- Home
- Privacy Policy
Privacy Policy
How we process your data — your GDPR rights, cookies, and how to reach us.
Effective: July 22, 2026
Data controller:
Technova Solutions sp. z o.o.NIP (Tax ID): 5214101592
ul. Puławska 77/U5, 02-595 Warszawa, Poland
Email: [email protected]
This Privacy Policy describes how Technova Solutions sp. z o.o. (referred to as "we," "us," or the "Controller") processes personal data of users of polandhousing.com and the Poland Housing Home mobile app (the "Home app"). We process data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Polish law.
2. Who This Policy Covers
This Policy covers four groups of people:
- Site visitors — people browsing polandhousing.com without creating an account.
- People interested in properties (leads) — people who contact a real-estate agent via a form, WhatsApp, SMS, email, Messenger, Instagram, or phone.
- Tenants — people who have completed verification and use the Home app to pay rent and communicate with their landlord.
- Landlords — property owners using the Home app.
3. Site Visitors — Analytics Data and Cookies
What we collect. We use Google Analytics, which collects: IP address (anonymized), browser and device information, pages viewed, time spent on the site, and country of origin.
Purpose and legal basis. Purpose: traffic analysis and site improvement. Legal basis: Art. 6(1)(f) GDPR (legitimate interest) — subject to your consent to analytics cookies.
Cookies. We use cookies in two categories:
- Essential — required for the site to function; no consent required.
- Analytics — Google Analytics (_ga, _gid, _gat). These require consent, which you may give or withdraw at any time via the cookie banner or your browser settings.
Analytics data is transferred to Google LLC (USA) on the basis of standard contractual clauses. Google's privacy policy: policies.google.com/privacy.
Retention period. Analytics data: 26 months by default, per Google Analytics' default settings.
4. Newsletter
What we collect. The email address you provide when subscribing to our newsletter.
Purpose and legal basis. Purpose: sending real-estate market updates. Legal basis: Art. 6(1)(a) GDPR (consent). You may withdraw consent at any time via the unsubscribe link in any message, or by writing to us at [email protected].
Retention period. Until you withdraw consent or unsubscribe from the newsletter.
5. People Interested in Properties (Leads)
This is our broadest category of data processing — it covers anyone who has contacted a real-estate agent through our platform.
What we collect. Contact details: name, email address, phone number.
Correspondence content: messages sent via the contact form, email, SMS, WhatsApp, Facebook Messenger, Instagram DM.
Phone call data: call recording, automatically generated transcription (provider: Deepgram), call summary and recommended next steps generated by AI (provider: Google Gemini). The transcript and summary are visible to the real-estate agent in the CRM system.
Qualification data: as part of the qualification process, we may ask you for: your approximate budget, planned move-in date, financing method (cash/mortgage), household composition, pet preferences, and parking needs.
Meta Lead Ads data: if you fill out a lead form on Facebook or Instagram, your data (name, email, phone) is sent to us by Meta Platforms Ireland Ltd. in accordance with its privacy policy.
Purpose and legal basis. We process your data to connect you with a real-estate agent and handle your inquiry. Legal basis: Art. 6(1)(b) GDPR (steps taken toward entering into a contract). Call transcripts and analysis: Art. 6(1)(f) GDPR (legitimate interest in documenting agreements and improving service quality). We disclose that calls are being recorded at the start of every call.
Recipients. Your data is shared with the real-estate agent or agency you contact through the platform. The agent operates independently and is a separate data controller for any further contact with you. Data may be shared with communication service providers (Telnyx, Twilio, Meta Platforms, Postmark) only to the extent necessary to deliver messages.
Retention period. Data is retained for 12 months from the last contact, or until the property-related process concludes.
6. Tenant Identity Verification (KYC)
Before signing a lease, we ask prospective tenants to complete an identity verification process.
What we collect:
- A scan or photo of an identity document (front and back)
- Proof-of-income documents (e.g., an earnings certificate, bank statement)
- GDPR consent records (date and time of consent, IP address, browser data)
Purpose and legal basis. Purpose: verifying identity and financial capacity before entering into a lease. Legal basis: Art. 6(1)(b) GDPR (necessary to enter into a contract) and Art. 6(1)(a) GDPR (consent to process special category data, where applicable).
Recipients. Verification documents are shared only with the real-estate agent or landlord handling that transaction.
Retention period. Verification documents are retained for the duration of the lease and for 3 years afterward (based on statute-of-limitations rules).
7. Tenants and Landlords — Home App
After signing a lease, both parties get access to the Home app.
What we collect:
Identification data: first name, last name, email address.
Payment data: the landlord's bank account number (IBAN), collected solely for rent payouts. Online payments are processed by the payment operator PayU SA (Poland) — we do not store payment card numbers or payment data.
Payment history: rent amount, due dates, payment dates, and the status of each payment (paid, overdue, released).
Messages: correspondence between tenant and landlord within the Home app, including attached files and photos.
Documents: the signed lease agreement in PDF format and other documents shared by either party.
Push tokens: device identifiers used to send push notifications (e.g., reminders about an upcoming due date).
Purpose and legal basis. Purpose: performing the lease — handling payments, communication between parties, and record-keeping. Legal basis: Art. 6(1)(b) GDPR (performance of a contract).
Recipients. Payment-related data is shared with PayU SA (ul. Grunwaldzka 182, 60-166 Poznań, Poland) as the payment operator. PayU is a separate data controller for payment transactions. Push notifications are sent via the Expo platform (Expo Inc., USA) on the basis of standard contractual clauses.
Retention period. Home app data is retained for the duration of the lease and for 5 years afterward (based on tax and accounting requirements).
8. Transfers of Data Outside the European Economic Area
Some data may be transferred outside the EEA to the following providers:
| Provider | Country | Transfer basis |
|---|---|---|
| Google LLC (Analytics, Gemini) | USA | Standard contractual clauses |
| Meta Platforms Ireland Ltd. | EU/USA | Standard contractual clauses |
| Telnyx LLC | USA | Standard contractual clauses |
| Twilio Inc. | USA | Standard contractual clauses |
| Deepgram Inc. | USA | Standard contractual clauses |
| Expo Inc. | USA | Standard contractual clauses |
9. Your Rights
Under GDPR, you have the following rights:
- Right of access — you can request a copy of your personal data.
- Right to rectification — you can ask us to correct inaccurate or complete incomplete data.
- Right to erasure — you can request deletion of your data where there is no legal basis for us to continue processing it.
- Right to restriction of processing — you can request that we pause processing your data in certain situations.
- Right to data portability — you can receive your data in a machine-readable format.
- Right to object — you can object to processing based on legitimate interest.
- Right to withdraw consent — where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of processing before the withdrawal.
- Right to lodge a complaint — you can file a complaint with the President of the Polish Data Protection Authority (UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.
To exercise any of these rights, contact us: Email: [email protected]. Address: Technova Solutions sp. z o.o., ul. Puławska 77/U5, 02-595 Warszawa, Poland.
We will respond to your request without undue delay, and no later than one month after receiving it.
10. Data Security
We apply appropriate technical and organizational measures to protect your data against unauthorized access, loss, or destruction. Verification documents and payment data are encrypted and stored with restricted access.
11. Changes to This Privacy Policy
We will notify you of any material changes by updating the date at the top of this document. For changes affecting the Home app, we will also notify users via a push notification or email.
Technova Solutions sp. z o.o., ul. Puławska 77/U5, 02-595 Warszawa, Poland, NIP (Tax ID): 5214101592