Privacy policy

This English version is a courtesy translation. The legally binding version is the Polish Polityka prywatności.

1. Who is responsible for your data

The controller of your personal data is Peak Residences spółka z ograniczoną odpowiedzialnością (a Polish limited liability company) with its registered office in Warsaw, al. Niepodległości 235/237 lok. 76, 02-009 Warsaw, Poland, entered in the register of entrepreneurs of the National Court Register kept by the District Court for the Capital City of Warsaw, 12th Commercial Division, under KRS number 0001244345, NIP (tax ID) 7011316035, REGON 544871469 (the "Controller" or "we").

Contact for all personal-data matters: kontakt@peakresidences.pl or by phone: +48 668 242 971. We have not appointed a data protection officer, as the law does not require us to.

2. In short

• We process your data only when you give it to us yourself: by writing through the contact form, ordering the guide and the newsletter, or booking a call online.
• We do not use cookies. We have no analytics, advertising or tracking tools.
• We do not profile you, we make no automated decisions about you and we do not sell data.
• You can exercise all your rights with a single e-mail to kontakt@peakresidences.pl.

3. What we do with data (table)

4. Contact form

When you write to us through the form on the contact page, we process your name (if you provide it), e-mail address and the message content in order to reply.

Where your message concerns an offer, a consultation or cooperation, the legal basis is taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR). In other cases the basis is our legitimate interest: handling correspondence and being able to evidence its course (Art. 6(1)(f) GDPR).

We keep correspondence for 12 months after the matter is closed, and correspondence concerning an offer or cooperation for up to 3 years, due to limitation periods for claims. Providing data is voluntary, but without an e-mail address we will not be able to reply.

5. Guide (PDF) and newsletter

By ordering the free guide you enter into the contract described in the Terms of Service: we deliver the guide and send the newsletter, and you provide us with your e-mail address. The legal basis for processing the address is that contract (Art. 6(1)(b) GDPR).

We process the address until you unsubscribe. You can unsubscribe at any time with one click in the footer of any message, or by writing to kontakt@peakresidences.pl. After you unsubscribe, we keep only the fact that you were subscribed and when you unsubscribed, for 3 years, to be able to demonstrate the mailing was lawful (Art. 6(1)(f) GDPR).

6. Booking a call online

On the contact page you can book a free, thirty-minute consultation call yourself. For this we process your name, e-mail address, chosen time, your time zone and the topic of the call, if you provide one.

We process this data to arrange and hold the call at your request, i.e. to take steps before entering into a possible contract (Art. 6(1)(b) GDPR). A booking creates an event in our Google calendar together with a video-meeting link (Google Meet); we send you a confirmation and a reminder 30 minutes before the call by e-mail. You can reschedule or cancel the call at any time using the link in the confirmation message.

We keep booking data until the call is held, and if it concerned an offer or cooperation, for up to 3 years, due to limitation periods for claims. Providing data is voluntary, but without an e-mail address and a chosen time we cannot complete the booking. The calendar and video meeting are provided by Google Ireland Limited (data recipient, section 10; transfer outside the EEA, section 11).

7. Contact via WhatsApp

The site contains links to chat with us on WhatsApp. If you use them, your data (phone number, conversation content, metadata) is processed by WhatsApp Ireland Limited as an independent controller, as described in its privacy policy. We treat the content of a conversation with us the same as form correspondence (section 4).

8. Investment map (OpenFreeMap)

The maps on the site use tiles provided by OpenFreeMap, a project run by Hyperknot Software Kft., based in Hungary (European Union), on servers located in the EU. When a map is displayed, your browser fetches tiles directly from OpenFreeMap's servers, which involves the technical transmission of your IP address, necessary to establish the connection. According to the OpenFreeMap privacy policy, IP addresses are not stored by default. The basis is our legitimate interest: presenting investment locations at your request (Art. 6(1)(f) GDPR).

9. Hosting, logs and security

The site runs on the infrastructure of Cloudflare, Inc. (hosting, CDN, form handling, file storage). Cloudflare processes standard connection logs on our behalf (including IP addresses), which serve the security and proper operation of the site (Art. 6(1)(f) GDPR) and are kept for up to 90 days.

10. Who we entrust data to

We entrust data only to the providers that operate our site:

1. Cloudflare, Inc. (USA): hosting, CDN, file storage;
2. Resend, Inc. (USA): sending e-mail messages (the guide, the newsletter, form notifications, booking confirmations and reminders);
3. Google Ireland Limited (Ireland): calendar and video meetings (Google Calendar, Google Meet) to run call bookings;
4. Titan (provider of the kontakt@peakresidences.pl mailbox): handling incoming and outgoing correspondence;
5. Hyperknot Software Kft. (Hungary, EU): map tiles (technical recipient, section 8).

Data may also be disclosed to legal or accounting advisers where necessary. We have data processing agreements (Art. 28 GDPR) in place with our processors.

11. Transfers outside the European Economic Area

1. Cloudflare may process data in the USA. The basis is the European Commission's adequacy decision (EU-US Data Privacy Framework); Cloudflare holds an active DPF certification, and independently of it we rely on standard contractual clauses (SCCs) included in the data processing agreement.
2. Resend may process data in the USA. The basis is the European Commission's adequacy decision (EU-US Data Privacy Framework), with which Resend declares compliance in its data processing agreement, and independently of it standard contractual clauses (SCCs) forming part of that agreement.
3. Google may process data in the USA. The basis is the European Commission's adequacy decision (EU-US Data Privacy Framework), under which Google is certified, and independently of it standard contractual clauses (SCCs) included in Google's data processing terms.
4. Titan is based outside the EEA. The transfer is safeguarded by standard contractual clauses (SCCs) forming part of the data processing agreement with this provider.

You can obtain a copy of the safeguards by writing to kontakt@peakresidences.pl.

12. Cookies and browser local storage

The site does not use cookies and contains no analytics, advertising or tracking tools. For proper operation we use only the browser's local storage (localStorage), in which we save three things on your device: 1) the selected theme (light or dark); 2) the fact that the welcome animation has already been shown; 3) the preferred catalog layout.

This data is saved only in response to your actions, does not identify you, is not shared with anyone and never leaves your device. You can delete it at any time by clearing the site data in your browser settings. Because we use no technologies requiring consent, the site shows no cookie banner.

13. Your rights

You have the right to: access your data, rectify it, erase it, restrict its processing, and port it (where processing is based on a contract).

Right to object: to the extent we process data based on legitimate interest, you may object at any time. An objection to direct marketing is always effective and requires no justification (Art. 21 GDPR).

You can exercise all rights by writing to kontakt@peakresidences.pl. We reply within one month at the latest.

14. Complaint to the supervisory authority

If you believe we process your data unlawfully, you may lodge a complaint with the President of the Polish Personal Data Protection Office (Prezes UODO, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl).

15. Voluntary provision of data

Providing data is always voluntary. The only consequence of not providing it is that we will not be able to deliver the given service: reply to your message or deliver the guide and the newsletter.

16. Automated decisions and profiling

We make no decisions about you based solely on automated processing and we do not profile you.

17. Changes to this policy

We will inform newsletter subscribers of material changes by e-mail and update the date on this page. Previous versions are available on request.