Privacy Policy

This is an English translation provided for convenience. In case of any discrepancy, the Polish version prevails.

This document explains what personal data we process in connection with your use of the joliemaison.pl website, for what purposes and on what legal basis, to whom we disclose it, how long we keep it and what rights you have. We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).

1. Data controller

The controller of your personal data is Jolie Maison sp. z o.o., ul. Rozbrat 20, 00-447 Warszawa, KRS 0001151055, NIP 7011242710 (hereinafter: “Jolie Maison”, “we”).

For matters relating to personal data, you can contact us by e-mail: office@joliemaison.pl, by phone: +48 503 125 564 or by post at the address above.

2. What data we process and for what purposes

Website forms

The website provides the following forms: a contact form, a property submission form, a viewing request form, a message-to-agent form and a recruitment form. Depending on the form, we process:

• your first name and surname and your phone number or e-mail address,
• the content of your message and the type of enquiry (purchase, sale, rental),
• information about the property you are submitting: its address or district, type, floor area and asking price,
• the number of the listing to which a viewing request relates,
• in the recruitment form, also a link to your CV or LinkedIn profile and information about yourself.

Submissions from the forms go to the system we use to handle client enquiries (Asari CRM) and are assigned to the agent handling the property or to the person responsible for general enquiries and recruitment. The website does not send them by e-mail and does not store them in its own database.

We process data from the forms in order to:

• respond to your message and contact you about the matter it concerns - on the basis of the consent you give in the form (Art. 6(1)(a) GDPR), and where your enquiry concerns entering into a contract, e.g. for brokerage in the sale, purchase or rental of a property - also in order to take steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR),
• conduct recruitment - on the basis of your consent (Art. 6(1)(a) GDPR) and in order to take steps prior to entering into a contract (Art. 6(1)(b) GDPR),
• establish, exercise or defend legal claims - on the basis of our legitimate interest (Art. 6(1)(f) GDPR).

Providing your data is voluntary, but without your first name and surname and your phone number or e-mail address we will not be able to reply. You may withdraw your consent at any time by writing to office@joliemaison.pl. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

Contact by e-mail and phone

If you write to us or call us directly, we process the data you provide to us (e.g. first name and surname, e-mail address, phone number, content of correspondence) in order to handle your matter - in connection with entering into or performing a contract (Art. 6(1)(b) GDPR) or on the basis of our legitimate interest in responding to messages sent to us (Art. 6(1)(f) GDPR).

Information on the processing of data in connection with entering into and performing a brokerage agreement, including as part of our obligations under anti-money laundering and counter-terrorist financing legislation, is provided when the agreement is concluded.

Client reviews

The website displays the rating and reviews from our Google Business Profile. We copy the company rating and selected reviews from our Google Business Profile manually - the website does not connect to Google for this. We publish: the author’s first name and surname initial, the rating, the content and date of the review, with a link to the original on Google.

We do this on the basis of our legitimate interest in presenting clients’ experiences of working with us (Art. 6(1)(f) GDPR). If it is your review and you do not want it to be visible on our website, write to us - we will remove it.

Technical data

Each time you visit the website, the server automatically processes data sent by your browser: your IP address, the date and time of the request, the address of the page visited and information about your browser and operating system. This data is necessary to display the website, keep it secure and detect abuse - this is our legitimate interest (Art. 6(1)(f) GDPR).

To protect the forms against spam, the server keeps the following in its memory for a short time: the IP address of the person submitting a form (10 minutes), the e-mail address or phone number given in the form (1 hour) and a hash of the message content (30 minutes). This allows us to limit the number of submissions and skip repeated messages. The form also uses a single-use signed code (token) that contains no personal data.

Visitor statistics and search visibility

With your consent, we use Google Analytics 4 (provider: Google Ireland Limited) to obtain aggregate visitor statistics - for example, which pages and properties are viewed most often and where visitors come from. The tool stores cookies in your browser (“_ga” and “_ga_<identifier>”, valid for up to 2 years) and sends Google information about your use of the website, including your IP address, which Google Analytics 4 does not store or share with us. We keep data in Google Analytics for up to 14 months. The legal basis is your consent (Art. 6(1)(a) GDPR and the rules on storing information on a user’s device). Without your consent, the Google Analytics script is not loaded at all.

We also use Google Search Console to check how the website appears in Google search results (for example, for which queries and how often). These are aggregate statistics from the search engine - the tool does not run on our website, does not store cookies and does not give us data that would identify the people visiting the website.

3. Cookies

The joliemaison.pl website does not need cookies to work and does not store any itself. Cookies of the analytics tool (Google Analytics) are stored only with your consent. We do not use advertising pixels or profiling for marketing purposes.

You give or refuse consent to analytics cookies in the window shown on your first visit - both choices are equally easy. You can change or withdraw it at any time using the “Cookie settings” link in the website footer. Withdrawing consent does not affect the lawfulness of processing before its withdrawal. We remember your choice in your browser’s storage (localStorage) so that we do not ask you on every visit.

Cookies may be stored by a third-party provider whose service is embedded on the website. On the Contact page, we display a Google Maps map showing our office location - it loads together with the page, so Google receives your device’s IP address and may store cookies on it and read information stored on it. On listing pages, the map loads only after you click the “Show map” button - until then, no connection is made to Google’s servers. The map of properties (on the home page and in the property search) displays OpenStreetMap map tiles - they load when you scroll to the map, at which point OpenStreetMap’s servers receive your device’s IP address; they do not store cookies.

You can delete or block cookies at any time in your browser settings.

4. Content loaded from third-party servers

Your browser retrieves some elements of the website directly from the servers of third-party providers. The provider then receives your IP address and information about your browser - without this, a connection to the server is not technically possible. This applies to:

• the Google Maps map - immediately on the Contact page, and on listing pages after you click “Show map” (provider: Google Ireland Limited),
• map tiles for the map of properties - OpenStreetMap (provider: OpenStreetMap Foundation).

The legal basis is our legitimate interest in presenting content on the website (Art. 6(1)(f) GDPR). These providers process data as separate controllers, in accordance with the rules described in their privacy policies - in the case of Google: policies.google.com/privacy.

On the home page, we show our videos (reels) from Instagram - the files load from our own server only when you click the play button and do not connect to Instagram. The references to our Instagram, Facebook and LinkedIn profiles and to our reels on Instagram are ordinary links - the website does not embed plug-ins from these services. Once you go to a service, its own rules apply.

5. Recipients of data

Your data may be received by:

• persons who work with us in serving clients, including estate agents,
• the website hosting provider - Vercel Inc.,
• the provider of the listing and client management system (CRM) - Asari CRM, which receives submissions from the forms,
• the analytics provider - Google Ireland Limited (Google Analytics), if you consent to analytics cookies,
• providers of e-mail and IT services,
• entities providing us with legal, accounting and advisory services,
• public authorities - where an obligation to disclose data arises from the law.

Service providers process data on our behalf, under data processing agreements, and may not use it for their own purposes.

6. Transfers of data outside the European Economic Area

Vercel Inc. is based in the United States, and Google may also process data outside the European Economic Area. In such cases, data is transferred on the basis of a European Commission adequacy decision (EU-U.S. Data Privacy Framework) - in the case of entities participating in that framework - or standard contractual clauses approved by the European Commission (Art. 46(2)(c) GDPR). You can obtain information about the safeguards applied by contacting us.

7. How long we keep data

• data from forms and correspondence - for as long as necessary to handle the matter, and if we enter into a contract - for the duration of its performance; thereafter until the limitation period for any claims expires,
• data processed on the basis of consent - until consent is withdrawn, but no longer than required to handle the matter,
• data from the recruitment form, including CV links - until the end of the recruitment process, but no longer than 6 months from the submission of the application,
• reviews published on agent profiles - until the review is removed from Google, an objection is raised or our cooperation with the agent ends,
• data kept in the server’s memory to protect the forms - IP address 10 minutes, e-mail address or phone number 1 hour, message hash 30 minutes,
• data in Google Analytics - 14 months; Google Analytics cookies - up to 2 years or until you delete them or withdraw consent,
• technical data in server logs - for the period for which the hosting provider retains logs, but no longer than 30 days.

8. Your rights

In connection with the processing of your data, you have the right to:

• access your data and obtain a copy of it,
• rectification of your data,
• erasure of your data,
• restriction of processing,
• data portability - with respect to data processed on the basis of consent or a contract,
• object to processing based on our legitimate interest,
• withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.

To exercise these rights, write to office@joliemaison.pl. We will respond without undue delay and in any event within one month.

If you believe that we are processing your data unlawfully, you may lodge a complaint with the President of the Personal Data Protection Office (Prezes UODO) (ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl).

9. Automated decision-making and profiling

We do not make automated decisions about you and we do not profile you. The form safeguards (a hidden field, a single-use form token, a minimum completion time, submission limits and a check of the content for advertising) serve solely to reject or flag messages sent automatically by bots.

10. Security

The website runs over an encrypted HTTPS connection. Only those persons who need the data from the forms to handle your matter have access to it.

11. Changes to this Privacy Policy

We update this Privacy Policy when the way data is processed on the website changes. The current version is always available on this page, and the date of the last change is shown at the beginning of the document.