Privacyv policy

1. Data Controller

The controller responsible for processing your personal data is:
Solycasa Invest, operated by Karolina Trąd, with registered office at Kolejowa 21/2, 47-400 Racibórz, Poland, registered in the business register in Poland, NIP: 6343063405, REGON: 543236831
(e-mail: solycasainvest@gmail.com, tel.: +32 488 34 75 50).

In this document we explain how we process the data of people who use our website (hereinafter: the “Website”), in particular those interested in purchasing properties in Belgium and Spain.
For any questions regarding data protection, you can contact us at: solycasainvest@gmail.com

The Website is available in multiple languages: Polish (PL), Dutch (NL), English (EN) and Spanish (ES).

2. Purposes of processing and legal basis

We process your personal data in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679 – “GDPR”) and other applicable legislation.
We process personal data for the following purposes:

a) Handling inquiries and contact requests

(contact form, e-mail, phone, chat)

• data: first name, last name, e-mail address, phone number, content of the inquiry, real estate preferences (location, budget, property type), other information provided voluntarily;

• legal basis:

  • Art. 6(1)(b) GDPR – taking steps at your request prior to entering into a contract / pre-contractual measures,

  • Art. 6(1)(f) GDPR – our legitimate interest in responding to your inquiry.

b) Presenting property offers and mediating in the sale of properties in Belgium and Spain

• data: contact details, property preferences, information about your housing situation, and to a limited extent information about your financial situation (to the extent necessary to propose a suitable offer);

• legal basis:

  • Art. 6(1)(b) GDPR – performance of a contract or steps prior to entering into a contract,

  • Art. 6(1)(f) GDPR – our legitimate interest in carrying out real estate brokerage activities.

c) Direct marketing

(newsletter, offers via e-mail, phone, SMS)

• data: first name, last name (if provided), e-mail address, phone number, property preferences;

• legal basis:

  • Art. 6(1)(a) GDPR – your consent (e.g. newsletter subscription),

  • Art. 6(1)(f) GDPR – our legitimate interest in promoting our services, where permitted by specific regulations,

  • additionally – applicable national laws on electronic communications.

d) Performance of contracts and legal obligations

(e.g. brokerage agreements, reservation agreements, tax settlements)

• data: identification and address details, contact details, invoicing details, data required by tax or other regulations in Poland, Belgium or Spain;

• legal basis:

  • Art. 6(1)(b) GDPR – performance of a contract,

  • Art. 6(1)(c) GDPR – compliance with legal obligations to which we are subject.

e) Statistics, website traffic analysis and improvement of our services

• data: IP address, technical device data, cookies, data about your activity on the Website;

• legal basis:

  • Art. 6(1)(f) GDPR – our legitimate interest in analysing Website usage, improving service quality and tailoring content.

f) Establishment, exercise or defence of legal claims

• legal basis:

  • Art. 6(1)(f) GDPR – our legitimate interest in protecting our rights.

3. What data do we process?

Depending on how you use our Website, we may process the following data:

• identification data: first name, last name;

• contact data: e-mail address, phone number;

• property-related data: preferred location (Belgium, Spain, specific regions), property type, price range, information about your expectations regarding a property;

• contract-related data: home address, PESEL / identity document number (if required when signing a contract – these data are generally not collected via the Website but directly when entering into the agreement);

• technical data: IP address, browser type, operating system, session data, data regarding Website activity;

• data from cookies and similar technologies (more information under “Cookies”).

Providing data is voluntary, but it is often necessary to respond to your inquiry, provide an offer or conclude an agreement.

4. Recipients of the data

Your data may be shared with:

• Service providers acting on our behalf, such as:

  • hosting and server providers,

  • CRM system and mailing tool providers,

  • IT service providers and system administrators,

  • accounting offices, law firms, tax advisors.

• Foreign partners, in particular:

  • real estate agencies in Belgium and Spain,

  • developers and property owners,

  • notaries and law firms involved in transactions.

In all cases, data sharing takes place based on data processing agreements or other appropriate legal grounds.

• Public authorities – where legally required (e.g. tax authorities, police, courts).

5. Transfer of data outside the European Economic Area (EEA)

As a rule, we process your data within the European Economic Area (Poland, Belgium and Spain are EU Member States).
If, in connection with certain IT tools (e.g. mailing tools, analytics tools, cloud services), data were to be transferred to countries outside the EEA (e.g. the United States), this will take place solely on the basis of:

• adequacy decisions issued by the European Commission,

• Standard Contractual Clauses approved by the European Commission,

• other instruments provided for in the GDPR.

More information about specific service providers and the legal basis for transfer can be requested via: solycasainvest@gmail.com

6. Retention periods

We do not keep your data longer than necessary for the purposes for which they were collected. Specifically:

• data from contact forms / inquiries – as long as necessary to respond and conduct correspondence, and then up to 24 months for evidentiary purposes;

• data related to contracts and property transactions – for the duration of the contract and thereafter for the period required by law (e.g. tax laws) and the limitation period for potential claims (usually 5–10 years, depending on the type of claim);

• data processed on the basis of consent (e.g. newsletter) – until you withdraw your consent;

• data related to logs and Website statistics – up to 24 months, or shorter if required by law or our security policy.

After these periods, the data are deleted or anonymised.

7. Your rights

In relation to your personal data, you have, among others, the following rights:

• Right of access – you can request information about the processing and obtain a copy of your data.

• Right to rectification – if your data are inaccurate or incomplete, you can request that they be corrected or completed.

• Right to erasure (“right to be forgotten”) – in the cases provided for by the GDPR, e.g. when the data are no longer necessary or when you have withdrawn your consent.

• Right to restriction of processing – e.g. when you contest the accuracy of the data.

• Right to data portability – where processing is based on consent or a contract and is carried out by automated means.

• Right to object – to processing based on our legitimate interest, including profiling and direct marketing.

• Right to withdraw consent – at any time when processing is based on your consent; withdrawal does not affect the lawfulness of processing before the withdrawal.

• Right to lodge a complaint with a supervisory authority – in Poland with the President of the Personal Data Protection Office (UODO). If you live in another EU Member State (e.g. Belgium, Spain), you may also contact the competent authority in that country.

To exercise your rights, you can contact us at: solycasainvest@gmail.com

9. Profiling and automated decision-making

We may process your data partially by automated means, including in order to:

• match property offers to your preferences (location: Belgium, Spain, budget, property type),

• display marketing content aligned with your interests (for example, through use of the Meta/Facebook Pixel).

However, we do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

10. Data security

We apply appropriate technical and organisational measures to protect your personal data, including:

• encrypted connection (SSL / HTTPS),

• secured servers,

• access control to data,

• data processing agreements with our service providers.

11. Changes to this Privacy Policy

This Privacy Policy may be updated in the event of changes in legislation, the technologies used, or the way we provide our services.
The most recent version of the Privacy Policy is always available on the Website under the “Privacy Policy” page.

Date of last update: 18-11-2025.