Privacy policy

Data controller

The controller of your personal data is the company listed below. For any matter concerning your personal data, email or call us.

What data we process

From the contact form: your name and phone number and, if you provide them, your email address, the type of work and your message. We also record which language version of the site the enquiry came from, so we can reply in your language.

If you call us or write by email or messenger, we process the data you give us yourself: phone number, account name, content of the conversation.

Providing data is voluntary, but without your name and phone number we cannot answer your enquiry.

Purpose and legal basis

We process data in order to:

• answer your enquiry, arrange a visit and prepare an estimate — based on your consent (Art. 6(1)(a) GDPR) and to take steps at your request before entering into a contract (Art. 6(1)(b) GDPR);
• conclude and perform a renovation or design contract — Art. 6(1)(b) GDPR;
• keep accounting and tax records — our legal obligation (Art. 6(1)(c) GDPR);
• establish, pursue or defend legal claims — our legitimate interest (Art. 6(1)(f) GDPR).

How long we keep data

• an enquiry that did not lead to a contract — up to 12 months after the last contact;
• data related to a contract — for the duration of the contract, then as long as accounting rules require: 5 years from the end of the year in which the tax payment deadline expired;
• if a dispute or proceedings are under way — until they end.

If you withdraw your consent before a contract is signed, we will delete the enquiry data.

Who we share data with

We do not sell data or share it with other companies for marketing. Enquiries are read only by authorised persons acting on behalf of the controller.

Data may be passed to companies that provide technical services to us, and only to the extent needed for those services:

• Netlify, Inc. (USA) — website hosting and handling of the contact form;
• Apple (iCloud service) — the mailbox that receives enquiries.

We may also share data with public authorities where the law requires it.

Transfers outside the European Economic Area

The providers listed above may process data outside the EEA, including in the USA. Such transfers rely on the mechanisms of Chapter V GDPR, in particular the standard contractual clauses approved by the European Commission. You can get a copy of these safeguards by writing to us.

Your rights

You have the right to:

• access your data and receive a copy;
• have your data corrected;
• have your data erased;
• restrict processing;
• data portability;
• object to processing based on our legitimate interest;
• withdraw consent at any time — this does not affect the lawfulness of processing before the withdrawal;
• lodge a complaint with the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warszawa).

To exercise these rights, write to the email address in section 1. We do not make automated decisions or use profiling.

Cookies and technical data

The site does not use cookies or analytics tools. The hosting server only logs technical data about visits (such as IP address and browser type) to keep the site secure and working properly (Art. 6(1)(f) GDPR).