Privacy policy

The essentials in brief

• PRO‑INVEST HOUSE sp. z o.o. from Wrocław is responsible for your data — the company that owns the ROOMPLACE brand and the roomplace.pl website. Matters concerning your data (access, deletion, objection): e-mail nila.sepita.proinvest@gmail.com. For other matters: phone +48 784 450 193, WhatsApp wa.me/48784450193, Telegram @roomplace_pl.
• We use the name and phone number from the form to call you back and help you find a room.
• Messages you write to us in the connected messengers are analysed by artificial intelligence for our enquiry statistics. In the statistics system we keep the full text for 90 days. The labels do not affect whether, or on what terms, you can live with us.
• We plan to send signals to advertising platforms (this function is not working yet). Once we launch it, if you write to us after clicking our ad on Meta, or if according to our CRM system you came to us from TikTok, we will tell that platform whether you asked about a room and whether you moved in with us — without the text of your messages and without your name. You can object to this.
• Google Analytics statistics and TikTok ad measurement on the website switch on only if you click OK in the banner.
• You have the right to access, correct and delete your data and to complain to the President of UODO. How to delete your data is described on the Data deletion page.

Who is responsible for your data

The controller of your personal data is PRO‑INVEST HOUSE SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, ul. Stanisława Kunickiego 7/7, 54-616 Wrocław, NIP 8982237675, REGON 368486836, KRS 0000698516. This company owns the ROOMPLACE brand and the roomplace.pl website — rooms and places in shared rooms for rent in Wrocław. In this policy “we” and “ROOMPLACE” mean this company. The controller is the one who decides why and how data are used.

This policy describes what happens to data on the roomplace.pl website, when you call us or write to us in messengers, when you live with us, and when we check whether our ads bring people who are looking for a room.

We rely above all on the GDPR — the General Data Protection Regulation of the European Union 2016/679.

We have not appointed a data protection officer — please contact us directly with all matters concerning your data.

For matters concerning personal data — access, rectification, deletion, objection and your other rights — write us an e-mail. For other matters you can also call us or write in a messenger:

• e-mail: nila.sepita.proinvest@gmail.com
• phone: +48 784 450 193
• WhatsApp: wa.me/48784450193
• Telegram: @roomplace_pl

Contact form

The pages of roomplace.pl have a form where you can leave your name and phone number so that we can call you back.

When you send the form, we receive your name, your phone number, the language of the page (Ukrainian, Russian, Polish or English) and the address of the page it was sent from. The server adds a random number to the request so that it is easy to find. We do not pass on your IP address or browser data.

• Purpose: to call you back, answer your questions, help you choose a room and agree on the details of your stay.
• Legal basis: Art. 6(1)(b) GDPR — steps you ask for yourself before you decide to live with us.
• Who receives the data: our server passes the request to the CRM system (customer enquiry system) of our provider. This provider may process data outside the European Economic Area (EEA), including in the USA.
• How long: as long as needed to handle your enquiry and any stay with us; then we delete the data.
• Providing the data is voluntary, but without your name and phone number we cannot call you back.

Phone and messages in messengers

When you call us or write an SMS, on Messenger (to our Facebook pages), in Instagram Direct, on WhatsApp, on Telegram, on Viber or in direct messages on TikTok, we receive your phone number or your account identifier in the messenger and whatever you tell us.

Clicking the phone number or a WhatsApp or Telegram link takes you away from the website. The call is handled by your operator, and the messages by WhatsApp or Telegram, each under its own rules. The link contains none of your data; the messenger can at most see that you come from roomplace.pl.

• Purpose: to answer your questions, help you choose a room, agree on the details of your stay and, once you live with us, handle your stay.
• Legal basis: Art. 6(1)(b) GDPR — steps you ask for yourself before you decide to live with us, and then the performance of the contract for your stay.
• Who receives the data: we hold conversations through the CRM system (customer enquiry system) of our provider, which, as our processor, receives the text of messages from the connected messengers; our staff also record in it your phone number, how you came to us and the stage of handling. This provider may process data outside the European Economic Area (EEA), including in the USA.
• How long: the conversation stays in the messenger as long as needed to handle your enquiry and any stay with us. How long we keep copies of messages in our enquiry system is described in the next section.

Enquiry statistics: how we analyse messages

Messages from the connected channels go automatically to our internal enquiry system. We connect the channels one by one: Messenger of our Facebook pages, Instagram Direct, WhatsApp Business, Telegram (the account @roomplace_pl) and — once approved — direct messages on TikTok, which we download through TikTok’s official data portability interface (terms of use of the app). The system does not automatically analyse phone calls, SMS messages or messages on Viber.

The system stores the text of the message, the time it was sent and data about the ad or post from which you started the conversation, if the messenger passes them on. We convert voice messages from Telegram and WhatsApp into text in our system and delete the recording right after recognition. We do not download photos, documents or other attachments. We do not take the name from your profile either — if you give your name in a message, it stays only in its text.

The system immediately turns your account identifier assigned by the messenger and your phone number (for example, from WhatsApp) into a code (a pseudonym) and stores only the code. The code is created with a secret key, and your name or number cannot be read from it. Exception: the identifier of your account in the conversation with us on Messenger or Instagram, assigned by Meta (PSID or IGSID), is kept encrypted for at most 90 days and only so that a member of staff can reply to you from our system and so that we can send a signal to Meta (described below); after an objection or a request for deletion we erase it at once. Thanks to the code, the system recognises whether you have written to us before, also in another channel; for this it compares the code with the codes of phone numbers from our CRM system, and it does not store the numbers themselves.

An artificial intelligence service reads the message in the original and gives it labels — based only on what you wrote yourself about housing: whether it concerns renting a room or a place (and if not, why), which city and district, which type of housing, from when and for how long, how many people or places, for whom (for you, your family or a company’s employees), what budget you gave (if you gave one), which language you write in, whether you are writing to us for the first time (or whether it may be a repeat), how you heard about us and where you are writing to us, whether you already live with us, and your presumed gender. It determines the gender only from the text — from how you write about yourself (for example, gendered word forms in Ukrainian, Russian or Polish); when that is not possible, the label is “unknown”.

The labels, including gender, are used only for general statistics: which ads and channels bring people looking for a room in Wrocław and whom to show ads to. They do not affect whether, or on what terms, you can live with us, or how quickly we reply. Our staff always answer you. The system does not send messages by itself; a member of staff can reply to you on Messenger or Instagram from our system, just as from the messenger — only with their own click and no later than 24 hours after your message. The system labels conversations with our residents (payments, repairs, extending a stay) as “resident” and does not count them in the advertising statistics.

We do not create labels about health, religion, origin, orientation or other special categories of data. If you write about such things yourself, the information stays only in the text of the message until it is deleted after 90 days.

Artificial intelligence analyses only messages received from 21 October 2026 — the day we published these rules. For older conversations the system only checks whether you have written to us before and does not send their text to artificial intelligence. When we connect WhatsApp, we do not download the earlier conversation history.

To link the statistics with the results, the system also takes from our CRM system (customer enquiry system) the source of the enquiry, the stage of handling (enquiry, viewing, moving in) and the dates. The system stores the phone number from the CRM only as a code. When we launch the signals for ads (described below), at the moment of sending the system will take the number from the CRM, compute a hash from it for Meta or TikTok and will not store the number.

Only two authorised people can see the full text of messages in our system. Other users of the system see only the statistics, without the text.

• Purpose: enquiry statistics — we check which of our ads and channels bring people looking for a room, plan our ads and improve our service.
• Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in assessing the effectiveness of our ads and channels and the quality of our service.
• Who receives the text of messages: apart from the messengers themselves and our CRM system (described above), only two of our providers. Cloudflare — the database of our system is in the EU, but requests to it may pass through Cloudflare servers in other countries; on Cloudflare servers we also convert voice messages into text. Anthropic Ireland, Limited (Ireland) — provides us with the artificial intelligence service as a processor.
• Anthropic processes the text at its subcontractors in the USA and other countries outside the EEA on the basis of standard data protection clauses adopted by the European Commission. Anthropic does not use these messages to train models and deletes them on its side within 30 days, unless it has to keep them longer by law or because of a breach of its usage rules.
• Messengers: messages from WhatsApp are passed to us by WhatsApp Ireland Limited on our behalf, as a processor. Meta Platforms Ireland Limited (Messenger, Instagram), Telegram and TikTok process conversations under their own rules, as controllers of their services.
• Backups: encrypted copies of the database, without the text of messages, are kept for up to 30 days in GitHub (GitHub, Inc., USA).
• How long: the full text of messages (including text from voice messages) — encrypted, 90 days from when the message was sent, then deleted automatically. The code and the labels — 2 years from the last contact with us (a message, a call or a request); then we delete the code and detach the labels from it, so only total numbers remain, from which you cannot be identified. We keep in the same way the code of the phone number and the CRM data of people who did not write to us but only called, sent the form or wrote on Viber.
• Objection: if you object, we will delete your labels and the stored text of your messages, and the system will no longer store or analyse new messages from you. We will then keep only your code on the exclusion list so that the system skips you. We will still reply to you.

TikTok: login and data portability (the roomplace.marketing app)

Messages you write to us on TikTok reach our company app roomplace.marketing through TikTok’s official tools. Our company’s TikTok account is connected to the app by an authorised member of staff. The rules of the app: terms of use of roomplace.marketing.

• Logging in with TikTok (Login Kit): when the account is connected, we receive the identifier and display name of our company account and access tokens. We keep the tokens encrypted and use them only to request the export. When access is withdrawn, the tokens stop working and we delete them.
• Data portability (Data Portability API): at most once a day we request an export of the direct messages of our company account. From the export we take only what is described in the part about messages from messengers: the text of the message, the time and the sender’s account identifier, which we replace with a code at once. We process the export file at once and do not keep it as a file. We analyse the text only of messages sent from 21 October 2026; for older messages we only establish whether the person had written to us before, without storing the text.
• What we do not collect: videos, likes, followers, contacts, location or profile photos — neither from our account nor from the people who write to us.
• Where we store it: in a Cloudflare database in the European Union. The text of messages is encrypted and deleted after 90 days, the codes and labels — 2 years from the last contact.
• Purpose and basis: registering and counting enquiries and assessing the effectiveness of ads — our legitimate interest (Art. 6(1)(f) GDPR).
• Withdrawing access: the app’s access to our account can be withdrawn in the TikTok app, on the “Manage app permissions” page (Settings and privacy → Security & permissions). If you wrote to us on TikTok and want us to delete your data or stop analysing it, write to the address given in this policy — the rules are described on the Data deletion page.

Signals for Meta and TikTok ads

This function is not working yet. Once we launch it, we will tell the advertising platform whether your enquiry turned out to be a question about a room or a place and whether you moved in with us. This applies to people who wrote to us after clicking our ad on Facebook or Instagram, and to people who, according to our CRM system, came to us from TikTok (from an ad or from our profile). This lets the platform measure how effective the ad is and show it to people who are really looking for housing.

We pass on only the type of event (“enquiry about a room”, “moving in”), its time, the ad click or conversation identifier assigned by the platform and — to match the event — the phone number in the form of a hash (SHA-256 hash), which we compute at the moment of sending and do not store; the platform compares it with the numbers of its users. We do not pass on the text of messages, your name, gender or any other labels.

We send the data with the platforms’ official tools: Meta Conversions API and TikTok Events API.

The signals are never built from data from the TikTok export (Data Portability API): we create them only from our CRM and the form on the website.

• Recipients: Meta Platforms Ireland Limited (Ireland) — Meta states that it uses the phone number only for matching and then deletes it, and that it is responsible for collecting and passing on these data jointly with us, as a joint controller. TikTok — for people in the EEA these are TikTok Technology Limited (Ireland) and TikTok Information Technologies UK Limited (United Kingdom); TikTok states that it processes such data as a joint controller together with the advertiser. We are responsible for collecting and passing on these data jointly with Meta or with TikTok — you can exercise your rights with us or directly with the platform. After that, Meta and TikTok process these data under their own rules: Meta privacy policy, TikTok privacy policy.
• Purpose: measuring the effectiveness of our ads on Meta and TikTok and targeting these ads better.
• Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in measuring and improving the effectiveness of our ads.
• How long: how long Meta and TikTok keep the data they receive is set by their rules.
• Objection: you can object to these signals at any time — then we will not send any more events about you.

Residents’ data: moving out and its reason

When a resident reports that they are moving out, and when they move out, our staff record it in an internal work chat on Telegram and briefly give the reason. A bot of our system collects these reports for statistics: it takes only move-out reports and discards other chat messages at once. We receive these data not directly from you but from our staff.

We record the dates of the report and of moving out, the property and the type of room, the type of moving out (planned, earlier by your decision or by our decision) and the category of the reason — for example, “returning to Ukraine or leaving Poland”, “cheaper housing”, “noise, neighbours, conflicts”, “breaking the rules”. To link two reports about the same move-out, we keep a code (a pseudonym) instead of the name. We do not keep names, phone numbers or the full text of the reports.

An artificial intelligence service assigns the reason given by a member of staff to one of our categories; after that the text is not kept. The categories are neutral: we do not record information about health, religion or other special categories of data. Nothing about you is decided automatically on the basis of these data.

• Purpose: to understand why people move out and to improve our service, the living conditions and our advertising.
• Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in statistics and the quality of our service.
• Who receives the data: Telegram — under its own rules, because the reports are created in a Telegram chat; Cloudflare and Anthropic Ireland, Limited — on the same terms as for messages (described above); GitHub — in encrypted backups, for up to 30 days.
• How long: the code and the move-out data — 2 years from moving out; then we delete the code and only total numbers for individual months remain.
• You have the right to object to this processing (Art. 21 GDPR) and to use your other rights described below.

Protecting the form against spam

To protect the form against spam and against the same request being sent again, the server stores irreversible codes (hashes) of your IP address and of the request (name, phone number and language). Your IP address or the content of the request cannot be read from these codes. They are not passed on anywhere.

• Purpose: the security of the form — a limit on requests from one address and detecting repeats.
• Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in protecting the form against abuse.
• How long: at least an hour. After that the server deletes these codes automatically at the next correctly completed request from the form, so when there are few requests they may stay longer.

Server and logs

The roomplace.pl website runs on the servers of a hosting provider in Poland. Like any web server, the website’s server records technical data about connections in its logs. This may include: IP address, date and time, the address of the page opened, information about the browser and the address of the page you came from. The name and phone number from the form do not go into the logs.

• Purpose: running the website, finding errors and protecting against attacks.
• Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in the safe and smooth running of the website.
• Who receives the data: the hosting provider with servers in Poland.
• How long: for the standard period used by the hosting provider.

Map (OpenFreeMap)

The map on the home page, on the address pages and on the “Map” page comes from the OpenFreeMap service (an operator from Hungary), which uses the Cloudflare network. To show the map, your browser downloads its parts, fonts and icons directly from their servers. Usually the map loads by itself, and on a slow connection — after a click. On pages with a map, the browser connects to these servers as soon as the page opens so that the map loads faster.

OpenFreeMap and Cloudflare then receive your IP address, information about the browser and the address of our website (without the specific page). The map does not store cookies. If the map fails to load, the browser may send Cloudflare a short technical error report. OpenFreeMap states that its logs usually do not contain IP addresses, and if it records them during a security incident, it deletes them within 30 days.

• Purpose: to show on the map where our addresses are.
• Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in showing locations on a map.

3D walks (Kuula)

On some address pages you can take a 3D walk (360° panoramas). The player is provided by the Kuula service. It loads only when you open the 3D walk yourself. Before that the website does not connect to Kuula at all.

When you open the 3D walk, the browser downloads the player and the panoramas from Kuula’s servers. Kuula then receives your IP address, information about the browser, the address of our website (without the specific page) and the identifier of the 3D walk, and counts its views. Kuula also stores cookies to spread traffic between its servers — we describe them in the cookie policy.

Kuula states that it operates mainly from the USA, so data may be processed in the USA, and that it usually keeps server logs for no longer than 30 days. Kuula’s rules: kuula.co/legal/privacy.

• Purpose: to show the 3D walk that you want to see.
• Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in showing the interiors at your request.

Google Analytics statistics

Google Analytics switches on only if you click OK in the cookie banner. If you click “Reject” or choose nothing, the website does not connect to Google.

Provider: Google Ireland Limited (Ireland) and Google LLC (USA). With your consent, Google Analytics collects information about how you use the website: which pages you view and for how long, where you come from, which device, system and browser you use, your approximate location (city, country) and your actions on the website — for example, scrolling, clicks on links, including on the phone number, WhatsApp and Telegram, a successful form submission and opening an address page.

The events that our website itself sends to Google Analytics do not contain the name or phone number from the form. However, automatic collection of user-provided data is switched on in the Google Analytics settings, so with your consent the Google Analytics script may itself read the phone number entered in the form and send it to Google in encoded form (as a so-called hash). Google states that for users in the EU it does not store IP addresses and only uses them to determine an approximate location. The website always tells Google that you do not agree to ads: to advertising cookies, to sending data for advertising purposes and to ad personalisation.

Google Analytics stores the cookies _ga and _ga_YTCJHCRV95 — more in the cookie policy. Google explains how it uses data from sites that use its services on its website.

• Purpose: statistics — we want to know which pages are useful and improve the website.
• Legal basis: your consent, Art. 6(1)(a) GDPR. You can withdraw it at any time through the “Cookie settings” link in the footer of the website.
• How long: data about visits in Google Analytics — no longer than 14 months, after which only aggregate statistics remain; cookies — up to 2 years.
• Transfer outside the EEA: Google LLC may process data in the USA. Google LLC participates in the EU-US Data Privacy Framework, for which the European Commission has found an adequate level of data protection.

TikTok ad measurement (TikTok Pixel)

The TikTok pixel (TikTok Pixel) switches on only if you click OK in the cookie banner — the same OK also switches on Google Analytics statistics. If you click “Reject” or choose nothing, the website does not connect to TikTok.

Recipient: TikTok — for people in the EEA these are TikTok Technology Limited (Ireland) and TikTok Information Technologies UK Limited (United Kingdom). TikTok states that it processes pixel data as a joint controller together with the website that uses it. With your consent, the pixel sends TikTok identifiers from cookies, your IP address, information about the browser and device, the address of the page you view, and two events: a click on the phone, WhatsApp or Telegram (Contact) and a successful form submission (SubmitForm).

The events that our website itself sends to TikTok do not contain your name, phone number or the content of the form. TikTok stores the cookies _ttp, ttcsid, ttcsid_CSHLCPBC77U53KQ7KI80, ttclid, _tt_enable_cookie — more in the cookie policy.

• Purpose: measuring and showing ads on TikTok — we want to know whether an ad on TikTok brings people who call us, write to us or send the form, and to show our ads on TikTok more accurately.
• Legal basis: your consent, Art. 6(1)(a) GDPR. You can withdraw it at any time through the “Cookie settings” link in the footer of the website — the website then switches off the pixel and deletes TikTok’s files from your browser.
• How long: TikTok cookies — up to 13 months from the last use (as TikTok states); how long TikTok keeps pixel data is set by TikTok.
• Transfer outside the EEA: TikTok may process data outside the EEA. TikTok states that it then relies on decisions of the European Commission on an adequate level of protection and on standard data protection clauses adopted by the European Commission.

Who we pass data to

Data are received only by the recipients described above:

• The provider of the CRM system (customer enquiry system) — data from the form and conversations in messengers (the text of messages), the phone number, the source of the enquiry and the stage of handling of people who call or write to us.
• The hosting provider with servers in Poland — server logs and the form protection codes.
• Cloudflare — the database of our enquiry system (messages, including voice messages for conversion into text, labels, move-out data) and technical data when the map loads.
• Anthropic Ireland, Limited — the text of messages and the reasons for moving out, for analysis by artificial intelligence.
• GitHub — encrypted backups without the text of messages.
• Meta and TikTok — signals about an enquiry and moving in: Meta — if you wrote to us after clicking its ad, TikTok — if according to our CRM you came to us from TikTok.
• OpenFreeMap — technical data when the map loads.
• Kuula — technical data when you open a 3D walk.
• Google — only with your consent to statistics.
• TikTok — with your consent to ad measurement on the website.
• Messengers (Messenger, Instagram, WhatsApp, Telegram, TikTok, Viber) and your phone operator — when you contact us through these channels.

Transferring data outside the EEA

Some recipients may process data outside the European Economic Area (EEA):

• The provider of the CRM system — data from the form and the data and conversations of people who call or write to us in messengers may be processed outside the EEA, including in the USA. This transfer is safeguarded by standard data protection clauses adopted by the European Commission; at your request we will send you a copy of them.
• Anthropic — the text of messages and of move-out reasons is processed by Anthropic’s subcontractors in the USA and other countries outside the EEA. The safeguard is standard data protection clauses adopted by the European Commission; at your request we will send you a copy of them.
• Google LLC (USA) — only with your consent. Google LLC participates in the EU-US Data Privacy Framework.
• Meta — signals for ads may go outside the EEA. Meta states that it then relies on decisions of the European Commission on an adequate level of protection and on standard data protection clauses adopted by the European Commission.
• WhatsApp — messages from WhatsApp that WhatsApp Ireland Limited processes on our behalf may go to WhatsApp LLC in the USA. WhatsApp states that it then relies on the EU-US Data Privacy Framework, and for onward transfers — on standard data protection clauses adopted by the European Commission.
• TikTok — data from the pixel (only with your consent to ad measurement on the website) and signals for ads, if according to our CRM you came to us from TikTok. TikTok states that when it transfers data outside the EEA, it relies on decisions of the European Commission on an adequate level of protection and on standard data protection clauses adopted by the European Commission.
• Kuula — states that it operates mainly from the USA; data may go to the USA when you open a 3D walk. Kuula also states that, where the law requires it, it uses standard data protection clauses adopted by the European Commission.
• Cloudflare, Inc. (USA) — the network used by the OpenFreeMap map and by our enquiry system; technical data, including the IP address, and for the enquiry system also requests to the database, may go to the USA. Cloudflare, Inc. participates in the EU-US Data Privacy Framework.
• GitHub, Inc. (USA) — encrypted backups without the text of messages. GitHub, Inc. participates in the EU-US Data Privacy Framework.

How long we keep data

• The form, phone calls and conversations in messengers — as long as needed to handle your enquiry and any stay with us; then we delete the data.
• The text of messages in our enquiry system, including text from voice messages — 90 days from when the message was sent; we delete voice recordings right after recognition.
• The code and the labels of messages — 2 years from the last contact with us (a message, a call or a request); then only total numbers remain.
• The code of the phone number and the CRM data of people who did not write to us (they called, sent the form or wrote on Viber) — 2 years from the last contact with us (a message, a call or a request); then only total numbers remain.
• The account identifier in the conversation with us on Messenger or Instagram, assigned by Meta (PSID or IGSID), — encrypted, at most 90 days, only for a reply by a member of staff and for sending a signal to Meta.
• Move-out data — 2 years from moving out; then only total numbers for individual months remain.
• The code on the exclusion list after your objection — as long as we keep enquiry statistics, so that your messages are not analysed again.
• Encrypted backups — up to 30 days.
• Form protection codes — at least an hour; then deleted automatically at the next correctly completed request from the form, so with few requests they may stay longer.
• Server logs — for the standard period used by the hosting provider.
• Google Analytics — data about visits no longer than 14 months; cookies up to 2 years.
• TikTok cookies — up to 13 months from the last use; how long TikTok keeps pixel data is set by TikTok.
• The rp_consent file with your choice in the banner — 12 months.
• Kuula cookies — 7 days from the last connection with the player.

Your rights

You have the following rights. To use them, write to nila.sepita.proinvest@gmail.com. We will reply without undue delay, at the latest within one month. How to ask for your data to be deleted is described step by step on the Data deletion page.

• The right of access to your data and to receive a copy of it.
• The right to rectification (correction) of wrong data, including labels given by our system.
• The right to deletion of data.
• The right to restriction of processing.
• The right to data portability for the data you gave us — in the form or in messages — when we use them to handle your enquiry or stay.
• The right to withdraw your consent to Google Analytics and the TikTok pixel at any time — through the “Cookie settings” link in the footer of the website. Withdrawing consent does not make earlier processing unlawful.

The right to object

When we process data on the basis of our legitimate interest (enquiry statistics and message analysis, signals for Meta and TikTok ads, move-out data, form protection, server logs, the map, 3D walks), you can object at any time on grounds relating to your particular situation. Write to nila.sepita.proinvest@gmail.com about this.

We always accept an objection to message analysis and to signals for ads: we will delete your labels and the stored text of your messages, stop storing and analysing your messages, and will not send any more events about you to Meta or TikTok. We will keep only your code on the exclusion list so that the system skips you. We will still reply to you.

Complaint to the President of UODO

If you believe that we process your data unlawfully, you can lodge a complaint with the President of the Personal Data Protection Office (UODO, Prezes Urzędu Ochrony Danych Osobowych): ul. Stanisława Moniuszki 1A, 00-014 Warszawa, uodo.gov.pl.

Do you have to provide data?

You can use the website without providing any data. Providing your name and phone number in the form is voluntary and is not required by law. Without these data, however, we cannot call you back.

Writing to us in messengers is voluntary too. Without a message, however, we cannot reply.

Automated decisions and profiling

We do not make decisions about you based solely on automated processing of data, including profiling, that would have legal effects for you or similarly significantly affect you.

Artificial intelligence gives your messages statistical labels, and the signals for Meta and TikTok (once we launch them) will help these platforms target our ads. This is profiling within the meaning of the GDPR, but we do not make any decisions about you on this basis: it does not decide whether, or on what terms, you can live with us, or how quickly we reply.

Changes to the policy

We may change this policy when the way the website works or the law changes. We publish the new version on this page together with the date of the update.

This version applies from the date of the update shown at the top of the page.