Privacy Policy
Processing of personal data: what we hold, why, for how long, and your rights.
Controller
The controller for the processing of personal data described here is Kandyb Studio, owner Paweł Kandybowicz, ul. Żytnia 16/8, 01-014 Warszawa, Poland, support@kandyb-studio.eu. We are not required to appoint a data protection officer; please send requests to that address.
What we process
- Your email address, for the order confirmation, delivery of the report, status messages and support.
- The plot details you submit: address text, coordinates, parcel identifier (Flurstückskennzeichen) and municipality.
- The report itself and the files generated from it.
- Server logs: IP address, time, requested path and browser identification.
Purposes and legal bases
- Ordering, producing, delivering and supporting the report: performance of the contract, Article 6(1)(b) GDPR.
- Accounting and tax records: legal obligation, Article 6(1)(c) GDPR.
- Secure operation, debugging and abuse prevention: legitimate interests, Article 6(1)(f) GDPR.
Processors
Two providers process data on our behalf. OVH SAS runs the server that hosts the application and the reports, located in France inside the EU. Hostido runs the mailbox and the outgoing mail for the grund-check.de domain, located in Poland inside the EU. We do not transfer data outside the EU.
Third-party content your browser loads
When the map on the home page loads, your browser fetches content directly from third parties: map tiles from the OpenStreetMap Foundation at tile.openstreetmap.org, optionally tiles from Esri/ArcGIS or CARTO if you switch the view, and the Leaflet map library from unpkg.com. Those providers receive your IP address and your browser's technical details, because delivery is impossible without them. We pass them nothing else.
Address search and parcel lookup
Address search and parcel matching run through our own server. It queries Nominatim from the OpenStreetMap Foundation and Brandenburg's official geodata services, and sends only the search text or the coordinates. Your IP address is not part of those requests.
Retention
The report, the private link and the email address stored with it are deleted automatically after 90 days. Server logs are deleted after 14 days. Accounting records are kept for as long as tax law requires.
No advertising, no sale, no automated decisions
Data is not sold to third parties. We run no analytics tool and no advertising technology on the site, and we share nothing with advertising networks. There is no automated decision-making that produces legal effects concerning you, no profiling and no scoring of people: the report is built from public data about a plot of land, not from an assessment of you.
Your rights
- Access to the data we hold about you, Article 15 GDPR.
- Rectification of inaccurate data, Article 16 GDPR.
- Erasure, Article 17 GDPR, unless a retention duty applies.
- Restriction of processing, Article 18 GDPR.
- Data portability, Article 20 GDPR.
- Objection to processing based on legitimate interests, Article 21 GDPR.
Any consent you have given can be withdrawn at any time with effect for the future. Write to support@kandyb-studio.eu with enough detail for us to identify your order.
Complaints to a supervisory authority
You can complain to a data protection supervisory authority. At the controller's seat that is the President of the Personal Data Protection Office (UODO) in Poland. In Germany the authority of the federal state where you live is responsible.
We update this policy when the processing changes; the date at the end of the page shows the current version.