01Data controller
The controller of personal data is:
The controller has not appointed a Data Protection Officer — for any matter concerning personal data, please write to the email address above.
02Scope of data processed
The following personal data may be collected through this website:
- first name,
- email address,
- project details (floor area, location, type of development),
- any other information provided voluntarily in the form.
03Purposes and legal bases for processing
Personal data is processed for the following purposes:
- responding to enquiries sent through the contact form (Article 6(1)(b) and (f) GDPR),
- delivering services and performing contracts (Article 6(1)(b) GDPR),
- direct marketing, including sending the newsletter (Article 6(1)(a) GDPR — consent),
- meeting legal obligations, for example tax and accounting duties (Article 6(1)(c) GDPR).
04Data retention period
Personal data is retained:
- for as long as needed to fulfil the purpose, and then for 5 years from the end of the engagement or contact,
- where data is processed on the basis of consent — until that consent is withdrawn.
05Recipients of the data
Personal data may be entrusted to parties providing services to the controller, in particular:
- the hosting provider (Netlify, Netlify Inc.),
- providers of analytics and marketing tools: Google (Google Analytics 4, Google Tag Manager, Google Search Console), Microsoft (Microsoft Clarity), Dealfront/Leadfeeder (identifying companies visiting the site), CookieYes (cookie consent management),
- the contact form provider (Netlify Forms — submissions go to Netlify's servers and from there to the controller),
- accounting and legal service providers.
Because tools such as Google Analytics 4 and Microsoft Clarity are used, data may be transferred outside the European Economic Area (for example to the United States). These providers rely on GDPR-compliant mechanisms such as Standard Contractual Clauses (SCCs) or participation in the EU-U.S. Data Privacy Framework.
06Your rights
Everyone whose data is processed has the right to:
- access their data and receive a copy of it,
- rectification of their data,
- erasure of their data,
- restriction of processing,
- data portability,
- object to processing,
- withdraw consent at any time (without affecting the lawfulness of processing carried out before withdrawal).
Data subjects also have the right to lodge a complaint with the President of the Personal Data Protection Office (Poland).
07Providing data is voluntary
Providing data is voluntary, but necessary to use certain features of the site (for example the contact form or the newsletter).
01Cookies
The site uses cookies — small text files saved on the user's device. Cookies may be used for the following purposes:
- making the site work properly and remembering the user's consent choices (technical cookies, including CookieYes),
- compiling visit statistics and analysing user behaviour (analytics cookies: Google Analytics 4, Microsoft Clarity),
- identifying companies visiting the site for B2B marketing purposes (Dealfront/Leadfeeder),
- marketing and remarketing activity — only where separate consent has been given.
02Managing cookies
On a first visit the user sees a consent banner where they can accept all cookies, reject everything other than the essential ones, or adjust their choice by category. Analytics and marketing cookies are only set once consent has been given.
Consent can be changed or withdrawn at any time by clicking the cookie settings icon or link on the site, or by clearing cookies in the browser. Users can also manage cookies themselves in their browser settings. Restricting cookies may affect some features of the site.
03Third-party tools
The controller notes that the site uses third-party tools which may collect data about users automatically:
- Google Analytics 4 (Google Ireland Ltd.) — visit statistics and traffic analysis,
- Google Tag Manager (Google Ireland Ltd.) — managing scripts on the site (it does not collect data in itself),
- Microsoft Clarity (Microsoft Ireland Operations Ltd.) — user behaviour analysis, including anonymised session recordings and heatmaps; data entered into forms is masked,
- Dealfront / Leadfeeder (Liidio Oy / Dealfront Group GmbH) — identifying companies (not individuals) visiting the site from their IP address,
- CookieYes (CookieYes Ltd.) — running the consent banner and storing the user's choices.
Detailed information on how these providers process data can be found in their own privacy policies.