Privacy Policy
Last updated: 3 June 2026
1. Data Controller
The controller of your personal data is Maciej Gębarowski, conducting business activity under the name ORLEX – Maciej Gębarowski, with its registered office at ul. Jana III Sobieskiego 227, 84-200 Wejherowo, Poland (NIP 588-176-23-26, REGON 191475232).
For all matters relating to personal data protection, please contact us at: info@orlexmg.pl.
2. Purposes and Legal Basis for Processing
We process your personal data for the following purposes:
- Responding to your enquiry and presenting a property sale offer tailored to your needs — legal basis: Article 6(1)(b) GDPR (steps taken at the data subject's request prior to entering into a contract, and performance of a contract).
- Direct marketing, including information about our current offer and the start of sales in future investments — legal basis: Article 6(1)(a) GDPR (consent of the data subject), only where such consent has been given.
- Website traffic analytics — legal basis: Article 6(1)(f) GDPR (legitimate interest of the controller in measuring traffic to improve the service). Analytics is carried out anonymously and in aggregate, without cookies and without identifying individuals.
3. Data Retention Periods
- Data processed to respond to an enquiry and present an offer — for 6 months from the date of collection.
- Data processed on the basis of marketing consent — for 12 months from the date of collection or until consent is withdrawn.
4. Your Rights
You have the following rights under GDPR:
- Right of access to your personal data (Article 15 GDPR).
- Right to rectification of inaccurate data (Article 16 GDPR).
- Right to erasure (Article 17 GDPR).
- Right to restriction of processing (Article 18 GDPR).
- Right to withdraw consent at any time — with respect to processing for marketing purposes — without affecting the lawfulness of processing carried out before its withdrawal.
- Right to object to the processing of your data (Article 21 GDPR).
- Right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.
To exercise any of your rights, please contact us at: info@orlexmg.pl.
5. Data Recipients and Processors
Recipients of the data are entities processing data on behalf of the Controller — IT service providers and accounting/payroll services, acting under data processing agreements. For the sopot645.pl website we use the following providers:
- Supabase — the database storing form submissions. Data is stored on servers within the European Union (Frankfurt region, eu-central-1).
- Vercel Inc. (USA) — website hosting and infrastructure. Data is transferred on the basis of Standard Contractual Clauses (SCCs).
- Resend Inc. (USA) — email delivery service (form confirmations and notifications). Data is transferred on the basis of Standard Contractual Clauses (SCCs).
- Vercel Analytics — anonymous, aggregated traffic analytics without cookies; it does not process data identifying individuals.
6. Transfers to Third Countries
Form data is stored on servers within the European Union. For hosting (Vercel) and email delivery (Resend), data may be transferred to the United States — this occurs solely on the basis of Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring an adequate level of data protection.
7. Automated Decision-Making and Profiling
Your personal data will not be subject to automated decision-making and will not be profiled.
8. Cookies
The website does not use analytics or marketing cookies. Detailed information is available in our Cookie Policy.
9. Consequences of Not Providing Data
Providing your personal data is voluntary but necessary to present a property sale offer or respond to your enquiry. Failure to provide the data will result in the inability to present an offer or respond to your enquiry.