of technical services. Each of them processes data solely on our documented instructions:
- Hostinger International Ltd. — website and database hosting (servers within the European Union),
- Google Ireland Ltd. / Google LLC — business e-mail (Google Workspace), and measurement and advertising tools if you consent to them,
- Meta Platforms Ireland Ltd. — measurement and advertising tools if you consent to them,
- Telegram Messenger Inc. — notifications about new enquiries sent to our team (the contact details contained in the enquiry are transmitted),
- accounting and legal service providers — to the extent necessary to deliver their services.
Data may also be disclosed to public authorities where required by law.
5. Transfers outside the European Economic Area
Some of the services we use (Google, Meta) may involve transferring data to the United States. This takes place on the basis of a European Commission adequacy decision (EU–US Data Privacy Framework) or standard contractual clauses approved by the European Commission. You may obtain a copy of the safeguards applied by contacting us.
6. Retention periods
- Form enquiries — for as long as necessary to handle the enquiry, and then for a maximum of 3 years from the last contact, in order to establish or defend potential claims.
- Data processed on the basis of consent — until the consent is withdrawn.
- Recruitment documents (CV) — for the duration of the recruitment process, after which they are deleted, unless you consent to taking part in future recruitment. CV files you send are never published or stored in a publicly accessible part of the website — they go only to our business mailbox.
- Accounting data — for the period required by tax and accounting law (as a rule, 5 years).
7. Your rights
In connection with the processing of your data, you have the right to:
- access your data and obtain a copy of it,
- rectify (correct) your data,
- erase your data (“the right to be forgotten”),
- restrict processing,
- data portability,
- object to processing based on legitimate interest,
- withdraw your consent at any time — without affecting the lawfulness of processing carried out before the withdrawal,
- lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland.
To exercise these rights, write to biuro@realsymanagement.pl. We respond without undue delay, and no later than within one month.
8. Is providing data voluntary?
Providing your data is voluntary but necessary for us to handle your enquiry. Without a phone number or e-mail address we will not be able to contact you and reply.
9. Cookies and measurement technologies
The website uses cookies and similar technologies:
- Essential cookies — ensure the website works correctly, including form security. They do not require consent.
- Visit source cookie — we store in your browser information about the campaign or page you arrived from (valid for 90 days). This tells us which marketing activities work.
- Analytics and marketing cookies — Google and Meta tools used to measure traffic and display advertising. Installed only after you give consent.
You can change or withdraw your consent for analytics and marketing cookies at any time in the consent settings on the website, and you can delete stored cookies in your browser settings.
10. Advertising and profiling
If you consent to marketing cookies, we may show you advertising tailored to the properties you have previously viewed (remarketing) on the Google and Meta networks. This involves profiling; however, we do not make decisions about you based solely on automated processing that would produce legal effects or similarly significantly affect you.
11. Security
We apply technical and organisational measures appropriate to the risk, including encrypted transmission (HTTPS), restricting data access to authorised persons only, protecting forms against automated spam, and minimising the data collected (including truncating IP addresses).
12. Changes to this Privacy Policy
We may update this Policy, in particular when the law or the scope of our services changes. The current version is always available at this address, and the date of the last change is given at the top of the document.