+48 665 280 382 Book an appointment

Privacy policy

In force from 3 August 2026. This document sets out how we process the personal data of people who use this website and who contact us about property. It has been drawn up in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and the Polish Personal Data Protection Act of 10 May 2018.

1. Data controller

The controller of your personal data is Karolina Bisek, trading as KAROLINA BISEK KANCELARIA PRAWNO-KSIĘGOWA, ul. Ludwika Solskiego 4/6, 52-416 Wrocław, Poland (referred to below as “the Controller” or “we”).

Contact details of the Controller:

The website is operated under the EliteCore Real Estate brand by ELITECORE Sp. z o.o., ul. Ludwika Solskiego 4/6, 52-416 Wrocław, Poland, company register number KRS 0000804052.

For any matter concerning the processing of personal data or the exercise of your rights under the GDPR, you can write to biuro@bisek-kancelaria.pl or to the postal address given above.

The Controller has not appointed a data protection officer. Data protection duties are carried out directly by the Controller.

2. What data we process and where it comes from

We process only data that has been given to us voluntarily or that is collected automatically when you use the website:

  • Data given in contact forms and enquiries - first and last name, email address, telephone number, company name and tax identification number (in forms for business clients), preferences regarding the property sought and the content of the message.
  • Technical data collected automatically - IP address, browser type and version, operating system, referring page, date and time of the visit and information about how the website is used, obtained through cookies and analytics tools.
  • Data from correspondence - the content of emails and telephone conversations held in connection with handling your enquiry.

We do not process special categories of data as referred to in Article 9 GDPR, nor data relating to criminal convictions and offences.

3. Purposes and legal bases of processing

We process personal data for the following purposes and on the following legal bases:

  • Handling your enquiry and replying to you - under Article 6(1)(b) GDPR (steps taken at the request of the data subject prior to entering into a contract) and Article 6(1)(f) GDPR (the Controller’s legitimate interest in communicating with people interested in our offer).
  • Concluding and performing a brokerage or transaction advisory contract - under Article 6(1)(b) GDPR.
  • Sending commercial information and the newsletter - under Article 6(1)(a) GDPR (consent), to the extent covered by the consent given, in conjunction with Article 10 of the Polish Act on Providing Services by Electronic Means and Article 172 of the Polish Telecommunications Law.
  • Analytics and measuring website traffic - under Article 6(1)(a) GDPR (consent given in the cookie banner). Until consent is given, analytics and marketing tools remain switched off.
  • Establishing, pursuing or defending against claims - under Article 6(1)(f) GDPR (the Controller’s legitimate interest).
  • Complying with legal obligations, in particular accounting and tax obligations - under Article 6(1)(c) GDPR.

4. How long we keep data

  • Data from enquiries that did not lead to cooperation - for 24 months from the last contact, after which it is deleted.
  • Data relating to a concluded contract - for the duration of the contract and, after it ends, for the limitation period for claims under the Polish Civil Code.
  • Data processed on the basis of consent (newsletter, analytics) - until the consent is withdrawn.
  • Accounting records - for 5 years from the end of the calendar year in which the tax obligation arose.
  • A record of the consents given, together with a timestamp and IP address - for as long as is necessary to demonstrate that they were given.

5. Recipients of the data

Personal data may be disclosed only to entities that process it on our instructions and under data processing agreements:

  • hosting and email providers,
  • providers of client contact systems and of analytics and marketing tools,
  • law firms, tax advisers and accountancy offices - to the extent necessary to provide services to us,
  • bodies entitled to obtain the data under the law.

We do not sell personal data and we do not share it with third parties for their own marketing purposes.

6. Transfers of data outside the European Economic Area

We use analytics and marketing tools supplied by providers that may process data outside the European Economic Area, in particular in the United States. Such transfers take place on the basis of a European Commission adequacy decision (the EU-US Data Privacy Framework) or on the basis of standard contractual clauses approved by the European Commission, together with additional technical and organisational safeguards.

7. Your rights as a data subject

In connection with the processing of your data you have the following rights:

  • the right of access to your data and to receive a copy of it (Article 15 GDPR),
  • the right to rectification of inaccurate data or completion of incomplete data (Article 16 GDPR),
  • the right to erasure, the so-called right to be forgotten (Article 17 GDPR),
  • the right to restriction of processing (Article 18 GDPR),
  • the right to data portability for data processed on the basis of consent or a contract (Article 20 GDPR),
  • the right to object to processing based on legitimate interest, including profiling (Article 21 GDPR),
  • the right to withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal (Article 7(3) GDPR).

A request on any of the above may be sent to biuro@bisek-kancelaria.pl. We reply without undue delay and no later than one month from receiving the request.

You also have the right to lodge a complaint with the supervisory authority - the President of the Polish Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland.

8. Providing data is voluntary

Providing personal data is voluntary but necessary in order to handle your enquiry. If you do not provide contact details, we cannot reply. Providing data in order to receive the newsletter is entirely voluntary and does not affect your access to the other services.

9. Automated decision-making and profiling

Personal data is not used for automated decision-making that produces legal effects or similarly significantly affects the data subject within the meaning of Article 22 GDPR. Analytics tools may carry out profiling for statistical and marketing purposes, but only after the relevant consent has been given in the cookie banner.

10. Cookies and tracking technologies

The website uses cookies, that is small text files stored on the user’s device. We use three categories:

  • Necessary - required for the website and the forms to work properly and to remember your consent choice. They do not require consent and cannot be switched off.
  • Analytics - used to measure traffic and how the website is used. They require consent.
  • Marketing - used to tailor the content and advertising shown. They require consent.

On your first visit a banner is shown allowing you to accept all cookies or only the necessary ones. Until consent is given, analytics and marketing tools remain blocked in line with Google Consent Mode v2. You can change your decision at any time by clearing the site data in your browser or by opening the consent settings again.

Cookie settings can also be changed in your browser settings. Restricting cookies may affect how some features of the website work.

11. Data security

We apply technical and organisational measures appropriate to the risk to the rights and freedoms of data subjects, in particular TLS encryption of transmissions, access control to our systems and regular backups. Only authorised persons, bound by confidentiality, have access to the data.

12. Changes to this privacy policy

This policy may be updated, in particular following changes in the law, the introduction of new website features or a change in the tools we use. The current version is always available at this address, with the date it takes effect shown at the top of the document.