Properties. Express

Privacy Notice

How we process & use your information

Version 2.0 : Effective 30 July 2026


This Privacy Notice explains how properties.express collects, uses, protects, and shares your personal information when you use our website or submit an inquiry through it. It applies to visitors and inquirers everywhere and reflects our obligations under the EU General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP).


Who We Are

properties.express is operated jointly by two individuals acting in a professional capacity:


David Huber:
 david@properties.express

Jeremi Kucharski:
 jeremi@properties.express


David and Jeremi are joint data controllers for personal information collected through this website within the meaning of Article 26 GDPR and the Swiss FADP. They jointly determine the purposes and means of processing and share responsibility for handling requests from you concerning your data. You may contact either of them individually, or write to info@properties.express to reach both.


What Information We Collect

When you submit an inquiry through this website, you may voluntarily provide us with:
1. your full name;
2. your email address;
3. your telephone number (optional);
4. the type of inquiry you are making (buying, selling, general);
5. a specific property of interest (optional);
6. the message content you choose to write.

When you visit any page on this website, our infrastructure providers automatically process basic technical information such as your IP address, browser type, referring page, and requested URL. This information is used for security, abuse prevention, and delivering the website to your device. It is not linked to your identity by us.
The inquiry form is protected by Cloudflare Turnstile, which performs a spam check when the form is submitted. Turnstile is designed to be privacy-preserving and does not use tracking cookies.


Why We Process Your Information (Legal Bases)

We process your information for the following specific purposes, each on the legal basis identified:

1. To respond to your inquiry.

Legal basis: GDPR Article 6(1)(b): processing necessary to take steps at your request prior to entering a contract. When you send us an inquiry about a property or ask us to help you find one, responding is exactly what you have asked for.


2. To share your inquiry with a licensed real estate professional.

Legal basis: GDPR Article 6(1)(b): processing necessary for the pre-contractual steps you have requested. properties.express is a marketing and referral platform. To respond meaningfully to a property inquiry, we may forward your details to the licensed real estate professional responsible for the property or the market you have expressed interest in. The consent box on the inquiry form acknowledges that you understand this before submitting.


3. To operate and secure the website.

Legal basis: GDPR Article 6(1)(f): our legitimate interest in providing a working, protected service. This covers technical logs, spam prevention via Turnstile, and abuse controls. Our interest here is to keep the website functional and safe; we believe this does not override your rights.


4. To keep records and comply with legal obligations.

Legal basis: GDPR Article 6(1)(c): compliance with a legal obligation. Where we are required to retain correspondence, tax records, or evidence for legal proceedings, we do so for the periods the law requires.

We do not currently send marketing emails and do not process your information for any marketing purpose. If we introduce marketing communications in the future, we will do so only on the basis of your specific, freely given, prior consent.


Who Receives Your Information

Your information may be shared with the following categories of recipients:

Licensed real estate professionals.
When your inquiry concerns a specific property or market, we may forward your details to the licensed real estate professional, agency, developer, or seller responsible for that property so they can contact you directly. These professionals are independent controllers of your data once they receive it and process it under their own privacy policies.

Service providers acting as processors on our behalf.
The infrastructure that makes this website work is provided by a small number of third parties. They process your data only on our instructions:
1.Cloudflare, Inc. (website hosting, security, CDN, Turnstile anti-spam);
2.Resend, Inc. (transactional email delivery for inquiry notifications);
3.Google LLC (Google Workspace / Gmail, used for the mailboxes that receive inquiries).

We do not sell your personal information. We do not trade it. We do not share it with third parties for their own marketing purposes.


International Transfers

Some of the service providers listed above are established outside the European Economic Area and Switzerland. Where personal data is transferred internationally, the transfer is protected by appropriate safeguards, which typically include the European Commission's Standard Contractual Clauses (SCCs) supplemented, where applicable, by the Swiss addendum. You may request a copy of these safeguards by contacting info@properties.express.


How Long We Keep Your Data

We retain personal data only for as long as we need it to fulfil the purposes for which we collected it, or as required by law:
1. Inquiry content and correspondence: kept while your inquiry is active and for up to 12 months after our last meaningful contact, then deleted, unless a longer period is needed to answer follow-up questions or to defend legal claims.
2. Consent and acknowledgement records: kept for the duration of the related processing and for a further period of up to 3 years after processing ends, so that we can demonstrate consent if challenged.
3. Security and technical logs: kept for a short defined period by Cloudflare (typically 30 days) for abuse prevention.
4. Records required by law (for example, correspondence relevant to accounting or legal proceedings): kept for the period the applicable law requires.

When these periods end, we delete or anonymise the data.


Your Rights

Under the GDPR and the Swiss FADP, you have the following rights concerning your personal information: 1. Right of access: to know what data we hold about you and to receive a copy.
2. Right to rectification: to have inaccurate data corrected.
3. Right to erasure: to have your data deleted where the legal conditions apply.
4. Right to restriction: to have processing limited in certain circumstances.
5. Right to data portability: to receive your data in a machine-readable format.
6. Right to object: to object to processing based on legitimate interest.
7. Right to withdraw consent: where consent is the legal basis, you can withdraw it at any time without affecting the lawfulness of processing that took place before.
8. Right not to be subject to automated decision-making: see below.

To exercise any of these rights, email info@properties.express. We will respond within one month, or explain why we need longer. Where your inquiry has been shared with an independent real estate professional, you may need to contact them directly for data they now hold.


Right to Complain to a Supervisory Authority

You always have the right to lodge a complaint with a data protection supervisory authority. You may complain to any authority competent in the country where you live, work, or where you believe your rights have been infringed. For properties.express, the two most directly relevant authorities are:

1. Poland: UODO (Urząd Ochrony Danych Osobowych): uodo.gov.pl
2. Switzerland: FDPIC (Federal Data Protection and Information Commissioner): edoeb.admin.ch

We would appreciate the chance to address any concerns directly before you complain externally, but you are under no obligation to contact us first.


Automated Decision-Making

We do not use automated decision-making, including profiling, that produces legal or similarly significant effects concerning you. Inquiry submissions pass through an anti-spam check via Cloudflare Turnstile, but this is a technical spam filter, not a decision about you.


If You Do Not Provide the Requested Information

Providing the information on the inquiry form is voluntary. However, without at least your name, email address, and message we will be unable to respond to your inquiry.


Data Security

Your inquiry data is transmitted over encrypted connections (HTTPS) and stored using the infrastructure of the service providers listed above. We take reasonable technical and organisational measures to protect your information from unauthorised access, misuse, loss, disclosure, alteration, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.


Changes to This Notice

We may update this Privacy Notice from time to time. When we make material changes, we will update the version number and effective date at the top of the page. If the change affects how we process your data in a way that would significantly impact you, we will take reasonable steps to inform you before the change takes effect.


Contact

For any questions about this Privacy Notice, or to exercise your rights, please contact us: info@properties.express
david@properties.express
jeremi@properties.express