Privacy policy

Information about the Controllers

The Urban Home website's personal data controller is G City Europe Resi Limited, with its registered office in Limassol (hereinafter “GCE Resi”). You can contact GCE Resi on the following address: Spyrou Kyporianou 79, 3076 Limassol, Cyprs or by writing to: lmusova@g-cityeu.com

The Controller has appointed the Data Protection Officer, who can be contacted
by e-mail at dpo@g-cityeu.com

If marketing consent is given, the personal data controller is G City Poland sp. z o.o., with its registered office in Warsaw. You can contact the controller by writing to the following address: 04-175 Warszawa, ul. Ostrobramska 75C or e-mail: recepcja-pl@g-cityeu.com (hereinafter “G City”).

The Controller has appointed the Data Protection Officer, who can be contacted
by e-mail at dpo@g-cityeu.com

In case the offer form is completed, the personal data controller will be the special purpose vehicle identified in the clause under the offer form (hereinafter referred to as the “SPV”).

The Controller has appointed the Data Protection Officer, who can be contacted
by e-mail at dpo@g-cityeu.com

Website User

If you are a website user and you do not provide your personal data, we will probably not process your personal data.

However, if you are a website user and consent to marketing and analytics cookies, your personal data will be processed for the purpose of:
• analytics to track traffic on the site and use of various functions, and to analyse how you came to Urban Home and how efficient is our online advertising, which constitutes a legitimate interest of the controller (Article 6(1)(f) of the GDPR);
• behavioural marketing, which involves serving targeted adverts and tailoring them to specific persons, which constitutes a legitimate interest of the controller (Article 6(1)(f) of the GDPR).

In this case, the main controller is GCE Resi, but this function is also performed by the other Joint Controllers.

Your personal data and consent are given freely by you.

Your personal data will be processed until you object to the processing or withdraw your consent given based on separate legal regulations.

Your personal data may be accessed by our IT tool and system providers and consulting companies, specifically cookie providers, and consulting and marketing companies as well as G City Europe group companies.

Person completing the offer form

If you are a potential customer and complete the offer form, your personal data controller will be the SPV whose offer you are requesting, and your personal data will be processed for the purpose of:
• sending the offer, which is necessary to take steps at your request prior to entering into a contract in the form of the request for an offer, including the sending of the offer and the negotiation of the offer (Article 6(1)(b) of the GDPR);
• solvency analysis, which constitutes a legitimate interest of the controller (Article 6(1)(f) of the GDPR);
• conclusion and performance of a contract after it has been entered into, which is necessary for its performance (Article 6(1)(b) of the GDPR);
• accounting, since this is necessary for compliance with a legal obligation (Article 6(1)(c) of the GDPR) arising in particular from the Tax Code Act of 29 August 1997, the Accounting Act of 29 September 1994, and the Value Added Tax Act of 11 March 2004;
• establishment, exercise or defense of claims, if necessary, which constitutes a legitimate interest of the controller (Article 6(1)(f) of the GDPR);

Your personal data are given freely by you. If you do not provide your personal data, it may not be possible to send you an offer or enter into a contract with you.

Personal data will be processed until the offer process or the negotiation is completed. If a contract is entered into, such data will be processed until the contract is terminated. The data for accounting purposes will be kept until the limitation period under the tax rules expires. All personal data may be retained for the limitation period for civil-law claims.

Your personal data may be accessed by our IT tool and system providers and consulting companies, our agents and G City Europe group companies.

Person giving consent to marketing information

If you have completed the newsletter form or given consent to marketing information, your personal data controller will be G City, and your personal data will be processed for the purpose of:
• direct marketing, which involves sending of SMS/MMS messages, emails or making telephone in order to advertise products, services, activities, etc. of G City Europe  group companies, which constitutes a legitimate interest of the controller (Article 6(1)(f) of the GDPR) in relation to the consent given based on other legal regulations;
• establishment, exercise or defense of claims, if necessary, which constitutes a legitimate interest of the controller (Article 6(1)(f) of the GDPR);

Your personal data are given freely by you.

Your personal data will be processed until you object to the processing or withdraw your consent given based on separate legal regulations. All personal data may be retained for the limitation period for civil-law claims.

Your personal data may be accessed by our IT tool and system providers and consulting companies, and G City Europe group companies.

Person contacting the controller

If you contact any of the controllers, regardless of the means of communication (contact form, mail, telephone, etc.), your personal data will be processed in order to register and respond to the issue you have contacted them about, which is a legitimate interest of the controller (Article 6(1)(f) of the GDPR).

Your personal data are given freely by you.

Personal data will be processed until the procedure relating to the request received is completed or an objection is lodged.

Your personal data may be accessed by our IT tool and system providers and consulting companies, and G City Europe  group companies.

Person reporting a claim or against whom the administrator may have a claim

If you have any claim (regardless of its grounds, i.e., based on civil law, consumer law, etc.) against any of the controllers, or if any controller has a claim against you, your personal data will be processed for the purpose of establishment, exercise or defense of such claim, which constitutes a legitimate interest of the controller (Article 6(1)(f) of the GDPR).

Your personal data are given freely by you. If personal data that are necessary to pursue a claim (e.g. address, PESEL number, IP address, etc.) is obtained from a third-party source, such a source will be authorities, courts, debt collection or investigation firms and other open sources of information.

Personal data will be processed until the binding and final completion of such proceedings, and the successful enforcement of or defense against the claim.

Your personal data may be accessed by our IT tool and system providers and consulting companies, including legal or debt collection firms, detectives and G City Europe group companies.

Person making a request under the GDPR

If you make a request based on the regulations of the GDPR with respect to any of the controllers, your personal data will be processed for the purpose of recording and analysing the request and responding to it (Article 6(1)(c) GDPR), since this is necessary for the Controller to discharge its compliance obligation.

Your personal data are given freely by you. Failure to provide such data may result in a failure to respond due to no unique identification.

Your personal data will be processed for the limitation period for claims.

Your personal data may be accessed by our IT tool and system providers and consulting companies, including law firms and G City Europe group companies.

Joint Control of Personal Data (partners)

For analytics and marketing tools such as cookies, the joint controllers of personal data are G City Europe Resi Limited, G City Poland sp. z o.o., SPVs and analytics tools providers.

The analytics tools providers are: Google, Facebook, Microsoft and HubSpot.

Data transfer to a third country

When using analytics and marketing tools such as cookies, data may be transferred to a third country, also outside the European Economic Area.

Data subject rights

With regard to the processing of personal data, each and every person whose data data are processed has the right to request access to and rectification or erasure of personal data or restriction of processing of such personal data or to object to processing, and the right to data portability.

You may also withdraw consent to the processing of your personal data at any time if you have given such consent. Consent withdrawal is not retroactive.

You have the right to file a complaint with the data protection authority, namely the President of the Personal Data Protection Office.

Profiling

None of the controllers engages in automated decision-making. The use of analytics and marketing cookies may involve profiling that optimises the offer and makes it possible to reach with advertising other websites in the advertising space. These cookies are also used to target and adapt advertising campaigns to a specific person better. Cookies can also help to evaluate advertising effectiveness and the various ways in which users can access Urban Home, and also support tracking your website traffic and the use of various features. They improve the structure, form and content of the website. For more information about cookies, see our Cookies Policy.

G City can send personalised offers that are automatically created by analysing the personal data you provided in combination with information about previously viewed offers and adverts on Urban Home. When sending our offers, we use these data in conjunction with our segmentation (profiling) models.