Last updated: 21 October 2026
This is a translation of the Polish privacy policy. In case of any discrepancy, the Polish version prevails.
1. Data controller
The controller of your personal data is Flatmare sp. z o.o., registered office at Al. Zwycięstwa 241/13, 81-521 Gdynia, Poland, entered in the National Court Register (KRS) under number 0001080278, tax ID (NIP): PL5862400906, REGON: 527429407 (hereinafter "we" or the "Controller").
This policy applies to the website available at https://flatmare.pl/.
You can contact us about anything related to personal data:
- by email: [email protected],
- by phone: +48 501 387 667 or +34 659 105 799,
- by post: at the registered office address given above.
2. What data we collect, why and on what legal basis
Contact form and property enquiries
We collect: your name, email address, phone number (if you provide it — the field is optional) and the content of your message. If you write from the page of a specific property, the message also includes its reference number.
Purpose and legal basis:
- replying to your message and presenting our offer — Art. 6(1)(a) GDPR (your consent given in the form) and Art. 6(1)(b) GDPR (steps taken at your request before entering into a contract),
- further correspondence and cooperation in buying a property — Art. 6(1)(b) GDPR,
- establishing, exercising or defending legal claims — Art. 6(1)(f) GDPR (our legitimate interest).
Newsletter
We collect: your email address and the date of subscription and the wording of the consent given.
Purpose and legal basis:
- sending the newsletter with property listings and marketing information — Art. 6(1)(a) GDPR (your consent) in conjunction with the Polish Electronic Communications Law of 12 July 2024, which requires consent for sending marketing information by electronic means,
- demonstrating that consent was given — Art. 6(1)(f) GDPR.
You can unsubscribe from the newsletter at any time — simply reply to any newsletter email or write to [email protected].
Free guide
The free guide is available in the Polish version of the website. We collect: your first and last name, email address, phone number, and the date of the request and the wording of the consent given.
Purpose and legal basis:
- providing the guide and contacting you by phone and email about buying property in Spain — Art. 6(1)(a) GDPR (your consent given in the form) in conjunction with the Polish Electronic Communications Law of 12 July 2024, which requires consent for marketing contact by phone and by electronic means,
- demonstrating that consent was given — Art. 6(1)(f) GDPR.
You can withdraw your consent at any time by writing to [email protected] or by telling us during a conversation.
Website security
When you use the website, we process the IP address of your device and basic technical information about the request (time, page address, browser type). We do this to keep the website running, to protect it against abuse (e.g. by limiting the number of messages sent from one address) and to diagnose faults — Art. 6(1)(f) GDPR (our legitimate interest in ensuring the security of the website).
We do not create visitor profiles, we do not use analytics or advertising tools, and we do not make automated decisions about you.
3. How long we keep your data
- Messages from the form — for as long as needed to handle your enquiry and any further cooperation, and then until the limitation period for any claims expires. If no cooperation follows, we delete them no later than 3 years after the last contact. If you withdraw your consent, we will delete the data sooner, unless we have to keep it on another legal basis.
- Newsletter — until you withdraw your consent. After withdrawal we only keep the information that consent was given and withdrawn, for the limitation period for claims.
- Free guide requests — until you withdraw your consent, and if no cooperation follows, no longer than 3 years after the last contact. After withdrawal we only keep the information that consent was given and withdrawn, for the limitation period for claims.
- IP address in anti-abuse mechanisms — kept in the server's memory for a maximum of around fifteen minutes.
- Technical server logs — for a short period necessary to ensure security and fix faults.
4. Who we share data with
The website runs on a server maintained by us. We do not sell your data or share it with other companies for marketing purposes. Data may only be passed on to:
- Cloudflare, Inc. — the provider through which the website is made available on the internet and protected against attacks; it processes data on our behalf,
- parties involved in the transaction — if you decide to buy a property: the seller or developer, a lawyer, a notary, a translator — always with your knowledge and only to the extent necessary to complete the purchase,
- public authorities, where the obligation to provide data results from the law.
Photos of the properties shown on the website are loaded directly from the servers of the listings database provider. Your browser then connects to those servers and passes on your IP address — as when displaying any image on the internet. The "View on the map" link on a property page opens Google Maps, which operates under Google's own privacy policy.
5. Transfers of data outside the European Economic Area
Cloudflare, Inc. is based in the United States, so technical data (including your IP address) may be processed outside the EEA. Cloudflare participates in the EU-U.S. Data Privacy Framework, on the basis of which the European Commission has found that it ensures an adequate level of protection (Art. 45 GDPR). In addition, standard contractual clauses approved by the European Commission apply (Art. 46 GDPR). You can obtain a copy of these safeguards by contacting us.
6. Your rights
You have the right to:
- access your data and receive a copy of it,
- rectification (correction) of your data,
- erasure of your data,
- restriction of processing,
- data portability — for data processed on the basis of consent or a contract,
- object to processing based on our legitimate interest (Art. 6(1)(f) GDPR),
- withdraw your consent at any time — without affecting the lawfulness of processing carried out before its withdrawal.
To exercise these rights, write to [email protected]. We will reply without undue delay, and no later than within one month.
You also have the right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (UODO) in Poland (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl).
7. Do you have to provide your data?
Providing data is voluntary. However, without your name, email address and message we will not be able to reply to your enquiry, and without an email address we cannot send you the newsletter. In the contact form, the phone number is optional. We provide the guide once you have given your first and last name, email address and phone number.
8. Cookies and browser storage
The website does not use analytics or advertising cookies or any tools that track visitors (e.g. Google Analytics, advertising pixels). Fonts are loaded from our own server, not from external servers.
We only store on your device the information needed for features you knowingly use:
- browser storage (localStorage) — "flatmare:favorites" — the list of properties you have added to your favourites. It stays only on your device; the server does not store this list or link it to you,
- browser storage (localStorage) — "flatmare:cookies" — the information that you have seen the cookie notice, so that it is not shown again,
- "fm_lang" cookie (technical, HttpOnly, valid for one year) — the language version you chose in the language switcher, so that the website opens in that language on your next visit. It is only set after you click the switcher,
- session cookie for the administration panel (technical, HttpOnly) — set only for the Controller's logged-in staff, never for ordinary visitors.
You can delete this information at any time in your browser settings (by clearing the site data for flatmare.pl). This will also clear your list of favourites.
When you open the home page, we choose the language version based on the language set in your browser and, if none of our languages matches, on the country that Cloudflare determines from your IP address. We do not ask for access to your location and we do not store this information. You can always change the language using the switcher in the page header.
9. Changes to this policy
This policy may be updated as the website develops or the law changes. The current version is always available at https://flatmare.pl/en/privacy-policy, and the date of the last change is shown at the top of the page.