Data controller
The controller of your personal data is Hazels sp. z o.o., ul. Zabawa 28, Kraków.
For privacy-related enquiries, contact us at biuro@hazels.pl or +48 536 702 703.
Scope of this policy
This privacy policy explains how we process personal data and how we use cookies and similar technologies when you use the Hazel website (Polish and English versions) and the contact forms available on the site.
Categories of data we process
Depending on how you use the site, we may process in particular:
- form data: first name, phone number, email address, message content and, optionally, additional details submitted in step two (e.g. preferred contact method, amount, investment horizon, purpose of financing, property information);
- calculator inputs submitted with an investor enquiry: amount, term and selected LTV level;
- records of consents given (including contact consent and, where applicable, marketing consent) together with the date;
- technical data related to your visit, such as IP address, date and time of the request, browser type, operating system and page URL, where recorded in server logs;
- interface language and your cookie or similar technology preferences.
Purposes and legal bases
We process personal data for the following purposes:
- handling form submissions and communicating by phone or email - based on your consent (Art. 6(1)(a) GDPR) and steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR);
- sending commercial information about Hazel's offer by electronic or phone means - only if you give separate, voluntary marketing consent (Art. 6(1)(a) GDPR);
- ensuring security and proper operation of the site, including abuse prevention - based on our legitimate interests (Art. 6(1)(f) GDPR);
- traffic statistics, analytics and measuring marketing performance - based on your consent in the cookie banner (Art. 6(1)(a) GDPR), where such tools are enabled;
- establishing, exercising or defending legal claims - based on our legitimate interests (Art. 6(1)(f) GDPR).
Providing form data is voluntary but necessary to respond to your enquiry to the extent required by each form.
Recipients of data
Data may be disclosed to processors acting on our instructions, in particular hosting and IT infrastructure providers, analytics and advertising tools (if you consent) and parties supporting enquiry handling.
We share data only to the extent necessary for the stated purposes and on the basis of data processing agreements or other appropriate safeguards required by law.
Transfers outside the EEA
Some technology providers we use may be located outside the European Economic Area (e.g. the United States). Where this occurs, transfers are made using GDPR mechanisms such as the European Commission's standard contractual clauses or other appropriate safeguards.
Retention periods
Form data is kept for as long as needed to handle your enquiry and then for the limitation period for potential claims, or until you successfully object or withdraw consent, depending on the legal basis.
Data processed on the basis of marketing consent is kept until that consent is withdrawn.
Server logs are kept for up to 12 months unless longer retention is required to establish, pursue or defend claims.
Cookie preferences are stored in your browser's local storage until you change or delete them.
Security
We apply organisational and technical measures appropriate to the risk, including HTTPS encryption, restricting access to authorised personnel and logging consents given.
Despite these measures, no method of transmission over the internet is completely secure.
Your rights
You have the right to:
- access your data and receive a copy;
- rectify inaccurate data;
- erase data;
- restrict processing;
- data portability;
- object to processing based on legitimate interests;
- withdraw consent at any time without affecting the lawfulness of processing before withdrawal;
- lodge a complaint with the Polish supervisory authority (President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland).
To exercise your rights, contact us at biuro@hazels.pl.
Cookies and similar technologies
Cookies are small files stored on your device. We also use browser local storage to remember your privacy preferences.
We use the following categories:
- Strictly necessary - required for the site to function, remembering your language choice (cookie: hazel-lang) and your cookie decision (local storage: hazel-consent). These are always active because the site cannot work properly without them.
- Analytics - used to create anonymous statistics about visits and behaviour (e.g. Google Analytics or Google Tag Manager, if configured). Enabled only after you consent in the banner.
- Marketing - used to measure advertising performance and communication effectiveness (e.g. Meta Pixel, if configured). Enabled only after you consent in the banner.
You can accept, reject or change analytics and marketing cookies at any time via the cookie banner or the "Cookie settings" link in the footer.
You can also control cookies in your browser settings. Restricting necessary cookies may affect how the site works.
Automated decision-making and profiling
We do not make decisions producing legal effects concerning you or similarly significantly affecting you based solely on automated processing, including profiling.
Changes to this policy
We may update this policy when laws, site features or tools change. The current version is always published on this page with the effective date.
Last updated: 25 October 2026.