Privacy Policy

LUNA HAUS Privacy Policy and Website Terms

I. DATA CONTROLLER AND PRIVACY PROTECTION

The controller of your personal data is LUNA HAUS – a brand owned by Sparkle Media Paulina Krzeczkowska, registered office in Pręgowo, ul. Źródlana 2, 83-050, Poland (hereinafter: the “Controller”, “we”). We protect the privacy and security of your data in accordance with the GDPR (Regulation (EU) 2016/679) and the Polish Personal Data Protection Act of 10 May 2018.
Correspondence address: ul. Źródlana 2, 83-050 Pręgowo, Poland
E-mail: kontakt@luna-haus.eu | Phone: +48 798 061 059
Tax ID (NIP) 9512587243, REGON 389842370, entrepreneur entered in the Polish Central Register and Information on Economic Activity (CEIDG).

II. HOW TO CONTACT US

In all matters concerning personal data, you can contact us by post, e-mail or phone (details above). We respond courteously and without undue delay.

III. WHERE WE GET DATA FROM (SOURCES)

We obtain data:

directly from you (website forms, e-mail, phone, meetings, social media),
from advertising forms (e.g. Meta Lead Ads – Facebook/Instagram), after you voluntarily submit your data,
from our business partners (e.g. developers, mortgage advisors) – only with your knowledge or consent,
from publicly available sources (KRS, CEIDG), where justified by the purpose,
from analytics tools and cookies/pixels – only to the extent described in the “Cookies and similar technologies” section.

IV. CATEGORIES OF DATA

Depending on the purpose: first and last name, contact details (phone, e-mail, address), data on your preferences and the property you are looking for, transaction and identification data required by law (e.g. AML), correspondence history, technical data (cookie/device identifier, IP address – for analytics/security purposes).

V. PURPOSES AND LEGAL BASES OF PROCESSING

Contact and handling of enquiries – our legitimate interest (Art. 6(1)(f) GDPR: communication with interested persons).
Brokerage/sale agreement and pre-contractual steps – performance of a contract or steps taken at your request (Art. 6(1)(b) GDPR).
Legal obligations (e.g. AML, accounting) – Art. 6(1)(c) GDPR.
Direct marketing (newsletter, information about properties) – by e-mail/SMS/phone only with your consent (Art. 6(1)(a) GDPR) and in accordance with Art. 10 of the Polish Act on Providing Services by Electronic Means and Art. 172 of the Telecommunications Law; marketing of our own services to our clients to a reasonable extent – our legitimate interest (Art. 6(1)(f) GDPR), with the right to object.
Establishing, pursuing or defending claims – legitimate interest (Art. 6(1)(f) GDPR).
Website analytics and statistics – legitimate interest (Art. 6(1)(f) GDPR: improving the website and services).

VI. MARKETING COMMUNICATION – CONSENTS

If you subscribe to our newsletter or leave your details in an advertisement (e.g. Lead Ads), we ask for your voluntary consent to marketing contact. You can withdraw your consent at any time – via the unsubscribe link in the e-mail footer or by writing to kontakt@luna-haus.eu. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

VII. DATA RECIPIENTS (WHO WE SHARE DATA WITH)

We share data only when necessary and secure:

with our authorised employees/associates,
with entities processing data on our behalf (including IT/hosting providers, the MailerLite mailing tool, CRM providers, accounting offices, law firms, courier/postal services),
with parties involved in real estate transactions (e.g. notaries, developers, other agents) – only when necessary to fulfil the purpose/agreement or with your consent,
with public authorities – where required by law. We conclude data processing agreements and ensure secure processing by our providers.

Meta Lead Ads (Facebook/Instagram): Meta processes data as an independent controller when the form is displayed on its platform. Once the data is transferred to LUNA HAUS, we become the controller of that data on our side.

VIII. TRANSFERS OUTSIDE THE EEA

As a rule, we process data within the EEA. If, exceptionally, data is transferred outside the EEA (e.g. by a tool provider), we apply standard contractual clauses (SCCs) or other required mechanisms and security measures.

IX. DATA RETENTION PERIOD

Your personal data will be processed for as long as necessary to achieve the stated purposes, depending on the legal basis for processing for a given purpose – in particular for the duration of the agreement, the period required by law, until the limitation period for claims expires, or until you effectively withdraw your consent or raise a justified objection, where the processing is based on your voluntary consent or the Controller’s legitimate interest, respectively.

X. RIGHTS OF DATA SUBJECTS

You have the right to: access your data, rectification, erasure, restriction of processing, data portability, object to processing based on legitimate interest, and withdraw consent at any time. You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw). Please send requests to kontakt@luna-haus.eu or by post.

XI. COOKIES AND SIMILAR TECHNOLOGIES

We use cookies and similar technologies for:

operation and security of the website,
remembering your settings,
statistics and analytics (e.g. website traffic),
marketing (e.g. Meta pixel) – only to the extent accepted in the cookie banner.

In the banner you can give or refuse consent to marketing/analytics cookie categories. Detailed settings are available in the footer (“Cookie settings”). Instructions for deleting/managing cookies are available in your browser.

XII. SECURITY

We apply technical and organisational measures appropriate to the risks: encrypted transmission (SSL), access control, password policies, data minimisation, staff training, backups and provider audits.

XIII. AUTOMATED DECISIONS / PROFILING

We do not make automated decisions about you that produce legal effects. We may use basic segmentation (e.g. by location/preferences) for marketing purposes – it has no legal effects and is based on your consent or our legitimate interest, with the right to object.

XIV. ELECTRONIC SERVICES

By using the forms on the website, you enter into an agreement with us for the provision of electronic services consisting of submitting an enquiry/registration. Please send technical complaints to kontakt@luna-haus.eu. We reserve the right to technical breaks resulting from website maintenance.

XV. REPORTING BREACHES OF EU LAW (WHISTLEBLOWING)

If you wish to report a breach of EU law, please contact us at: sygnalista@luna-haus.eu. All reports are treated confidentially.

XVI. CHANGES TO THIS POLICY

This document may be updated, among other things, due to changes in legislation, technology or our services. We will inform you of significant changes via the website and/or e-mail.