Privacy Policy

This document is a translation. In the event of any discrepancy between the language versions, the Polish version shall prevail.

DOLCE CASA | dolce-casa.com | Version 2.0 | Effective date: 12 October 2026

1. Controller and Contact Details

The controller of the data relating to the maintenance of Accounts and the operation of the Website available at dolce-casa.com (as well as dolce-casa.pl and dolce-casa.eu) is PLATINIUM ESTATE & YACHTS Sp. z o.o., ul. Floriańska 6/02, 03-707 Warszawa, KRS 0000630211, NIP 1132915056, REGON 365063325 (hereinafter: the “Operator”).

Contact in matters concerning personal data: biuro@platiniumestate.pl. The Operator has not appointed a data protection officer.

Real estate Agencies with which the User establishes a Connection may be separate controllers of the data received for the purpose of independently servicing their clients and of their own marketing. Before accepting a Connection, the User is informed of the identity of the Agency and of the Agent who sent the invitation. The Agency concerned informs the User of the rules under which it processes data for its own purposes.

2. What Data We Process

• Account data: first name, last name and e-mail address (mandatory at registration), telephone number (optional), Account identifier, password stored solely in the form of a cryptographic hash, settings (language, currency), favourite listings and the history of operations performed on the Account.
• Property service data: enquiries, selected and pinned listings, information on property interests, the stage of service in the sales process, Agents’ messages and notes, and the service history.
• Agency cooperation data: invitations, e-mail acceptances, Agency and Agent identifiers, transfers between Agents and the termination of the Connection.
• Technical data: IP address, server and security logs, information about the browser and device, and necessary cookies. Operations performed on client data (who performed them and when) are recorded in an audit log.

3. Purposes and Legal Bases

• Creating and maintaining the Account and providing the functions of the Website: Art. 6(1)(b) GDPR (performance of a contract for the provision of services by electronic means).
• Handling enquiries, property-related contact and the Connection with an Agency: Art. 6(1)(b) GDPR, where these activities are necessary to perform the service or to take steps at the User’s request; otherwise, Art. 6(1)(f) GDPR (the Operator’s legitimate interest in responding to the enquiry).
• Security, prevention of abuse (including the protection of forms against bots), complaint handling and the establishment, exercise and defence of legal claims: Art. 6(1)(f) GDPR, subject to a balancing of interests.
• Legal obligations, including tax obligations and obligations relating to content notices, where applicable: Art. 6(1)(c) GDPR.
• Direct marketing of the Operator’s own services: Art. 6(1)(f) GDPR and, in communication channels requiring prior consent, solely on the basis of separate consent in accordance with the legislation governing electronic communications. A Connection with an Agency does not in itself constitute consent to marketing.

4. Connection of the Account with an Agency and Access to Data

The User may use the Account and browse listings without being assigned to an Agency. An Agency may send an invitation to a Connection; the Connection is established once the User has accepted it by e-mail.

Once the Connection has been established, the authorised Agents of the Agency concerned obtain access to the data provided for in the application, including contact details, notes and service history. The client may be transferred to another authorised Agent of the same Agency.

Termination of the Connection is initiated by the Agency on the Website; the User may request termination of the Connection by contacting the Operator at biuro@platiniumestate.pl. Upon termination of the Connection, the Agency loses access on the Website to the client’s data, including earlier notes and service history. The User’s Account is not deleted. Another Agency may request a new Connection, which requires the User’s acceptance.

Termination of access within the application does not automatically entail the deletion of copies of data lawfully processed by the Agency as a separate controller. The Agency itself provides information on the legal bases and periods of the processing of data for its own purposes.

5. Data Recipients and Transfers

The recipients of the data may include the relevant Agency once a Connection has been established, as well as the entities whose services the Operator uses to run the Website:

• IONOS SE (Germany) – server and database hosting;
• home.pl S.A. (Poland) – e-mail services;
• Cloudflare, Inc. – protection of forms against bots (Cloudflare Turnstile) and delivery of flag icons;
• OpenStreetMap Foundation – maps displayed with listings and address search for development projects;
• unpkg.com – delivery of the Leaflet map library;
• OpenAI – machine translation of content published on the Website (listing descriptions and articles) into other language versions; no User Account data are transferred for translation;
• providers of legal services and technical support – to the extent necessary to perform their services.

Materials from external providers may be embedded in listings and articles: YouTube (Google), Vimeo and Matterport (virtual tours). These providers receive technical data, e.g. the IP address, when the material is displayed and process them in accordance with their own privacy policies.

Some providers (including Cloudflare, OpenAI, Google, Vimeo and Matterport) are established in the United States. Data are transferred outside the European Economic Area on the basis of a European Commission decision finding an adequate level of protection (EU-US Data Privacy Framework) or of standard contractual clauses approved by the European Commission. Information on the safeguards applied may be obtained at biuro@platiniumestate.pl.

6. Retention Periods

• We store Account data for as long as the Account is maintained. After the Account has been closed, the e-mail address is deleted without delay, and the remaining data are stored until they are permanently deleted at the User’s request, but no longer than until the expiry of the limitation period for any claims.
• We store data concerning enquiries, correspondence, notes and Connections with Agencies for the duration of the Connection and of the maintenance of the Account, and thereafter on the same terms as Account data.
• We store messages sent via contact forms in the Operator’s mailbox for as long as necessary to handle the enquiry and any further correspondence.
• We store the audit log of operations on client data for the period during which the Account is maintained and for the limitation period for claims; once the client’s data have been permanently deleted, the log entries no longer contain the client’s first name, last name or e-mail address.
• We store server logs for no longer than 30 days, and backup copies are overwritten in a cycle not exceeding 30 days.
• We store cookies for the periods indicated in section 9.

7. Account Deletion and User Rights

The User may independently submit an instruction to delete the Account in the application settings, after logging in and confirming in the window displayed. The Account is closed without delay: it is no longer possible to log in, the e-mail address is removed from the Account (we retain only its cryptographic hash so as to be able to link any subsequent data-related request to the closed Account), and active Connections with Agencies are terminated. We permanently delete the remaining data upon a request sent to biuro@platiniumestate.pl, without undue delay and in any event within one month, and confirm the deletion by e-mail. Data held in backup copies are overwritten in a cycle not exceeding 30 days.

Deletion of the Account does not entail the deletion of data that must continue to be processed on another valid legal basis, nor of data stored independently by an Agency as a separate controller.

Data subjects have – within the limits set out in the GDPR – the right of access, the right to rectification, the right to erasure, the right to restriction of processing, the right to data portability, the right to object and the right to withdraw consent without affecting the lawfulness of processing based on consent before its withdrawal. Requests concerning the Operator should be sent to biuro@platiniumestate.pl. A complaint may also be lodged with the President of the Personal Data Protection Office.

8. Voluntary Provision of Data and Automated Decision-Making

The provision of data is voluntary; however, the first name, last name, e-mail address and password are necessary to register an Account, and data marked as mandatory in the forms are necessary to use the function concerned. The Operator does not make decisions based solely on automated processing, including profiling, which would produce legal effects concerning the User or similarly significantly affect the User (Art. 22 GDPR).

9. Cookies and External Content

The Website uses necessary cookies to operate Accounts, remember settings and ensure security. The Website does not use analytics or marketing cookies. A consent management mechanism has been implemented.

• payload-token – keeping the User logged in; up to 30 days;
• language – remembering the selected language; 365 days;
• currency – remembering the selected currency, set once the User changes the currency; 365 days;
• cookie_consent – remembering decisions regarding cookies; 180 days.

The Website uses OpenStreetMap maps, the Leaflet map library, flag icons and materials embedded from YouTube (in privacy-enhanced mode), Vimeo and Matterport in listings and articles. Public forms are protected by the Cloudflare Turnstile service. Providers may receive technical data, e.g. the IP address, when resources are retrieved.

The User may change consent settings using the “Cookie settings” button available on the Privacy Policy, Cookies Policy and Terms and Conditions pages, and may also delete cookies in the browser settings.

10. Security, Changes and Version

The Operator applies technical and organisational measures appropriate to the risk, in particular: an encrypted connection (HTTPS), storage of passwords solely in the form of a cryptographic hash, role-based access control (an Agent’s access is limited to the clients of their Agency), limits on the number of login attempts and form submissions, protection of forms against bots, an audit log of operations on client data, and regular backups.

This Policy is published on the Website. The Operator announces changes and the date on which they take effect on the Website, in accordance with applicable law.

Document version: 2.0. Effective date: 12 October 2026.