Privacy
Applies to the waiting list on vistitio.com. Version of 10 October 2026.
We collect your email address and three answers from the form: your country, whether you want to buy, sell or both, and whether you sell as a business. Below it says plainly what for, for how long and how to get off the list. The site stores one essential cookie only (your cookie decision). Analytics and marketing tools start only after your consent in the banner.
Who the controller is
HB Digital P.S.A., ul. Kolejowa 27, 17-250 Kleszczele, Poland, VAT ID PL6030085369, company register KRS 0001211830. Contact on all data matters: [email protected]. A human answers.
Why we need your address
- The waiting list and one email about the launch. We'll write once, when Vistitio opens in your country. We don't send a newsletter or offers.
- Confirming your address. Right after you join we send one email with a link that confirms the address is yours. Until someone clicks it, the address isn't on the list and we won't write again.
On what legal basis
Your consent, that is Article 6(1)(a) GDPR. You give it by ticking the consent box in the sign-up form, and you confirm it with the link in the email. You can withdraw it at any time, without giving a reason, and the withdrawal doesn't affect what we did lawfully before.
What else we store
Along with the address we store the date you joined, your code on the list (needed to unsubscribe), where you came to the site from (for example Instagram) if the link said so, and a hash of your IP address. The hash is used only to limit how many sign-ups come from one address, so bots don't flood the list. The hash alone can't be turned back into an IP address and we don't link it to anything else. If you answer the question on the “You're on the list” page after signing up, we store your answer next to your address and use it only to design Vistitio; we delete it when you unsubscribe. If you signed up from someone else's referral link, we store that person's code next to your address and count their referrals; that person sees only the number, never the addresses. We also record page views for our own statistics: the day, the page path, language, the source from the link and the site you came from, plus a daily hash of your IP address and browser that cannot be linked across days or to you. No cookies and no third-party analytics. From the sign-up form we also store the country you chose, whether you want to buy, sell or both, whether you sell as a business, and the date you confirmed your address. We use them only to decide where to open next and what the launch email should say, and we delete them together with your address.
For every consent (joining the list, cookie decisions, unsubscribing) we store the date, the version of the text you saw, the place, a hash of the IP address and the browser name, plus a checksum of the entry. That's the proof that consent was given, required by law. We don't change or delete these entries for 5 years after withdrawal.
Who we pass data to
- The provider of the server the site and the database run on (server in Poland).
- The email provider through which the launch email goes out.
- Google (analytics) and Meta (ads), only after your consent to those cookie categories.
Nobody else. We don't sell or share addresses for marketing purposes. We don't transfer addresses from the list outside the European Economic Area; Google and Meta may process data in the USA under the European Commission's adequacy decision (Data Privacy Framework).
How long we keep it
Until Vistitio launches and for 12 months after that, and if you unsubscribe earlier, until the moment you unsubscribe. After that we delete the address from the database.
Your rights
- Access to your data and a copy of it.
- Rectification, when the address is wrong.
- Erasure of your data.
- Restriction of processing and data portability.
- Withdrawal of consent: click “Unsubscribe from the list” in the footer of our email or write to [email protected]. We unsubscribe within 24 hours.
- A complaint to the supervisory authority in your country or to the Polish UODO (Urząd Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland).
Cookies
Three categories. You decide which ones you turn on.
- Essential. One file: vistitio_zgody, up to 12 months. It remembers your cookie decision, nothing more. Consent isn't required here: without this file the site won't remember what you chose.
- Analytics. Google Analytics 4, files _ga and _ga_*, up to 13 months. The IP address is shortened, we look at aggregate data, not at individual people. Provider: Google Ireland Ltd. They start only after your consent. The _ga cookies are set for 12 months, and the data isn't used to personalise ads.
- Marketing. Meta Pixel, file _fbp, up to 3 months. Used to match Vistitio ads on Facebook and Instagram. Provider: Meta Platforms Ireland Ltd. It starts only after your consent.
You can change your consent at any time: the “Cookies” link in the footer. Withdrawing consent removes analytics and marketing files from your browser and stops them being written.
We don't profile and we don't make automated decisions. Giving your address is voluntary, but without it we can't put you on the list.