§1. General information

This Privacy Policy sets out the rules for the processing of personal data by Inwest-Serwis Sp. z o.o. with its registered office in Olsztyn, 10-086, ul. Polna 19, NIP: 7393857415, REGON: 281452052, as the Data Controller (hereinafter: "Controller").

You can contact the Controller via email: biuro@inwest-serwis.com.pl or by phone: +48 89 527 78 19.

§2. Purposes and legal basis for data processing

Personal data are processed for the following purposes:

• Contact via the contact form – based on consent (Art. 6(1)(a) GDPR),
• Recruitment – based on consent (Art. 6(1)(a) GDPR),
• Submitting real estate for acquisition – based on consent (Art. 6(1)(a) GDPR),
• Fulfillment of legal obligations – e.g. archiving documents (Art. 6(1)(c) GDPR),
• Marketing and analytics – based on the legitimate interest of the Controller (Art. 6(1)(f) GDPR).

§3. Scope of data processed

Depending on the purpose, the following data may be processed:

• name and surname,
• email address,
• telephone number,
• data contained in a CV (e.g. education, professional experience),
• data concerning real estate (e.g. location, area, owner).

§4. Recipients of data

Personal data may be transferred to:

• IT and hosting service providers,
• entities supporting recruitment processes,
• law and consulting firms,
• public authorities, if required by law.

§5. Data retention period

Data will be stored:

• until consent is withdrawn,
• for the period necessary to achieve the purpose of processing,
• for the period required by law (e.g. for tax or archiving purposes).

§6. Rights of data subjects

Every person has the right to:

• access their data,
• rectify their data,
• erase their data,
• restrict processing,
• data portability,
• object to processing,
• withdraw consent at any time.

To exercise these rights, please contact: biuro@inwest-serwis.com.pl.

§7. Transfer of data outside the EEA

Personal data are not transferred outside the European Economic Area, unless necessary and carried out with appropriate safeguards.

§8. Automated decision-making and profiling

The Controller does not use automated decision-making or profiling.

§9. Security of personal data

The Controller makes every effort to ensure an appropriate level of protection of personal data, in accordance with applicable laws, in particular the GDPR.

The following measures are applied:

• technical measures: encryption of data transmission (SSL), server security, software updates,
• organizational measures: restricted access to data, training, incident response procedures,
• risk assessment and implementation of corrective measures.

In the event of a personal data breach, actions are taken in accordance with GDPR, including notifying the supervisory authority and affected individuals – if required.

§10. Personal Data Breach Notification Procedure

In the event of a suspected personal data breach, the Controller implements a response procedure in accordance with GDPR.

A breach may be reported by an individual:

• by email: biuro@inwest-serwis.com.pl,
• by phone: +48 89 527 78 19,
• in writing: ul. Polna 19, 10-086 Olsztyn.

The report should include a description of the incident, the date, and the contact details of the reporting person.

The Controller shall:

• Analyze the incident,
• Record it in the breach register,
• Take corrective actions,
• Inform affected individuals (if required),
• Notify the supervisory authority (PUODO) within 72 hours – if required.

§11. Cookies policy

Cookies are text files stored on the user’s device, enabling traffic analysis and content customization.

Types of cookies:

• technical – necessary for website functionality,
• analytical – e.g. Google Analytics,
• marketing – e.g. Facebook Pixel (if used).

Users may consent to cookies and manage them through their browser settings.

§12. Website tabs

The website contains tabs relating to:

• construction offers,
• development offers,
• defense sector – strategic investments,
• completed projects,
• land acquisition.

Contact forms in these tabs are subject to this Privacy Policy.