Privacy.

1. Controller

Represented by the managing directors Martin Tomczak and Miroslaw Tomczak.

2. Hosting and access to the website

The website is hosted as a ChatGPT Site by OpenAI. For users in the European Economic Area, OpenAI Ireland Limited acts as processor. When the website is accessed, technically necessary connection and log data may be processed, particularly the IP address, date and time of access, requested address, referrer, browser and device information and transmission status.

This processing is necessary to provide the website securely, reliably and without errors. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of our website.

OpenAI may use sub-processors. Where data is processed outside the European Economic Area, OpenAI states that transfers are based on an adequacy decision or appropriate safeguards, particularly the EU Standard Contractual Clauses.

Further information is available in the ChatGPT Sites Data Processing Addendum.

3. Apartment enquiries submitted through the form

When you use the enquiry form, we process the information you provide to review and answer your rental enquiry and to take steps towards a possible rental agreement.

Data processed

• Contact details: title, first and last name, email address and telephone number
• Rental preferences: preferred move-in date and rental period
• Voluntary information about employment, net household income, reason for moving and pets
• The content of your additional message
• Technical transmission data required for secure delivery

The legal basis is Article 6(1)(b) GDPR where processing is necessary to take pre-contractual steps at your request. Where processing also serves the organisation and documentation of our letting activities, it is based on Article 6(1)(f) GDPR. Our legitimate interest is the efficient processing and follow-up of rental enquiries.

First name, last name, email address, telephone number, move-in date and rental period are required so that we can identify, review and answer your enquiry. Without this information, the form cannot be submitted and the enquiry cannot be processed. All other information is voluntary.

Please do not enter identity-document data, health data or other particularly sensitive information in the free-text field.

4. Delivery and recipients of the enquiry

The enquiry is transmitted server-side to a Google Apps Script configured by us. It immediately creates a structured email and sends it through Gmail to tt.urbanstudios@gmail.com. Google Apps Script and Gmail are Google services.

Recipients of the data may therefore include persons working for us as well as OpenAI and Google as technical service providers, insofar as this is necessary for hosting, transmission and receipt.

Processing in the United States by US service providers cannot be ruled out. Where required, transfers are based on an adequacy decision or appropriate safeguards such as the EU Standard Contractual Clauses. Further information is available in Google's Privacy Policy.

5. No storage in a website database

The form details are not stored in the browser, Local Storage, Session Storage or a database operated by this website. They are processed immediately for email transmission. This does not affect technically necessary short-term processing by the hosting and delivery services involved or the storage of the received message in the email inbox.

6. Storage period

We store enquiries for as long as necessary to process them, communicate with you and decide on a possible rental relationship. If no rental agreement is concluded, we delete the enquiry, including the email, no later than 180 days after receipt unless statutory retention obligations or legitimate interests in establishing, exercising or defending legal claims require longer storage.

If a rental agreement is concluded, the data required for that agreement will continue to be processed for the duration of the rental relationship and in accordance with statutory retention periods. Technical service providers retain data in line with their contractual and statutory deletion periods.

7. Cookies, analytics and advertising

We do not use our own analytics, marketing or profiling services on this website, nor do we use advertising trackers. Technically necessary cookies or similar technologies may be used by the hosting infrastructure where required for security and website delivery.

8. Your rights

Subject to the applicable legal requirements, you have the right of access (Article 15 GDPR), rectification (Article 16 GDPR), erasure (Article 17 GDPR), restriction of processing (Article 18 GDPR), data portability (Article 20 GDPR) and the right to object to processing based on legitimate interests (Article 21 GDPR).

To exercise your rights, simply contact tt.urbanstudios@gmail.com.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

9. Automated decision-making

No decision based solely on automated processing, including profiling, takes place.

10. Updates to this policy

We update this privacy policy if the website, service providers used or legal requirements change.