1Data Controller
The controller of your personal data is SkanMieszkania sp. z o.o. with its registered office in Warsaw (hereinafter: "Controller").
Contact the Controller regarding personal data matters:
Email: privacy@skanmieszkania.pl
2Data We Collect
In providing the service we process the following data:
- Email address — to deliver the Report and communicate about the order
- Property address or listing link — as the subject of analysis
- Property parameters — price, area, number of rooms, building type, year of construction, condition
- Floor plan (if attached) — image or PDF in PNG/JPG/PDF format
- Technical data — IP address, browser type, visit time (anonymised analytics data)
Payment card data is not stored by SkanMieszkania. All transactions are handled by Stripe Payments Europe, Ltd., which holds PCI DSS Level 1 certification. SkanMieszkania receives only a payment confirmation.
3Purpose and Legal Basis of Processing
We process your data for the following purposes:
- Order fulfilment — based on Art. 6(1)(b) GDPR (performance of a contract). This includes: generating the Report, delivering it by email, and enabling online access for 90 days.
- Issuing a VAT invoice — based on Art. 6(1)(c) GDPR (legal obligation) when you request one.
- Handling complaints — based on Art. 6(1)(b) GDPR (performance of a contract / legitimate interest).
- Technical analysis and fraud prevention — based on Art. 6(1)(f) GDPR (legitimate interest of the Controller).
4Data Retention Periods
- Order data (email, property address, parameters) — 5 years from the order date, due to tax and accounting requirements
- Online Report — 90 days from purchase, then automatically deleted
- Floor plan — deleted after Report generation, no longer than 30 days from order
- Technical data (logs) — up to 12 months
5Data Recipients
Your data may be shared with the following entities:
- Stripe Payments Europe, Ltd. — payment processor (Ireland / EEA)
- Email service provider — for Report delivery and transactional communication
- Hosting provider — Vercel Inc. (USA) — servers may be located outside the EEA
- Google LLC / Gemini API — for generating Report content (USA)
- PostHog Inc. — anonymous product analytics (USA)
- Sentry.io — error monitoring (USA)
Entities outside the European Economic Area (Vercel, Google, PostHog, Sentry) process data on the basis of Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring an adequate level of data protection.
6Your Rights
Under the GDPR you have the following rights:
Right of access
You may request information about what data we hold about you.
Right to rectification
You may correct inaccurate or incomplete data.
Right to erasure
You may request deletion of your data, unless legal obligations prevent this (e.g. obligation to retain invoices).
Right to portability
You may receive your data in a structured, machine-readable format.
Right to restriction
You may request restriction of processing in certain cases.
Right to object
You may object to processing based on the Controller's legitimate interest.
To exercise your rights, write to privacy@skanmieszkania.pl. We will respond within 30 days.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO): uodo.gov.pl, ul. Stawki 2, 00-193 Warsaw.
7Cookies
The service uses only technical cookies necessary for the website to function (e.g. form session, CSRF protection). We do not use advertising or tracking cookies.
Anonymous analytics data is collected via PostHog in cookieless mode. We do not identify you based on this data.
8Changes to the Privacy Policy
The Controller reserves the right to update this Privacy Policy. We will notify you of significant changes by email (if we have your address) or via a notice on the website — at least 14 days before changes take effect.
Date of last update: 1 May 2025.
All previous versions of the Privacy Policy are available on request — write to privacy@skanmieszkania.pl.