Home page

Privacy policy

Effective from 8 October 2026

This policy describes how the data of people who open property proposals prepared by Mateusz Gancarz, Genti and shared on this website is processed.

1. Data controller

The controller of your personal data is Mateusz Gancarz, Genti. The controller prepared the proposal, sent you the link to it and decides what happens to the information about how it is read. In this document we refer to ourselves as “the controller”.

For matters relating to personal data, you can contact the controller at: mateusz@marketingagenta.pl, 535557158.

2. Processor: Listingo

This website runs on Listingo (getlistingo.com), operated by Genti sp. z o.o., ul. Niemczańska 39/6, 50-561 Wrocław, Poland, Polish tax ID (NIP) 8992964282. Listingo is a processor: it processes the data of people viewing the proposal only on the controller’s instructions and under a data processing agreement (Article 28 GDPR).

The processing covers storing proposals, hosting the website, collecting and storing reading statistics and property ratings, and sending notifications to the controller. Listingo does not use this data for its own purposes, does not share it with others and uses only the sub-processors listed in section 11. Contact Listingo about data matters at mateusz@marketingagenta.pl.

3. Purposes and legal bases of processing

We process data only for the purposes listed below. Providing contact details is voluntary, but without them we cannot reply to your enquiry. Data is not sold and is not used for automated decision-making.

Proposal reading statistics
Data
Time spent on individual parts of the proposal, the order in which they were read, page scroll depth, clicks on the contact buttons (WhatsApp, phone, email), device type, browser window size, the date and time of the visit, and a hash of the IP address and browser.
Legal basis
Article 6(1)(f) GDPR, i.e. the controller’s legitimate interest: checking that the proposal has reached the recipient and tailoring the conversation to what interested them.
Retention period
12 months from the last time the proposal was opened. Each new opening restarts this period.
Property ratings and comments
Data
Marking a property “I like it” or “Not for me”, any comment you write, the date and time, and a hash of the IP address and browser.
Legal basis
Article 6(1)(b) GDPR (steps taken at your request before entering into a contract: selecting further properties) and Article 6(1)(f) (the controller’s legitimate interest: better matching the proposal).
Retention period
12 months from the last change of the rating. You can withdraw it earlier by clicking the same button again.
Contact about the proposal
Data
The data you provide when calling or writing to the controller (e.g. name, phone number, email address, message content).
Legal basis
Article 6(1)(b) GDPR (steps taken at your request before entering into a contract) and Article 6(1)(f) (replying to your enquiry).
Retention period
For as long as your enquiry and any further cooperation are handled, and then until the limitation period for claims expires.
Google Maps
Data
IP address, browser and device data, and identifiers stored by Google, sent to Google when a map is displayed.
Legal basis
Article 6(1)(a) GDPR and the applicable rules on cookies, i.e. your consent to the “Marketing” category. You can withdraw it at any time.
Retention period
Until you withdraw your consent. Further processing by Google is governed by its own privacy policy.
Ad measurement and targeting (Facebook Pixel)
Data
Identifiers stored in cookies (_fbp, _fbc), IP address, browser and device data, and information that you visited the page, sent to Meta Platforms.
Legal basis
Article 6(1)(a) GDPR and the applicable rules on cookies, i.e. your consent to the “Marketing” category. You can withdraw it at any time.
Retention period
Until you withdraw your consent. Pixel cookies expire after 90 days, and Meta’s retention of data is governed by its privacy policy.

4. What we record when you open a proposal

While you read a proposal, we record:

  • the time spent on individual parts of the page and the order in which you read them,
  • the page scroll depth,
  • the device type (computer, tablet, phone) and browser window size,
  • clicks on the contact buttons (WhatsApp, phone, email) and which property they were next to, without the content of messages,
  • the date and time of the visit.

For each property you can mark “I like it” or “Not for me” and add a comment. We only record them when you click or send them yourself; the controller sees them in their dashboard and may receive an email notification about them. You can withdraw a rating by clicking the same button again.

We do not record your screen or session, and apart from a comment you send yourself, we do not record what you type. Time is only counted while the tab is active and you are interacting with it. The data helps the controller know which properties interested you most and what is worth discussing. We do not build an advertising profile from it and do not combine it with other agents’ proposals.

5. Recognising returning visits

To tell a repeat visit by the same person from a new visit, a cryptographic hash is created from the IP address and browser name using a secret key. The IP address itself is not stored. Reading measurement does not use cookies and does not store any information on your device.

6. Cookies and consent

On your first visit, we show a cookie consent window. You can accept all categories, choose only some or refuse. Optional categories are switched off by default. Necessary cookies are always active, because without them the site cannot remember your choice.

We store your decision in your browser’s storage (key ag-cookies) together with the date it was made. It remains until you clear your browser data. You can change or withdraw your consent at any time here: . Once you withdraw consent, marketing services stop working immediately.

We load fonts from our own server, so your IP address is not sent to font providers.

7. Google Maps

We show a Google map next to the properties. Until you consent to the “Marketing” category, you see a “Show map” button instead of the map and nothing is loaded from Google. After you consent, Google receives your IP address, may set its own cookies and may process data, including outside the European Economic Area, under its own privacy policy. In this respect, Google is a separate controller.

8. Facebook Pixel

Proposals may use the Facebook Pixel (Meta), which lets the controller measure the effectiveness of ads and show them to people who have visited the site. The Pixel is not currently enabled on this website; if the controller enables it, this section will apply.

The Pixel only starts after you consent to the “Marketing” category. Meta then receives: identifiers from cookies (_fbp and _fbc), your IP address, browser and device information, and information that you visited the page. We do not send Meta the content of your messages or your contact details.

For the collection and transfer of this data, the controller and Meta Platforms Ireland Limited are joint controllers. The controller is responsible for informing you about the Pixel and obtaining your consent, and Meta for further processing under its own privacy policy, including in the USA. After you withdraw consent, we delete the Pixel cookies and stop sending Meta data about your visits.

9. Contacting the controller

When you call, email or send a WhatsApp message, your data (e.g. name, phone number, message content) goes directly to the controller and is used to discuss your purchase. Listingo does not see it. WhatsApp belongs to Meta Platforms, which processes data under its own privacy policy as a separate controller.

10. How long we keep data

  • reading statistics and contact clicks: 12 months from the last time the proposal was opened (clicks: from when they were recorded); they are deleted earlier if the controller deletes the proposal or their account,
  • property ratings and comments: 12 months from the last change, or until the proposal is deleted,
  • contact details: for as long as your enquiry and any further cooperation are handled, and then until the limitation period for claims expires,
  • cookie consent: until you clear your browser data or change it,
  • Facebook Pixel cookies: up to 90 days or until you withdraw consent.

11. Recipients of data and providers

Listingo processes data on the controller’s behalf (section 2). The sub-processors Listingo uses to process data are:

  • Supabase, database, servers in Frankfurt am Main (European Union),
  • Hostinger, the server the website loads from,
  • Resend, sending email notifications to the controller about proposals being opened, ratings and comments,
  • Anthropic (Claude model), the assistant the controller uses to prepare proposals: when preparing another proposal for you, the assistant receives your ratings and comments.

Otherwise, data is shared with Google (maps) and Meta (Pixel and WhatsApp) only as described in sections 7–9, and for maps and the Pixel only with your consent.

12. Server logs and security

The hosting provider keeps standard server logs (IP address, time and type of request) to ensure security and diagnose failures. Connections to the website are encrypted (HTTPS).

13. Your rights

You have the right to:

  • access your data and obtain a copy of it,
  • have your data rectified or erased,
  • restrict processing,
  • object to processing based on legitimate interest, on grounds relating to your particular situation,
  • withdraw consent at any time, without affecting the lawfulness of processing before withdrawal,
  • lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence, place of work or of the alleged infringement (for example the Spanish Data Protection Agency, AEPD, or the Polish President of the Personal Data Protection Office, UODO).

To exercise these rights, write to the controller at mateusz@marketingagenta.pl. You can also contact Listingo (mateusz@marketingagenta.pl), which will forward your request to the controller.

14. Contact for personal data matters

Mateusz Gancarz, Genti, mateusz@marketingagenta.pl, 535557158.