Document
Privacy Policy
1. Data controller
The controller of personal data processed on www.xterra.group is Sawicki Real Estate sp. z o.o., with its registered office in Poznań, ul. Heweliusza 5B/22, 60-281 Poznań, Poland, entered in the Register of Entrepreneurs of the National Court Register (KRS) under number 0000631075, tax identification number (NIP) 7792445542 (the “Controller”).
For any matters relating to personal data, please contact us at contact@xterra.group or by post at the Controller’s registered address.
2. What data we process
- Contact form data: full name, company name, email address, phone number, selected subject and message content, as well as the date of submission and the IP address from which the form was sent.
- Data provided in direct email correspondence or in a phone call.
- Technical data recorded automatically in server logs: IP address, date and time of the request, address of the page visited, browser type.
Providing data is voluntary. However, without your full name, email address and message we cannot respond to an enquiry sent through the form.
3. Purposes and legal bases
- Responding to enquiries and conducting correspondence — on the basis of consent (Art. 6(1)(a) GDPR) and the Controller’s legitimate interest in communicating with people who contact it (Art. 6(1)(f) GDPR).
- Taking steps at the request of the data subject prior to entering into a contract — where the enquiry concerns cooperation (Art. 6(1)(b) GDPR).
- Establishing, exercising or defending legal claims (Art. 6(1)(f) GDPR).
- Ensuring the security and proper operation of the website, including protection against misuse — on the basis of the Controller’s legitimate interest (Art. 6(1)(f) GDPR).
You may withdraw your consent at any time by writing to contact@xterra.group. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.
4. Retention period
- Enquiry and correspondence data — until the correspondence ends, and then for no longer than 12 months after the last contact. If an enquiry leads to cooperation, we keep the data for the duration of the cooperation and until the limitation period for claims expires.
- Data processed on the basis of consent — until consent is withdrawn, but no longer than stated above.
- Server logs — for as long as necessary to ensure the security of the website, no longer than 12 months.
5. Recipients of data
Data may be shared with entities that process it on the Controller’s behalf under a data processing agreement (Art. 28 GDPR): the website hosting provider and the email service provider. If a matter concerns the business of another XTERRA® Group company, data may be shared with that company to the extent necessary to respond. Data may also be disclosed to entities authorised under the law.
As a rule, we do not transfer data outside the European Economic Area. If a service provider processes data outside the EEA, this is done on the basis of a European Commission adequacy decision or standard contractual clauses.
6. Your rights
You have the right to:
- access your data and obtain a copy of it,
- rectify your data,
- have your data erased,
- restrict processing,
- data portability for data processed on the basis of consent or a contract,
- object to processing based on the Controller’s legitimate interest,
- withdraw your consent at any time.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland) or with the supervisory authority in the EU Member State of your habitual residence or place of work, if you consider that the processing infringes the GDPR.
7. Automated decision-making
We do not make automated decisions or profile website users.
8. Cookies and third-party tools
The website does not use analytics or marketing cookies and does not use tracking tools. After the form is submitted, the server may set a technical session cookie that prevents the same message from being sent multiple times; it is deleted when the browser is closed.
Fonts and other website resources are loaded from our own server, without external providers. The website contains links to external sites (e.g. LinkedIn, polyverde.pl), which apply their own privacy policies.
9. Changes to this policy
This policy may be updated, in particular if the law or the way the website operates changes. The current version is always available on this page.