PL / EN / DE
+48 503 717 642
GDPR

Privacy policy

Effective from 15 October 2026

1. Data controller

The controller of your personal data is GAPBUD Sp. z o.o., Szamotulska 41, 62-081 Chyby, Poland, Tax ID (NIP) 781 198 60 27, REGON 382035436, entered in the Polish National Court Register (KRS) under no. 0000762594. For any data protection matter, contact us at waldemar.gryz@gapbud.pl or +48 503 717 642.

2. What data we process and why

Enquiries (email, phone). We process your name, email address, phone number and message to answer your enquiry and prepare an offer. The legal basis is Art. 6(1)(b) GDPR (steps taken at your request before entering into a contract) or, where the enquiry is not about a contract, our legitimate interest in handling correspondence (Art. 6(1)(f) GDPR).

Technical data. On each visit, our hosting provider's server logs your IP address, date and time, and browser details. This keeps the site secure and working (Art. 6(1)(f) GDPR).

3. Recipients

Data may only be shared with service providers acting on our behalf:

  • Wix.com Ltd. (hosting of the site, fonts and images), Israel, a country with a European Commission adequacy decision,
  • Google Ireland Limited (measuring the performance of Google Ads), only with your consent,
  • our email provider,
  • where necessary, our accountants or legal advisers.

If any of them transfers data outside the European Economic Area, this is based on the European Commission's standard contractual clauses or the EU-U.S. Data Privacy Framework. We never sell your data.

4. How long we keep data

We keep enquiry data for as long as needed to handle it, and no longer than 12 months after our last contact. If we sign a contract, we keep the data for its duration and for the period required by law, in particular tax and accounting rules. Server logs are kept for the period set by the hosting provider.

5. Your rights

You have the right to:

  • access your data and receive a copy (Art. 15 GDPR),
  • rectification (Art. 16 GDPR),
  • erasure (Art. 17 GDPR),
  • restriction of processing (Art. 18 GDPR),
  • data portability (Art. 20 GDPR),
  • object to processing based on legitimate interest (Art. 21 GDPR),
  • lodge a complaint with a supervisory authority, in Poland the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl, or the authority in your country of residence.

To exercise these rights, simply write to waldemar.gryz@gapbud.pl.

6. Voluntary provision and profiling

Providing data is voluntary, but we cannot reply without it. We make no automated decisions and do not profile visitors.

7. Cookies and Google Ads

With your consent, we use Google Ads (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to measure how our ads perform, for example whether someone who clicked an ad then called us or sent an enquiry. For this, Google sets cookies (including _gcl_au, valid for 90 days) and processes data such as your IP address, cookie identifiers and information about the ad click. The legal basis is your consent (Art. 6(1)(a) GDPR). Without consent, Google's tools are not loaded.

You can withdraw or change your consent at any time through the "Cookie settings" link in the site footer. Withdrawal does not affect the lawfulness of processing carried out before it. Google may transfer data to the USA under the EU-U.S. Data Privacy Framework. More information: policies.google.com/privacy.

Fonts and images are served from our hosting provider's servers. The hosting provider may use strictly necessary technical cookies required for the site to run securely. We store your cookie choice in your browser so that we do not ask on every visit.

8. Changes

We may update this policy, for example when our services or the law change. The current version is always available on this page.