The controller of your personal data is Biuro Pośrednictwa i Usług “A & Z GORTADT” Zbigniew Gortadt, based in Mielec, ul. Jagiellończyka 13/16, 39-300 Mielec, hereinafter referred to as BPiU.

You can contact BPiU via e-mail: zg@az.mielec.pl, by phone: +48 17 5853366, or in writing at the address of the administrator's office. BPiU has not appointed a Data Protection Officer.

1. The controller will process your personal data solely for the purpose of performing the contract, in particular brokerage services related to the sale, purchase, lease, rental or exchange of real estate on the secondary or primary market, regulation of the legal status of real estate, and cooperation with real estate agents, financial intermediaries, notary offices, appraisers, lawyers, surveyors and public administration bodies. You have the right to object at any time to the processing of your data for the purposes indicated above. We will stop processing your data for these purposes unless there are compelling legitimate grounds overriding your interests, rights and freedoms, or the data is necessary for establishing, pursuing or defending claims.

2. For possible actions related to preventing financial crimes.

3. For handling complaints.

4. For archival (evidential) purposes constituting our legitimate interest in securing information in the event of a legal need to demonstrate facts, if a real estate brokerage contract has been concluded.

5. For establishing, pursuing or defending against claims, constituting our legitimate interest when a real estate brokerage contract has been concluded.

Your personal data will be stored for the period necessary for the proper performance of the contract or required by law, but no longer than 10 years or until the limitation period for claims expires, whichever period is longer.

BPiU will stop processing data used for direct marketing, including profiling and analytical purposes, if you object or withdraw your consent in this regard.

Your personal data may be transferred to employees and associates of BPiU who have been authorized in writing to process personal data and who are responsible for violations of processing rules, as well as to entities processing personal data on behalf of BPiU, including IT service providers. Such entities process data on the basis of agreements with BPiU and only in accordance with the controller’s instructions.

Your personal data may also be disclosed to public authorities and entities performing public tasks or acting on behalf of public authorities, to the extent and for the purposes resulting from generally applicable law.

Under the GDPR you have the right to:

a) access your personal data and receive a copy of it;
b) rectify (correct) your data;
c) erase data or restrict data processing;
d) object to data processing;
e) data portability – receive your personal data in a structured, commonly used and machine-readable format and transmit it to another controller;
f) lodge a complaint with the supervisory authority;
g) withdraw consent to data processing.

Providing personal data is voluntary where processing is based on consent, but mandatory when processing results from a contract concluded between the parties or from legal provisions.

The controller informs that refusal to provide personal data may hinder or prevent the execution of the contract.