Personal data processing policy
Personal Data Administrator:NESTOVIA Sp. z o. o. based in Ornontowice (43-178) at ul. Zwycięstwa 178 (Poland), NIP: 635-186-20-61, REGON 522148483. District Court Katowice-Wschód in Katowice, 8th Commercial Division of the National Court Register – KRS No. 0000974315. KZ PLN 5,000.00 paid in full. (hereinafter: “NESTOVIA Sp. z o. o.“).
NESTOVIA Sp. z o. declares that all personal data are processed in accordance with the law, in a reliable and transparent manner, and only data that is adequate, relevant and necessary in relation to the purpose of their processing are required. NESTOVIA Sp. z o. o. collects and processes personal data in accordance with the currently applicable provisions of European Union law, in particular the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement such data and repealing Directive 95/46/EC (General Data Protection Regulation) – as well as the provisions of the Act of May 10, 2018 on the protection of personal data, and in the event of its replacement by another act – the act that will replace it.
Personal data is processed in connection with the business of NESTOVIA Sp. z o. o., which primarily means undertaking activities in the field of intermediation in the purchase or sale of real estate and the provision of related services, in particular those located in the territory of the Republic of Croatia.
NESTOVIA Sp. z o. o. guarantees data confidentiality by, among others, implementation of procedures enabling access to personal data only to authorized persons and only to the extent necessary for the tasks performed by them. NESTOVIA Sp. z o. o. uses organizational and technical solutions to register and perform operations on personal data only by authorized persons. NESTOVIA Sp. z o. o. undertakes to take all necessary actions to ensure that its subcontractors and other cooperating entities guarantee the use of appropriate security measures whenever they process personal data. NESTOVIA Sp. z o. o. conducts ongoing risk analysis and monitors the adequacy of the data security measures used to the identified threats. If necessary, NESTOVIA Sp. z o. o. will implement additional measures to increase the security of processed personal data.
Personal data will be processed by NESTOVIA Sp. z o. o. based on the following legal bases:
- processing is necessary for the performance of a contract to which the data subject is party;
- processing is necessary to fulfill the legal obligation imposed on NESTOVIA Sp. z o. o.;
- processing is necessary for the purposes of legitimate interests pursued by NESTOVIA Sp. z o. o.;
- the data subject has consented to the processing of his or her personal data for one or more specific purposes by
NESTOVIA Sp. z o. o.
Personal data will be processed by NESTOVIA Sp. z o. o. in particular the purpose:
- effective completion of a commercial transaction (e.g. purchase/sale of real estate) by contractors of NESTOVIA Sp. z o. o.;
- concluding a contract in the field of real estate transactions to which the data subject is a party;
- compliance with legal obligations, e.g. entry in the land and mortgage register, payment of fees provided for by law, etc.;
- keeping records of contracts and accompanying documents for the period necessary to protect the parties to the relations arising from the contracts (e.g. due to obligations arising from complaints, lease, etc.);
- Preparing further commercial offers and sending them to contractors of NESTOVIA Sp. z o. o.
- performance by NESTOVIA Sp. z o. o. from the obligations arising from the Act of March 1, 2018 on counteracting money laundering and terrorism financing (consolidated text: Journal of Laws of 2020, item 971, as amended).
The recipients of personal data processed by NESTOVIA Sp. z o. o. can be:
- entities providing services to NESTOVIA Sp. z o. o. in the field of IT services, HR and payroll, training, legal, notarial or marketing services, courier services;
- employees, representatives of NESTOVIA Sp. z o. o. and property administrators;
- state administration offices (e.g. office responsible for keeping land and mortgage registers, Inspector General of Financial Information, etc.);
- real estate offices and real estate agents cooperating with NESTOVIA Sp. z o. o.
Providing personal data may be a statutory requirement and a condition for concluding an intermediation agreement, and failure to provide data to the extent required by NESTOVIA Sp. z o. o. may result in the inability to provide services and refusal to conclude a contract. Personal data will not be subject to automated decision-making (profiling).
Personal data will be processed for the period of provision of the intermediation service by NESTOVIA Sp. z o. o. and then until the limitation period for claims arising from the concluded contract for the provision of intermediation services expires or until the obligation to store data resulting from legal provisions expires, in particular regarding the obligation to store accounting and tax documents.
Data may be transferred to third countries (including the USA) in connection with activities undertaken on social networking sites and the use of plug-ins and other tools from these websites (including Facebook, Instagram) and in connection with taking actions marketing in the field of acquiring contractors interested in purchasing real estate in the territory of the European Union from outside the European Economic Area (including Australia, Israel, Russia). In such cases, the personal data transferred will be appropriately protected by an approved code of conduct combined with enforceable obligations of the data recipient to appropriate safeguards.
The data subject (person whose personal data is collected and processed by NESTOVIA Sp. z o. o.) has the following rights:
- access to your data and the right to change them (including rectification), deletion, limitation of processing;
- objection against processing to the extent that processing is based on the legitimate interest of NESTOVIA Sp. z o. o.
- withdraw consent to data processing to the extent that consent is the basis for processing, withdrawal of consent does not affect the lawfulness of processing that was carried out on the basis of consent before its withdrawal;
- submit a complaint to the President of the Office for Personal Data Protection regarding a violation of the right to personal data protection.
This policy for the processing and protection of personal data by NESTOVIA Sp. z o. enters into force on May 30, 2022 and will be verified on an ongoing basis and updated, if necessary. Please send all correspondence regarding the processing of your personal data to the following e-mail address: poczta@nestovia.com