According to article 13 of Act 1 and Act 2 of the General Regulation on Protection of Personal Data form April 27th, 2016, we hereby inform you of the following:

Who is the administrator of your personal data?

The controller of your personal data is To Be Rent Aneta Berent registered in Gdynia 81-603 on Kanskiego 9B/3 Street, registered under the number NIP 773 227 56 39, hereinafter referred to as the Company;

The administrator has not appointed the Data Protection Officer. You can contact us as follows: by E-mail address: contact@toberent.com, by phone at: +48 573 979 799, by post to the following address: To Be Rent, Kanskiego 9B/3 Street, 81-603 Gdynia;

What is your personal data and what is their processing?

This is all information about an identified or identifiable natural person. You can find such a definition in art. 4 point 1)GDPR1. As my Client you are an identified person. We hold your personal data in order to fulfil your search enquiry related to the area of our activity (e.g., real estate query) that is received via e-mail, an industry-specific portal (such as otodom.pl or morizon.pl), our website, telephone or contact in person.  By entering into a agency agreement, you will provide me with your name, postal address or e-mail address, telephone number and probably a number of other, regarding real estate properties, in relation to which we will conclude a real estate agency agreement. 

The processing of personal data is an operation or set of operations performed on personal data or personal data sets in an automated or non-automated manner, such as collecting, recording, organizing, storing, adapting or modifying, downloading, browsing, using, disclosing by sending, disseminating or otherwise sharing, matching or combining, limiting, deleting or destroying. Your personal information is processed for such purposes as may be necessary to provide intermediary services and to fulfil legal obligations (such as tax payment) resulting from our agency contract. In addition, processing of customers’ personal data for tax and accounting purposes is required by law. Moreover, we may process personal data based on the legitimate interest of the Company;

Following your consent, your personal data will be processed for marketing purposes in accordance with the Act on Protection of Personal Data from August 29th, 1997 (consolidated text: Journal of Laws of 2002 No. 101, item 926 with amendments);

Who will I transfer your data to? 

In order to fulfil the obligations resulting from the contract, your personal data will be made available to the relevant parties carrying out transactions through the Company, as well as all supporting entities providing payment and consulting services. The circle of recipients of your data will depend on the nature of the agreement we conclude. They can be potential buyers of real estate, their sellers, tenants, landlords, notaries, offices and courts, developers. Your data will go to my IT service provider. We will conduct electronic correspondence, so it will go to the server of the hosting service provider. The invoice issued will go to accounting, and it may use the accounting system. I use different software – for invoicing, for office management, word processors, spreadsheets or cloud computing. Providers of these services may have access to your data. They then have the status of a processor. However, all entities entrusted with the processing of personal data guarantee the use of appropriate measures for the protection and security of personal data required by law.

Your personal data will be kept for the duration of the contract, as well as after its termination in order to:

• pursue any claims resulting from the contract,
• fulfil any obligations resulting from legal provisions, in particular, tax and accounting regulations,
• prevent abuse and fraud (making data available to the police and other legal institutions),
• maintain archives and statistics,
• for a period up to a maximum of 10 years from the date of termination of the contract;

Contact forms

The administrator provides the possibility of contacting him using electronic contact forms. Using the form requires providing personal data necessary to contact the User and answer the inquiry. The User may also provide other data to facilitate contact or service the inquiry. Providing data marked as mandatory is required in order to accept and handle the inquiry, and failure to do so results in the inability to service. Providing other data is voluntary. Personal data is processed:

-in order to identify the sender and handle his inquiry sent via the provided form (the legal basis for processing is the necessity of processing to perform the service contract – Article 6 (1) (b) of the GDPR);

-for analytical and statistical purposes (the legal basis for processing is the Controller’s legitimate interest in keeping statistics of inquiries submitted by Users via the Website in order to improve its functionality – Article 6 (1) (f) of the GDPR).

Social media

The Administrator processes the personal data of Users visiting the Administrator’s profiles on social media (Facebook, YouTube, Instagram, LinkedIn, Google +, Pinterest). These data are processed only in connection with keeping the profile, including to inform Users about the Administrator’s activity and to promote various types of events, services and products, as well as to communicate with users via the functionalities available in social media (legal basis for the processing of personal data by the Administrator for this purpose is his legitimate interest in art.6 par.1 lit.f RODO consisting in promoting his own brand and building and maintaining a community related to the brand.)

What rights do you have regarding the processing of personal data? 

You have the following rights related to the processing of personal data:

1. the right to withdraw consent to data processing if you have given it
   To the extent that your data is processed on the basis of consent, you have the right to withdraw consent to data processing at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. You can do this by sending a statement of withdrawal of consent to my mailing or email address.
2. the right to access your personal data
3. the right to request the rectification of your personal data
4. the right to request the deletion of your personal data
5. the right to request limiting of processing of your personal data
6. the right to object to the processing of your data due to your special situation – in cases where I process your data on the basis of my legitimate interest,
7. the right to transfer your personal data
   You have the right to receive your personal data in a structured, commonly used, machine-readable IT format. You can then send this data to another data controller or request that the data were sent to another controller. I will only be able to do this if it is technically possible. The right to transfer personal data only applies to those data that I process based on the agreement with you or based on your consent,
8. The right to lodge a complaint from a supervisory authority

If you find that I process your data unlawfully, you have the right to lodge a complaint with the supervisory body dealing with the protection of personal data, which is the President of the Office for Personal Data Protection.

Voluntariness of data transfer

Providing your personal data is voluntary, however providing such data as: name and surname, address of residence, PESEL, ID card number, telephone number, e-mail address, data on marital status and matrimonial property regime, data on real estate is necessary to conclude the agreement. If you refuse to provide these data, I will not be able to enter into an agreement with you. This results from the provisions of the Act of 1 March 2018 on counteracting money laundering and financing of terrorism – without obtaining this data I am not allowed to conclude a brokering agreement.

Profiling and automated processing

 When processing your data using electronic devices, in office management programs, we do it in an automated manner. However, we will not process your data in the form of profiling.