1. Who we are
The controller of your personal data is Easy Mortgage Sp. z o.o., a company registered in Poland under KRS 0001064588, licensed by the Polish Financial Supervision Authority (KNF) and operating as a strategic partner of NOTUS FINANSE S.A.
Registered office: 30-347 Kraków, ul. Wadowicka 7
NIP: 6793280315 | REGON: 526712420
Email: kontakt@easymortgage.pl
Phone: +48 579 073 844
"We", "us" and "our" in this policy mean Easy Mortgage Sp. z o.o.
2. What data we collect
Data you give us directly
When you complete our eligibility form, request a property brief, or contact us:
- Identity and contact data - first name, last name, email address, phone number.
- Financial and eligibility data - monthly income and currency, employment type (permanent contract, B2B, other), own contribution, credit history status, purchase budget and goal.
- Residency data - nationality and residence permit status (Karta Pobytu, EU citizenship, etc.).
- Location data - the city or region where you intend to buy.
- Anything else you choose to tell us in a message, a call, or a consultation.
Data we collect automatically
- Technical data - IP address, browser type and version, and the date and time of your submission. We record these for security and fraud prevention.
- Referral source - which website or search engine sent you to us (for example Google, an AI answer engine, or a social platform). We use this only to understand which channels work; it does not identify you personally.
- Which page you submitted from - so that the adviser who calls you already knows your situation and does not have to ask you to repeat yourself.
3. Why we use your data, and on what legal basis
Under the GDPR we must have a lawful basis for every use of your data. Here is ours:
| What we do | Why | Legal basis (GDPR) |
|---|---|---|
| Assess your mortgage eligibility and prepare your report | To provide the service you asked for | Art. 6(1)(b) - steps taken at your request before entering a contract |
| Contact you by phone, SMS or email about your enquiry | To advise you and arrange a consultation | Art. 6(1)(b) and Art. 6(1)(a) - consent |
| Send a one-time PIN to your phone | To confirm your number is real, so we do not waste your time or ours | Art. 6(1)(f) - legitimate interest in preventing fraud and false submissions |
| Send appointment reminders before your consultation | So you do not miss the call you booked | Art. 6(1)(b) - performance of the service |
| Pass your case to a lender or to NOTUS FINANSE S.A. | To obtain an actual mortgage offer for you | Art. 6(1)(a) - your explicit consent, given at the point of submission |
| Keep records of advice given | Because financial intermediaries are legally required to | Art. 6(1)(c) - legal obligation |
| Measure which pages and channels bring us enquiries | To improve the website | Art. 6(1)(f) - legitimate interest in running our business |
Where we rely on consent, you can withdraw it at any time (see section 7). Withdrawing consent does not affect anything we lawfully did before you withdrew it.
4. Who we share your data with
We do not sell your data. We never have and we never will. We share it only with the parties below, and only to the extent needed:
| Recipient | What they receive | Why |
|---|---|---|
| NOTUS FINANSE S.A. | Your enquiry and financial profile | Our strategic partner; they hold the lender relationships needed to secure your offer |
| Banks and lenders | Only what a specific lender needs for your application | To obtain a mortgage decision - only with your consent, and only lenders relevant to your case |
| Our IT service providers | Data passing through our systems | Website hosting, email delivery, CRM, SMS delivery, appointment booking, workflow automation |
| Our accountants and legal advisers | Only where genuinely necessary | Professional advice and statutory compliance |
| Public authorities | Only what the law compels | Where we are legally obliged to disclose |
Every IT provider we use is bound by a data processing agreement requiring them to act only on our instructions and to keep your data secure.
Transfers outside the EEA
Some of our technology providers may process data outside the European Economic Area. Where that happens, the transfer is protected by the European Commission's Standard Contractual Clauses or an adequacy decision. You can request a copy of these safeguards by emailing us.
5. How long we keep your data
- Enquiries that do not proceed - up to 3 years from your last contact with us, in case you come back to us.
- Clients whose mortgage we arranged - for the period required by financial services and accounting law, which is generally 5 years from the end of the tax year in which the service was completed.
- PIN verification codes - 10 minutes, then automatically overwritten.
- Technical logs - typically 12 months.
After these periods, we delete or irreversibly anonymise your data.
6. Cookies and similar technologies
Our website uses only what is necessary for it to function, plus limited measurement of how visitors reach us. We record the website that referred you (for example a search engine) in your browser's session storage, which is erased as soon as you close the tab.
We do not use advertising cookies and we do not build advertising profiles of you. If we introduce analytics or marketing cookies in future, we will ask for your consent first and update this policy.
7. Your rights
Under the GDPR you have the right to:
- Access - ask what data we hold about you and receive a copy.
- Rectification - have inaccurate data corrected.
- Erasure - ask us to delete your data, where we have no overriding legal reason to keep it.
- Restriction - ask us to pause processing while a dispute is resolved.
- Portability - receive your data in a machine-readable format, or have it sent to another provider.
- Object - object to processing based on our legitimate interests, including any direct marketing.
- Withdraw consent - at any time, without giving a reason.
To exercise any of these, email kontakt@easymortgage.pl. We will respond within one month. There is no charge.
If you are unhappy with how we have handled your data, you can complain to the Polish supervisory authority: Prezes Urzędu Ochrony Danych Osobowych (President of the Personal Data Protection Office), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl. We would appreciate the chance to put things right first.
8. Automated decision-making
Our website calculates an indicative Mortgage Readiness Score from the figures you enter. This is a rough guide only. It is not a lending decision, and no decision about you is made by a machine alone. Every case is reviewed by a human adviser, and every actual mortgage decision is made by a bank under its own criteria.
9. Security
Your data travels to us over an encrypted connection. Access to our CRM is restricted to the advisers who need it. Phone numbers are verified by one-time SMS PIN to reduce fraudulent submissions. No system is perfectly secure, but we take these obligations seriously and review them regularly.
10. Children
Our services are for adults. We do not knowingly collect data from anyone under 18. If you believe a child has submitted data to us, contact us and we will delete it.
11. Changes to this policy
If we change how we handle your data, we will update this page and change the "last updated" date at the top. Where the change is significant, we will contact you directly.
12. Contact
Easy Mortgage Sp. z o.o.
KRS 0001064588 | Licensed by the KNF
Strategic partner of NOTUS FINANSE S.A.
Email: kontakt@easymortgage.pl
Phone: +48 579 073 844