Privacy policy.

Data controller

The controller of the data provided when contacting about GrandRent services is Agata Dudar, conducting business under the name Grand Apartments Agata Dudar, NIP 9581408887, al. Niepodległości 753/U4, 81-838 Sopot.

For privacy and personal-data matters you can write to hello@grandrent.pl or send a letter to the address above. Visiting the office requires a prior appointment.

How the form works

After sending the form the submission goes to GrandRent at hello@grandrent.pl. In the message we provide the name, the chosen contact method and contact details, the subject, the subpage and form address, and any additional information you enter yourself. The form is not for sending documents and does not save submissions in a separate site database.

Providing data is voluntary, however without contact details we may not reply. Do not send Do not provide PESEL numbers, credit documents, payment details, or other information unnecessary to discuss the matter in the initial contact. You can also write directly to our address or call.

Purposes and bases of contact

We use the message or phone number to answer your question, discuss the scope of cooperation, prepare an offer at your request and conduct correspondence in this matter. If the contact leads to a possible contract with you, the legal basis is activities prior to its conclusion at your request (Art. 6(1)(b) GDPR). In other situations the basis is the controller's legitimate interest consisting of handling business correspondence and possibly protecting against claims (Art. 6(1)(f) GDPR).

Providing data when contacting us is voluntary. Without a return address or phone number we may not be able to respond. The mere inquiry does not constitute a subscription to a newsletter nor consent to marketing unrelated to it.

Access and storage

Enquiries sent to GrandRent are for handling your matter. If they concern interior design and furnishing or mortgage advisory, upon receipt we forward the entire message together with the provided contact details to the appropriate independent company cooperating with GrandRent in that area. The company then conducts contact and presents the terms of its service in its own name. Technical service providers participate in maintaining the site and delivering correspondence; mail is handled by home.pl. We do not publish the contents of enquiries on the website.

If the enquiry does not lead to cooperation, at GrandRent we keep the correspondence no longer than 24 months from the last substantive exchange; unnecessary data is deleted earlier. The relevant independent company stores the message it was given for rok od ostatniego zapytania. If a contract, settlement or a specific dispute arises, the data needed in that matter may be stored for longer — for a period resulting from the purpose, a legal obligation or protection against a claim.

Deletion of a message from the mailbox does not immediately remove technical copies held by providers. Under home.pl rules for our Premium Hosting, a copy of mail may be available for restoration for up to 3 days; any separate backup services have their own rules.

Your rights

To the extent provided by the GDPR you may request access to data, their rectification, erasure or restriction of processing. You may also object to processing based on our legitimate interest; the right to data portability applies when the legal conditions are met. Write to hello@grandrent.pl, if you want to exercise your rights. You also have the right to lodge a complaint with the President of the Personal Data Protection Office.

Use of the website and cookies

The hosting operator Manus and the infrastructure providers cooperating with it may process technical connection data, including the IP address and request time, for the purpose of delivering the website and protecting its operation. Technical data are stored for the period necessary for those purposes and according to the operator's policies; we do not link them on the website with the content of profiling forms. We do not make decisions about you solely automatically.

Statistics without cookies. Hosting Manus provides us with aggregated visit statistics (Manus Analytics). The tool does not set cookies in your browser. It transmits the address and title of the visited subpage, the address of the referring page, screen resolution and browser language, and we only see summaries, for example the number of page views and the sources of visits. The legal basis is our legitimate interest in assessing how visitors use the site (Art. 6(1)(f) GDPR).

Consent to cookies. Cookies and similar technologies that are not necessary for the operation of the site are used only with your consent (Art. 399 of the Electronic Communications Law). We collect consent via the Cookiebot banner, provided by Usercentrics A/S headquartered in Copenhagen (Denmark). We remember your choice in the necessary CookieConsent cookie for up to 12 months. Cookiebot also stores proof of consent: an anonymized IP address, date and time, the subpage address, browser data, a random identifier and the scope of consent. These data are deleted after 12 months, and we process them in order to be able to demonstrate that consent was given (Art. 6(1)(c) GDPR in connection with Art. 7(1) GDPR).

Tag Manager. The tools described below are launched through Google Tag Manager, provided by Google Ireland Limited headquartered in Dublin (Ireland). The Tag Manager itself does not set cookies, but when the page loads it connects to Google's servers, which then receive the IP address and browser data. The legal basis is our legitimate interest in managing the tools on the site (Art. 6(1)(f) GDPR).

Changing and withdrawing consent. You can change or withdraw your consent at any time by clicking the icon in the lower-left corner of the page or the "Cookie settings" button in the footer. Withdrawing consent does not affect the lawfulness of actions performed before its withdrawal. You can also delete or block cookies in your browser settings.

Google Analytics statistics. If you agree to statistics, we use Google Analytics 4, provided by Google Ireland Limited headquartered in Dublin (Ireland). With it we see which subpages are visited, where visitors come from and which devices they use, and also whether a form was submitted (without the content of the submission and contact details) and whether someone clicked a phone number or e‑mail address. Google Analytics 4 does not store IP addresses. The tool uses cookies _ga and _ga_ZZCGJ07LBL, stored for up to 2 years. We retain data in Google Analytics for 14 months. The legal basis is your consent (Art. 6(1)(a) GDPR). More information can be found in Google's privacy policy.

Ads on Facebook and Instagram. If you agree to marketing, we use the Meta pixel, provided by Meta Platforms Ireland Limited headquartered in Dublin (Ireland). The pixel sends Meta information about visited subpages, about a submitted form (only the type of inquiry, without the content and contact details) and about clicks on a phone number or e‑mail address, as well as technical browser data and the IP address. This allows us to measure the effectiveness of our ads on Facebook and Instagram and to show them to people who have visited the site. Meta may link this data to your Facebook or Instagram account and use it to personalize ads. The pixel uses the _fbp cookie, stored for up to 90 days, and, if the browser allows, also Meta cookies in the facebook.com domain. The legal basis is your consent (Art. 6(1)(a) GDPR). We are jointly responsible with Meta Platforms Ireland Limited for collecting and transmitting this data (Art. 26 GDPR), and further processing is carried out according to Meta's privacy policy.

Transfer of data outside the EEA. Google and Meta may transfer data to their companies in the USA (Google LLC, Meta Platforms, Inc.). Both companies participate in the EU‑U.S. Data Privacy Framework, for which the European Commission has found an adequate level of data protection (Art. 45 GDPR). Public Manus' processing policies and its list of subcontractors include infrastructural entities located outside the EEA, including the USA. The operation of the site may involve the transfer of data outside the EEA; according to the operator's documentation, in appropriate cases it applies transfer mechanisms provided for by the GDPR, including standard contractual clauses. Details and information about safeguards can be obtained at hello@grandrent.pl.

Upon visiting grandapartments.pl or on our social media profiles the privacy policies of those separate services apply.