Home › Privacy policy

Privacy policy

This policy describes what happens to the data you leave on buyin.ge and rentin.ge. Both sites are run by the same controller and the same rules apply to them. We wrote it so that it can be read in five minutes — and every sentence matches what the site really does.

1. Data controller

The data controller, that is the entity running buyin.ge and rentin.ge, is Silvanos Sp. z o.o., ul. Kazimierza Wielkiego 7/5, 65-047 Zielona Góra, Poland, KRS 0000894596, NIP 9731077051, REGON 388648447 (the Controller). For matters concerning personal data, please write to info@silvanos.ai.

2. What data we collect and where from

Only what you enter yourself. We do not collect data about you from other sources.

  • Enquiry form (on a listing, on the “Contact” and “For owners” pages): first and last name, e-mail address, phone number (if you give it), the text of the message and the listing number or the name of the page the enquiry was sent from. Together with the enquiry we save the date and time, the IP address and the browser name — to protect the form against abuse and to know what we are replying to.
  • “Ask the assistant” window: the text you type is used only to pick listings from the list on this site. We do not save it and do not link it to you.
  • Phone and messengers (e.g. WhatsApp): if you contact us this way, we process the number and the content of the conversation for the same purpose as a form enquiry. The rules of those apps are the rules of their providers.

Listings on the site contain no first or last names, phone numbers or e-mail addresses of sellers or landlords — the only contact on the site is ours.

3. Why, and on what legal basis

  • Replying to your enquiry about a flat, about rental terms or about cooperation in letting your flat, and further correspondence on that matter — art. 6(1)(b) GDPR (steps at your request before entering into a contract) — and when you write on behalf of a company: art. 6(1)(f) GDPR (our legitimate interest: handling the enquiry).
  • Security of the form and the site (protection against bots and abuse; IP address, browser) — art. 6(1)(f) GDPR.
  • Establishing, pursuing or defending claims — art. 6(1)(f) GDPR.

We do not send newsletters or commercial offers without separate consent. We reply to what you asked about.

4. Who receives the data

  • The people who reply to enquiries — persons authorised by the Controller to handle buyin.ge and rentin.ge.
  • The server provider on whose server the site runs and where enquiries are saved: OVH SAS (France), data centre in Warsaw — Poland.
  • Map. When you open the map on a listing page or on the list, your browser downloads the map library from unpkg.com and the map tiles from the servers of the OpenStreetMap Foundation. These entities then receive your IP address and browser data, as when opening any page on the internet. Until you click “Map”, nothing is downloaded.
  • Notifications of a new enquiry are not sent anywhere outside the site: we read enquiries directly on the server named above.
  • Entities entitled under the law, where the law requires it.

We do not sell the data and do not pass it to anyone for marketing purposes. We pass your first name and dates to the seller or the owner of the flat only when you decide on a viewing or a reservation — and we tell you beforehand.

5. Transfer of data outside the European Economic Area

The Controller is established in Poland, that is in the European Economic Area. We do not transfer data outside the EEA; the exception is the map from point 4, which your browser downloads after you click.

6. How long we keep the data

  • Enquiries and correspondence: 12 months from the last contact, if no cooperation followed; when a transaction takes place — for the duration of the cooperation and the limitation period for claims.
  • IP address and browser data saved with the enquiry: as long as the enquiry.
  • Accounting documents, if any arise: for the period required by law.

7. Cookies and browser storage

The site does not use cookies and has no tracking or advertising tools. In your browser's storage we save two things: that the welcome animation has already been shown (until the tab is closed) and which list view — grid or map — you chose last. Neither identifies a person, and neither leaves your browser.

8. Your rights

You have the right to access your data, to rectify it, to erase it, to restrict its processing, to data portability and to object to processing based on our legitimate interest. A message to the address in point 1 is enough. You may also lodge a complaint with the supervisory authority competent for the Controller — the President of the Personal Data Protection Office in Poland (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl) — and, if you live in another country of the European Economic Area, also with the supervisory authority in that country.

9. Voluntary provision

Providing data is voluntary. Without a first name and an e-mail address we cannot reply to an enquiry from the form; the phone number is optional.

10. Automated decisions

We do not make decisions about you based solely on automated processing and we do not profile. The “Ask the assistant” window matches listings to the conditions you type (number of rooms, budget, city) and remembers nothing about you.

11. Changes

We update the policy when the site gains new features. The current version is always at /prywatnosc on both sites. In force from: [DO UZUPEŁNIENIA: data publikacji].