Discretion covers your data too.

This site promises discretion — so I start with myself. Below is exactly what data I process, why, and for how long. No small print.

1. Controller

The controller of personal data is Vultima sp. z o.o., ul. Bolesława Chrobrego 3, 42-690 Hanusek, Poland, VAT ID PL6452550794. Contact for data matters: rezydencje@4izby.pl, tel. +48 730 091 033.

2. What I process and why

• Contact form — name, phone or e-mail, and the content of your message. Purpose: answering your enquiry and talking about your project (art. 6(1)(b) GDPR — steps prior to a contract). I read every message personally.
• Book reservation ("Rezydencje") — full name and phone or e-mail. Purpose: a single contact before the release (art. 6(1)(a) GDPR — your voluntary request). This is not a newsletter — there are no recurring mailings.
• Direct contact (phone, e-mail) — data you share yourself, to hold the conversation you start (art. 6(1)(b) or (f) GDPR).
• Visit statistics and analytics — see points 3 and 4.

Providing data is voluntary. There is no profiling, no selling of data, no automated marketing.

3. Cookies and analytics tools

This site uses cookies. On your first visit you will see a banner where you decide the scope of your consent — by category:

• Necessary — remembering your consent choice (the izby_consent cookie, 12 months), security and basic form handling. Always active, because the site does not function without them (art. 6(1)(f) GDPR — legitimate interest).
• Analytics — Google Analytics 4 (visit statistics) and Microsoft Clarity (anonymised session recordings and heatmaps — where visitors lose their way). Loaded only after your consent (art. 6(1)(a) GDPR); without it neither script is started and no data reaches Google or Microsoft.
• Marketing — a category for advertising pixels. The site currently uses no such tools; should that change, I will update this policy first.

Consent is voluntary and you may withdraw it at any time — simply delete this site's cookies in your browser (the banner will appear again) or write to rezydencje@4izby.pl. Withdrawal does not affect the lawfulness of processing carried out before it.

4. First-party visit statistics

Independently of the tools in point 3, I use two measurements of my own, whose data never leaves my infrastructure and is shared with no advertising parties:

• Anonymous measurement — the browser sends an event (for example a page view, or reaching 75% of the text) with a technical identifier derived one-way from the IP address and browser type, using a salt rotated daily. The raw IP address is not stored in it, and the identifier cannot be linked to a person or connected across days. This measurement honours the "Do Not Track" setting.
• First-party measurement — a technical device identifier stored in a cookie (pz_did, 13 months) and events such as page views or scroll depth, together with the IP address and browser information, sent exclusively to this site's own server. Purpose: understanding which paths bring clients to me and which content works (art. 6(1)(f) GDPR — legitimate interest; you have the right to object — point 7).

5. Recipients

• Cloudflare, Inc. — the site's server infrastructure and a temporary buffer for form submissions. The form data buffer is located in the European region; network traffic may pass through Cloudflare's global network, and transfers outside the EEA are safeguarded by standard contractual clauses.
• dhosting.pl sp. z o.o. (dpoczta.pl) — e-mail service that receives form messages.
• Google Ireland Ltd. (Google Analytics 4) and Microsoft Ireland Operations Ltd. (Clarity) — only once you give analytics consent; transfers outside the EEA are safeguarded by standard contractual clauses and the EU–US adequacy decision (Data Privacy Framework).

Beyond that, data is shared with no one — in particular with no advertising parties.

6. Retention

• Contact form messages — until the conversation you started is concluded; if we proceed to work together, for its duration and any legally required period.
• Book reservations — until the release and the single contact, after which the list is deleted.
• Consent cookie (izby_consent) — 12 months; first-party measurement cookie (pz_did) — 13 months.
• Google Analytics 4 data — up to 14 months; Microsoft Clarity recordings — up to 30 days (vendor settings).
• First-party statistics — raw data up to 24 months, then aggregate summaries only.

7. Your rights

You have the right to access, rectify, erase and restrict the processing of your data, to data portability, to object, and — for the book reservation — to withdraw consent at any time. A message to rezydencje@4izby.pl is enough. You may also lodge a complaint with the President of the Polish Personal Data Protection Office (uodo.gov.pl).

8. Changes

If the way this site works changes, this policy will be updated and the date below revised.

In force from: 12 August 2026 (update: consent-based analytics tools enabled) · Prepared for the 4izby.pl (residences) website.