1. Data administrator
The administrator of your personal data is Greenframe sp zoo, with its registered office at KONDUKTORSKA, 3B, WARSZAWA, 00-775, POLAND, email: Greenframe_sp_zoo@proton.me.
As a data administrator operating in Poland, Greenframe sp zoo complies with obligations imposed under GDPR and Polish personal data protection legislation, including cooperation with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych — UODO), the supervisory authority in Poland.
2. Scope and sources of data
We may process the following categories of personal data:
- identification data (e.g. full name);
- contact data (e.g. email address, telephone number, correspondence address);
- data related to an inquiry or project (e.g. property location, scope of renovation works, message content);
- technical data collected when you use our website (e.g. IP address, browser type, device information, cookies).
Data is obtained directly from you — for example when you submit a contact form, send an email, or communicate with us by phone — or automatically through cookies and similar technologies when you browse this website.
3. Purposes and legal bases of processing
We process personal data for the following purposes, based on the legal grounds set out in Article 6 of the GDPR:
- Handling inquiries and preparing offers — legitimate interest of the administrator (Art. 6(1)(f) GDPR) or steps prior to entering into a contract at your request (Art. 6(1)(b) GDPR);
- Performance of contracts for renovation, finishing, cladding or insulation works — performance of a contract (Art. 6(1)(b) GDPR);
- Compliance with legal obligations — including tax and accounting duties under Polish law, such as the Accounting Act (Ustawa o rachunkowości) and tax regulations (Art. 6(1)(c) GDPR);
- Establishing, exercising or defending legal claims — legitimate interest of the administrator (Art. 6(1)(f) GDPR);
- Website operation, security and analytics — legitimate interest in ensuring proper functioning and security of the website (Art. 6(1)(f) GDPR), or your consent where required (Art. 6(1)(a) GDPR).
4. Cookies and similar technologies
Our website uses cookies and similar technologies. Under the Polish Telecommunications Law (Prawo telekomunikacyjne), in particular Article 173, storing or accessing information on your device requires your consent, except for cookies strictly necessary for the provision of an electronic service.
We use the following types of cookies:
- Essential cookies — required for core website functions and security;
- Functional and analytical cookies — used only if you accept them via the cookie banner, to improve user experience and understand how the site is used.
You may manage cookie preferences through the banner displayed on the website or through your browser settings. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.
5. Data retention
Personal data is stored only for the period necessary to achieve the purposes for which it was collected, or for the period required by applicable Polish and EU law. In particular:
- inquiry and correspondence data — until the inquiry is resolved and for a reasonable period thereafter for follow-up purposes;
- contract-related data — for the duration of the contract and thereafter for the limitation period for claims and statutory retention periods for accounting and tax documentation;
- cookie-related data — according to the lifespan of individual cookies or until consent is withdrawn.
6. Recipients of data
Personal data may be disclosed to trusted recipients who process data on our behalf as processors under written agreements compliant with Article 28 GDPR, such as:
- IT hosting and email service providers;
- accounting, legal or technical advisers where necessary for our operations;
- public authorities when required by Polish law.
We do not sell your personal data. Data is transferred outside the European Economic Area only where permitted under Chapter V of the GDPR and with appropriate safeguards in place.
7. Your rights
Under the GDPR and Polish personal data protection law, you have the right to:
- access your personal data and obtain a copy (Art. 15 GDPR);
- rectify inaccurate or incomplete data (Art. 16 GDPR);
- erase data in certain circumstances — the “right to be forgotten” (Art. 17 GDPR);
- restrict processing (Art. 18 GDPR);
- data portability, where applicable (Art. 20 GDPR);
- object to processing based on legitimate interest (Art. 21 GDPR);
- withdraw consent at any time, where processing is based on consent (Art. 7(3) GDPR);
- lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa, Poland — uodo.gov.pl.
To exercise your rights, contact us at Greenframe_sp_zoo@proton.me. We will respond within the time limits set out in the GDPR, generally within one month.
8. Data security
We apply technical and organisational measures appropriate to the nature of the data and the risks of processing, as required under Article 32 GDPR. These measures aim to protect personal data against unauthorised access, loss, destruction or alteration.
9. Automated decision-making
We do not use automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you within the meaning of Article 22 GDPR.
10. Contact
For any questions regarding this Privacy Policy or the processing of your personal data, please contact Greenframe sp zoo at Greenframe_sp_zoo@proton.me or by post: KONDUKTORSKA, 3B, WARSZAWA, 00-775, POLAND.