Privacy notice

How we handle your data

Last updated: July 2026

Who we are

The controller of your data is REALTY.TM GROUP sp. z o.o., ul. Bpa Albina Małysiaka 26/15, 30-389 Kraków, Polska, KRS 0001219891, NIP 6762711607, REGON 543832177. RealtyTM, operated by that company, aggregates real-estate listings. For the data in your account, the controller is the company named above. For privacy matters contact us at [email protected]. You also have the right to lodge a complaint with the Polish data protection authority (UODO).

What data we collect

We only collect the data needed to run the service and your account:

Account data — your email address and your name, if you provide it.
Content you create — saved listings, lists, saved searches, notes and messages.
Technical data — IP address, device and browser information, and how you use the service, collected through cookies.

Why we use it (legal basis)

To provide the service and run your account — on the basis of performing our contract with you.
To send the alerts you set up — on the basis of your consent.
To keep the service secure and to improve it — on the basis of our legitimate interests.

Listing data

The listings we show come from publicly available listing portals. Some contain personal data of third parties — the name given in the listing and the phone number of a private advertiser. We treat these as personal data and say so plainly, rather than claiming they do not exist. Purpose: allowing professional users to contact people who have themselves advertised a sale or a let. Basis: legitimate interest (art. 6(1)(f) GDPR); source: public listings on property portals. The contact is visible only to signed-in users of a paid PRO account — it is neither public nor exposed to search engines — and stops being shown 12 months after the listing was last visible. Every disclosure is logged. You may object at any time, with no account and without proving the number is yours: the form is at https://realtytm.com/en/archiwum/sprzeciw. We do not store the number — only its irreversible fingerprint is compared.

Cookies

We use necessary cookies for login and security, preference cookies (language, currency, layout), and optional analytics cookies. You can manage your choices at any time under Cookie settings.

Sharing and third parties

We don’t sell personal data. Recipients fall into two groups. The first are processors acting on our instructions under data-processing agreements: hosting, email delivery and Google (Google Tag Manager and statistics — only after you consent to analytics cookies). The second is Lendean, our commercial mortgage partner, which is a separate controller rather than our processor. The Lendean calculator loads only after marketing consent; the partner then receives your IP address, browser data, page address, and the id and price of the listing you are viewing. If you fill in its form, the partner receives the contact details you entered and processes them on its own responsibility under its own privacy policy. We are paid for each contact passed on. Public lists you choose to share are visible to anyone who has the link.

Data retention

Account data is kept for as long as the account is active. An account unused for 24 months is deleted together with its content, after prior notice by email. Correspondence from the contact form is kept for 12 months after the last message. Contacts from the listings archive stop being shown 12 months after the listing was last visible. Billing data for purchased reports is kept for 5 years, as tax law requires. At your request we delete data sooner, unless a legal obligation prevents it.

Your rights (GDPR)

Under the GDPR you have the following rights:

access to your data, rectification and erasure;
restriction of processing and data portability;
objection to processing and withdrawing consent at any time;
to exercise these rights, email us at [email protected];
you also have the right to complain to a supervisory authority (in Poland: the President of the UODO).

Security

We apply reasonable technical and organizational measures to protect your data against unauthorized access, loss or disclosure.

Spotted a vulnerability? Write to [email protected] — we will look into it and reply.

International transfers

If any of our processors are located outside the European Economic Area (EEA), we rely on appropriate safeguards, such as standard contractual clauses.

Changes and contact

We may update this notice from time to time. We’ll flag significant changes in the service. Questions? Email us at [email protected].