Documents
Privacy policy
This page explains what personal data we collect through this website, why, who we share it with and what rights you have. The website does not use cookies.
1. Data controller
The controller of your personal data is REA Asset Management, ul. Jana Czeczota 31, 02-607 Warsaw, Poland ("REA", "we"). For any matter concerning personal data, write to biuro@rea-am.com or by post to our registered address.
2. What data we process
When you submit the contact form, we process the data you provide: name, company, email address, phone number, selected topic and message. Together with the submission we store the date it was sent and the IP address it was sent from.
On every visit the server records standard technical data: IP address, date and time, the page requested, the response code and browser information (user agent).
3. Purposes and legal bases
- Responding to your enquiry sent via the form or by email: Art. 6(1)(a) GDPR (the consent you give in the form) and Art. 6(1)(f) GDPR (our legitimate interest in handling correspondence). Where the enquiry concerns entering into a contract, also Art. 6(1)(b) GDPR.
- Preventing abuse and spam (IP address, submission rate limits) and keeping the website secure and running (server logs): Art. 6(1)(f) GDPR.
- Establishing, exercising or defending legal claims, where necessary: Art. 6(1)(f) GDPR.
4. Who we share data with
We do not sell data or share it for marketing. Access is limited to service providers that process data on our behalf under a data processing agreement:
- the website hosting and technical support provider (Enginearch), whose servers in Poland run the website and store submissions;
- Microsoft Ireland Operations Ltd. (Microsoft 365), through which form submissions are sent and delivered to our mailboxes.
5. Transfers outside the EEA
Microsoft may also process data outside the European Economic Area, including in the United States. Such transfers rely on the European Commission's adequacy decision (EU-U.S. Data Privacy Framework) and on standard contractual clauses approved by the Commission. You can request a copy of these safeguards at the address given in section 1.
6. How long we keep data
- Form submissions and correspondence: for as long as needed to respond and continue the conversation, and then no longer than 12 months after the last contact, unless longer retention is necessary to enter into or perform a contract or to defend legal claims.
- Server logs: no longer than 90 days.
If you withdraw your consent or object, we will delete the data earlier unless we have another legal basis to keep it.
7. Your rights
You have the right to access your data, to have it rectified, erased or its processing restricted, to data portability and to object to processing based on our legitimate interest. You can withdraw your consent at any time by writing to biuro@rea-am.com; this does not affect the lawfulness of processing before withdrawal.
You also have the right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl).
8. Is providing data required
Providing data is voluntary. Without your name, email address and message, however, we cannot respond to an enquiry sent via the form. We do not make automated decisions about you or profile you.
9. Cookies and similar technologies
The website does not use cookies or any analytics, advertising or tracking tools. Fonts and images are served from our own server, without calls to third-party providers.
The browser's session storage (sessionStorage) holds only a counter of login attempts to the investor portal, which the portal needs to work. It does not identify you and is cleared when you close the tab. The "Get directions" link opens Google Maps in a new tab only when clicked; from then on Google's privacy policy applies.
10. Changes to this policy
We may update this policy when our processing or the law changes. The current version is always available on this page.
Effective from 29 October 2026.