Data processing rules
This document describes data processing on the Destinario website, including data submitted through forms, technical data and information related to website analytics.
Last updated: 17 July 2026
Data controller
The controller of the personal data of website users is Destinario Sp. z o.o., operating under the Destinario brand, tax identification number: 1231607547.
Contacting the controller
For matters concerning personal data processing, you can contact the controller by email at info@destinario.pl or by phone at +48 500 845 135.
Categories of data processed
Through the contact form and the property enquiry form, we may process data provided by the user, in particular a name, email address, phone number, message content and information about the selected property.
When the website is used, basic technical data, information about the source of the visit, website interactions and technical identifiers used for statistics and protection against abuse may also be processed.
Purposes of data processing
Data is processed to handle enquiries and contact, provide replies, present property information and conduct correspondence related to real estate or cooperation.
Data may also be used to secure the website, prevent spam and abuse, maintain basic statistics, measure the effectiveness of traffic sources, including QR codes on business cards and printed materials, and improve the website and property content.
Legal grounds for processing
Processing may be based on Article 6(1)(b) GDPR where it is necessary to take steps at the user’s request before entering into a contract or to handle an enquiry.
For contact handling, website security, prevention of abuse and internal statistics, processing may be based on the controller’s legitimate interest under Article 6(1)(f) GDPR.
Where specific cookies or analytics tools require consent, processing is based on Article 6(1)(a) GDPR. Consent may be withdrawn without affecting the lawfulness of processing carried out before withdrawal.
Recipients of data
Data may be made available to persons authorised to handle enquiries and to entities providing services necessary for the website, in particular hosting, IT, email and analytics providers.
Messages submitted through forms may be stored in the website’s IT systems and sent by email to the persons responsible for handling them, using an email provider including Google Workspace.
Where services used by the website involve transfers outside the European Economic Area, mechanisms required by data protection law are applied.
Data retention period
Data is retained for the period necessary to fulfil the purpose for which it was collected, and then for the period required by law or needed to protect against possible claims.
Statistical and analytics data is retained for the time needed to analyse website performance, measure traffic-source effectiveness and protect against abuse. Older statistical data may be periodically deleted or anonymised.
User rights
The user may request access to their data, rectification, deletion, restriction of processing and data portability where the relevant right applies.
The user may also object to processing based on the controller’s legitimate interest and withdraw consent where processing is based on consent.
The user has the right to lodge a complaint with the President of the Polish Personal Data Protection Office.
Voluntary provision of data
Providing data in a form is voluntary, but without the data needed for contact it may not be possible to reply or handle the enquiry.
Refusing consent to cookies or analytics technologies that are not necessary for the website’s basic operation should not restrict access to its basic functions.
Cookies and similar technologies
The website uses cookies and similar technologies, meaning small pieces of information stored locally in the user’s browser. They support correct website operation, security, forms and remembering selected settings.
Necessary cookies are always active because they provide basic website functions, security, form operation and storage of consent settings. They cannot be disabled in the cookie settings panel.
Analytics cookies are optional and may be used to analyse website performance and how the website is used. Tools in this category that require consent are activated only after consent is given.
Marketing cookies are optional and may be used to measure campaign effectiveness and other marketing activities. The website currently does not activate external marketing tools; this category is prepared for a possible future implementation with the user’s consent.
The user may accept all categories, reject optional categories or customise the selection. Settings can be reopened and changed at any time using the “Cookie settings” link in the website footer.
The selection is stored locally in the browser for no more than 12 months. After the consent mechanism version changes, the website may ask the user to choose again.
Analytics and traffic measurement
The website may use analytics tools such as Google Analytics. Tools requiring user consent are activated only after the relevant consent is given in the cookie settings panel.
Analytics data may be used to analyse traffic, assess interest in properties, measure the effectiveness of traffic sources, including QR codes on business cards and posters, and improve the website and its content.
Google Analytics is activated only after analytics consent is given. The website does not use Google Tag Manager or external marketing tools.
Data security
The controller applies appropriate organisational and technical measures to protect data against loss, unauthorised access, alteration or disclosure, taking into account the nature of the information processed.
Access to data is limited to persons and entities that need it to handle enquiries, maintain the website or carry out the stated purposes.
Changes to the privacy policy
The policy may be updated due to changes in law, the scope of services, website operation or the tools used. The current version of the document is published on this page.
Last updated: 17 July 2026.