Privacy policy

Who is responsible for your data

The controller of your data is Dominik Ratoń, who runs a business under the name NotarD Dominik Ratoń, within which Unison operates.

Postal address: Tarnawa Niżna 2/1, 38-713 Lutowiska. NIP: 6891108209. In data matters the fastest route is email: dsraton@gmail.com.

Where I get your data from and what data it is

From the contact form or from an email you write yourself. Clicking Send submits the enquiry over the internet to a server I run. There it is saved as a file and immediately goes on as a message to my inbox, dsraton@gmail.com. If the submission to the server fails, the page will open your email program with a ready-made message, as it did before.

The enquiry from the form is built from what you type in:

• the address of your property's website or listing, a required field,
• your name or the property's name,
• your email address, a required field,
• a phone number, if you give one,
• the message text, if you write one.

On top of that I record the date of the enquiry. There is no IP address in the enquiry text. The form also has a hidden field for bots and measures how long it takes to fill in, but I save none of that.

What I need this data for

To answer your question: to assess whether an audit of your property's online presence makes sense in your case, and to prepare an answer or an offer. Nothing beyond that. There is no newsletter here you could be added to, and no profile anything could be added to.

The legal basis, for completeness: art. 6(1)(b) GDPR, because these are steps taken at your request before a possible contract, and art. 6(1)(f) GDPR, because replying to a message that someone sends me is my legitimate interest. Without the paragraph numbers: you write, so I answer.

Who else receives this data

I do not sell it, profile it or pass it on to anyone for marketing purposes. Three parties, however, cannot be avoided:

• Hetzner, my server. The enquiry is saved as a file on a server in Germany that I rent from Hetzner. Hetzner acts here as a processor: it does with the data only what I instruct it to (Hetzner's privacy policy).
• Google, my inbox. From the server the enquiry goes on as a message to my private inbox, dsraton@gmail.com, which lives in Gmail (Google's privacy policy).
• Cloudflare, the route through the network. The site runs on Cloudflare Pages and the enquiry reaches my server through Cloudflare's network as well. Like any host, Cloudflare records visitors' IP addresses in its logs (Cloudflare's privacy policy).

If you write an email from your own email program, for example when the submission to the server fails, your mail provider's servers also work on the way. The IP address additionally stays in my server's logs when I reject an enquiry: one that looks like a bot, or one that exceeds the limits protecting the form from flooding. These entries are automatically deleted after thirty days.

Beyond that, the site has no analytics tools and no advertising. The only extra script appears on pages that show my email address, and Cloudflare itself adds it: it reveals the masked address to make harvesting by bots harder. The script does not track behaviour and sets no cookies. Google and Cloudflare are American companies, so your message in my inbox and the log entries may be processed outside the European Economic Area. Both companies declare participation in the EU-US Data Privacy Framework, which covers data transfers to the USA. The current list of participants is kept by the US Department of Commerce. Hetzner's server sits in Germany, so that part of the route stays in Europe.

Cookies

This site sets no cookies at all. It stores nothing in the browser's memory either: it uses no mechanisms like localStorage. That is why there is no cookie-consent banner here, because there is nothing to consent to.

The commission calculator on the home page computes in the memory of the open tab. The numbers you type in are sent nowhere and stored nowhere, and they disappear together with the tab.

How long I keep your enquiry

The enquiry sits in two places: as a file on my server and as a message in my inbox. Each of these copies disappears at its own pace. The file is automatically deleted ninety days after sending, regardless of anyone's memory. No automation deletes the message in the inbox: it stays there as long as our correspondence lasts, and I delete it when you write asking me to. A deleted email goes to Google's trash and disappears for good only after thirty days; that is Gmail's rule. If the enquiry turns into an order, I keep the correspondence longer, because the limitation period for claims requires it.

I keep correspondence from a concluded contract until the claims arising from it become time-barred. The Polish Civil Code allows three years for this, and the deadline always falls on 31 December (art. 118). Settlement documents stay longer: the Polish Tax Ordinance requires me to keep the contract and the invoice until the tax becomes time-barred. That is essentially five years from the end of the year in which the tax payment deadline passed (art. 86 § 1 and art. 70 § 1 of the Tax Ordinance).

Your rights

You can ask me to show what data I hold about you and to give you a copy. You can request rectification, erasure or restriction of processing, transfer of the data to another controller, and you can object where the processing rests on a legitimate interest. For any of these it is enough to write to dsraton@gmail.com.

In Poland, supervision of data protection is exercised by the President of the Personal Data Protection Office (UODO); you can lodge a complaint there as well: uodo.gov.pl.