Your Trusted Guide to Homeownership in Poland

This Privacy Policy describes how your personal data is collected, used, and protected when you use the creditembassy.pl website ("the Website") operated by DIGITAL & FINANCE SOLUTIONS Lukasz Turczyn, based in Warsaw, Poland.

1. Data Controller

The controller of your personal data is DIGITAL & FINANCE SOLUTIONS Lukasz Turczyn, based in Warsaw, Poland. Contact: [email protected], phone: +48 888 333 728.

2. Data Collected

We collect the following categories of personal data:

• Contact data provided through the contact form (name, phone number, email address).
• Data about your inquiry (topic, message content).
• Technical data collected automatically (IP address, browser type, device information) through cookies and analytics tools.

3. Purpose of Data Processing

Your personal data is processed for the following purposes:

• Responding to your inquiry and establishing contact.
• Providing mortgage brokerage services in cooperation with NOTUS Finanse S.A. and banks.
• Complying with legal obligations.
• Improving our services and website functionality through analytics.

4. Legal Basis

Processing is based on: your consent (Art. 6(1)(a) GDPR), performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR), compliance with legal obligations (Art. 6(1)(c) GDPR), and legitimate interests of the controller (Art. 6(1)(f) GDPR).

5. Data Recipients

Your personal data may be shared with:

• NOTUS Finanse S.A. - for preparing mortgage offers.
• Banks and financial institutions - only with your explicit consent, for submitting mortgage applications.
• IT and hosting service providers - to the extent necessary for the Website to function.
• Public authorities - where required by applicable law.

6. Data Retention Period

Personal data is stored for the period necessary to fulfill the purpose for which it was collected, and no longer than the limitation period for claims under applicable law. Data processed on the basis of consent - until such consent is withdrawn.

7. Your Rights

You have the right to:

• Access your personal data.
• Rectify (correct) your data.
• Erase your data ("right to be forgotten").
• Restrict processing.
• Data portability.
• Object to processing.
• Withdraw consent at any time (without affecting the lawfulness of processing carried out prior to withdrawal).
• Lodge a complaint with the President of the Personal Data Protection Office (UODO).

8. Cookies

The Website uses cookies to ensure proper functioning, analyze traffic, and personalize content. You can change your cookie settings in your browser at any time. Types of cookies used:

• Necessary - required for the Website to function properly.
• Analytical - help us understand how visitors interact with the Website.
• Functional - allow the Website to remember user preferences.

9. Data Security

The Controller implements appropriate technical and organizational measures to ensure the security of processed personal data, in particular protection against unauthorized access, processing in violation of law, and alteration, loss, or destruction. The Website uses SSL/TLS encryption.

10. Changes to this Policy

The Controller reserves the right to make changes to this Privacy Policy. Users will be informed of any significant changes through a notice on the Website. The current version of the Privacy Policy is always available at creditembassy.pl.

11. Contact

For matters related to the protection of personal data, please contact us at: [email protected] or by phone: +48 888 333 728.

In accordance with Articles 13(1) and 13(2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR), I inform you that:

1. Data Controller

The controller of your personal data is DIGITAL & FINANCE SOLUTIONS Lukasz Turczyn, based in Warsaw, Poland. Contact: [email protected], phone: +48 888 333 728.

2. Purpose of Processing

Your personal data will be processed for the purpose of:

• Responding to your inquiry and establishing contact (Art. 6(1)(b) GDPR).
• Providing mortgage brokerage services, including preparation of mortgage offers in cooperation with NOTUS Finanse S.A. and banks (Art. 6(1)(b) GDPR).
• Fulfilling legal obligations of the Controller (Art. 6(1)(c) GDPR).
• Pursuing the legitimate interests of the Controller, including direct marketing of own services (Art. 6(1)(f) GDPR).

3. Data Recipients

Recipients of data may include: NOTUS Finanse S.A. (co-controller in the scope of preparing offers), banks and financial institutions (with your explicit consent), IT service providers, and public authorities where required by law.

4. Retention Period

Data will be stored for the period necessary to achieve the purpose of processing, and subsequently for the period required by law (in particular, provisions on limitation of claims and tax and accounting obligations).

5. Rights of the Data Subject

You have the right to: access your data, rectify it, erase it, restrict processing, data portability, object to processing, and withdraw consent at any time. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw.

6. Voluntary Provision of Data

Providing personal data is voluntary; however, failure to provide it may prevent us from responding to your inquiry or providing mortgage brokerage services.

7. Automated Decision-Making

The Controller does not make decisions in an automated manner, including profiling within the meaning of Art. 22 GDPR.