Privacy policy (personal data protection)

Privacy policy (personal data protection)

At the Aurec Capital Group we take the security of your personal data and privacy very seriously. Below, acting in accordance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) – hereinafter referred as “GDPR”, we provide information on how we process your data and what are your rights.

  • The Controller, within the meaning of Article 4(7) of the GDPR, with regard to personal data of data subjects is Aurec Capital Development Poland Sp. z o.o., with it seats in Warsaw, Próżna 7/9 street, 00-107 Warsaw (hereinafter the “Company“). 
  • The Company have appointed the Data Protection Officer, who can be contacted via e-mail address: iod@aurechome.com as well as traditional form to the address of the Company’s office.
  • Personal data may be processed for the following purposes and on the following legal basis:
  • exchange of correspondence, including ongoing communication related to the inquiries (e.g. inquiries about the premises/flats in which you are interested), which constitutes a legitimate interest of the Company (data processing legal basis: Article 6(1)(f) of the GDPR),
  • conducting direct marketing – which is a legitimate interest of the Company (data processing legal basis: Article 6(1)(f) of the GDPR),
  • sending commercial information by electronic means (e-mail) regarding rental and sale offers of premises/flats offered by Aurec Capital Development Poland Sp. z o.o. and other companies from the Aurec Capital Group – if a specific person has consented to receive this type of information (data processing legal basis: Article 6(1)(a) of the GDPR),
  • for marketing communication with the use of telecommunications terminal equipment and automatic calling systems (telephone calls, SMS / MMS messages) in order to introduce rental and sale offers of premises/flats offered by Aurec Capital Development Poland Sp. z o.o. and other entities from the Aurec Capital Group – if a specific person has given separate consent to such communication to the indicated telephone number (data processing legal basis: Article 6(1)(a) of the GDPR),
  • performance of statistical analyses, which constitutes a legitimate interest of the Company (data processing legal basis: Article 6(1)(f) of the GDPR),
  • storage of data for archiving purposes and for the purpose of demonstrating the correctness of meeting the legal obligations incumbent on the Company, which constitutes a legitimate interest of the Company (data processing legal basis: Article 6(1)(f) of the GDPR),
  • internal administration of business and administrative processes carried out within the Aurec Capital Group, which constitutes a legitimate interest of the Company (data processing legal basis: Article 6(1)(f) of the GDPR).
  • Personal data may be disclosed to the following recipients: 
  • entities supporting the Company in the field of technical and information technology services (including provision, implementation, and software servicing, hardware servicing, hosting, etc.),
  • marketing agencies providing services for the Company,
  • law firms providing services for the Company,
  • consulting, audit, and counselling entities in the scope of services provided by these entities for the Company,
  • entities from the Aurec Capital Group – in the administration of internal administrative and business processes within the Capital Group.
  • Personal data may be transferred by the Company outside the European Economic Area (EEA). In such a case, the Company will guarantee legally required personal data protection measures, which will (depending on the case): I) transfer data to an entity located in a third country in relation to which a decision was issued stating an appropriate degree of protection, as required art. 45 GDPR, II) transfer of data carried out on the basis of a data transfer agreement concluded with a third party based on Standard Contractual Clauses adopted by a decision of the European Commission, III) transfer of data implemented under binding corporate rules referred to in art. 47 GDPR. The person whose data is transferred in the above-mentioned case has the right to obtain a copy of the information on the collateral used. More information on the security measures applied by the Company the transfer of data outside the EA can be obtained by contacting the e-mail address iod@aurechome.com or by traditional mail to the address of the Company’s registered office.
  • The Company ensures the right to exercise the rights provided in the GDPR, i.e. the right to access and rectification or erasure of personal data, the right to restriction of processing concerning the data subject or to object to processing as well as the right to data portability, under the terms and conditions cases provided for in the provisions of the GDPR.
  • In the case of processing personal data by the Company in order to implement legally legitimate interests (indicated above), we inform about the right to object to the processing of data for reasons related to a special situation, and in addition, the right to object at any time in the case of data processing for direct marketing purposes.
  • Where personal data are processed based on a given consent, we would like to inform you about the right to withdraw your consent at any time without providing any reasons for such withdrawal. This, however, will not have influence on the compliance of the data processing that took place prior to the withdrawal of the consent.
  • Personal data will be stored by the Company: 
  • for a period of time necessary for the Company to document before public administration bodies, including the personal data protection supervisory body, the correctness of compliance with legal obligations incumbent on it,
  • for archiving purposes if they concern the history of correspondence and replies to inquiries for a period of time not longer than 3 years from the data acquisition,
  • for direct marketing purposes – until you object to data processing or data is found to be out of date,
  • for the purpose of sending commercial information by electronic means (by e-mail) or marketing communication using telecommunications end devices and automatic calling systems – until the consent for the implementation of these purposes is withdrawn or until the data is outdated.
  • We inform about the right to lodge a complaint regarding the processing of personal data to the supervisory authority.
  • Personal data will not be processed in an automated manner, which at the same time could lead to making decisions that have legal effects or have a similar effect on your situation.
  • Providing personal data for the above-mentioned purposes is voluntary, but necessary to achieve the above-mentioned purposes.
  • The principles of data processing in the form of cookies are regulated by the Cookie Policy, which is managed by each person independently via the cookie management panel built into the website.