Privacy Policy

1. Data controller

The controller of your personal data is:

2. Personal data we collect

We collect personal data solely for the purpose of handling your enquiry and communication. The data we collect includes:

• Full name — required for identification
• Email address — required for a reply
• Phone number — optional, for faster contact
• Company / organisation name — optional, enquiry context
• Project country — required to define the service scope
• Project description — required to prepare a response

Data is collected exclusively through the contact form on our website.

Cookies

Our website uses cookies for traffic analysis (Google Analytics, Google Tag Manager) and cookie management (Cookiebot). Detailed information can be found in the cookie banner on the site.

3. Purpose of processing

We process your personal data for the following purposes:

• Responding to your enquiry
• Preparing an offer or project quote
• Establishing a business relationship
• Conducting commercial correspondence
• Fulfilling legal obligations (taxes, accounting)

4. Legal basis for processing

Processing of your personal data is based on:

• Consent (Art. 6(1)(a) GDPR) — provided in the contact form
• Contract (Art. 6(1)(b) GDPR) — if we enter into a service agreement
• Legal obligation (Art. 6(1)(c) GDPR) — tax and accounting requirements

Data retention period

• Contact form data is retained for 3 years from the date the enquiry is received
• Contract-related data is retained for 5 years from the end of the accounting year (VAT Act requirement)
• After this period, data is deleted or anonymised

5. Data security

We apply appropriate technical and organisational measures to protect your personal data:

• Encrypted communication (HTTPS)
• Protection against unauthorised access
• Secure storage in protected databases
• Access restricted to authorised personnel only
• Regular security audits and testing

Data sharing

Your data is not shared with third parties, except:

• IT and mailing service providers — under a data processing agreement
• Public authorities — where required by law (taxes, investigations)
• Subcontractors — only with your consent and where involved in delivering your project

All data recipients are bound by confidentiality obligations.

6. Your rights

You have the right to:

• Access — you may request a copy of your data
• Rectification — you may request correction of inaccurate data
• Erasure — you may request deletion of your data (right to be forgotten)
• Restriction of processing — you may request suspension of processing
• Data portability — you may receive a copy of your data in a structured format
• Objection — you may object to processing for marketing purposes
• Withdrawal of consent — you may withdraw consent previously given

To exercise any of these rights, please contact us (see contact below).

Complaints to the supervisory authority

If you believe that the processing of your data violates GDPR, you have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO):

• Address: ul. Stawki 2, 00-193 Warsaw, Poland
• Website: uodo.gov.pl

7. Contact

If you have questions about this privacy policy or wish to exercise your rights, please contact us:

We will respond to your enquiry within 14 working days.

---

Last updated: 16 March 2026

Return to homepage or contact us.