Privacy Policy
1. Personal data controller
The controller of personal data is Technologie Modułowe with its registered office in Wieliczka, ul. Polna 2, 32-020 Wieliczka, Poland.
For matters related to the processing of personal data, you may contact the Controller:
- in writing at the registered office address
- by email: kontakt@domy-modulowe.eu
2. Scope and sources of data collected
Depending on how the website is used, the Controller may collect the following data:
- data provided voluntarily in the contact form or correspondence, in particular: first name, last name, email address, phone number and message content
- data related to the use of the website, including IP address, approximate location data, information about the device, operating system, browser, visit time, traffic source, visited subpages and activity on the website
- data stored in cookies or similar technologies
3. Purposes and legal bases for data processing
Handling contact and responding to messages
The legal basis is Article 6(1)(b) GDPR if the contact concerns steps taken prior to entering into a contract, or Article 6(1)(f) GDPR, meaning the Controller's legitimate interest in conducting communication and handling inquiries.
Presenting offers, conducting commercial discussions and pre-contractual activities
The legal basis is Article 6(1)(b) GDPR or Article 6(1)(f) GDPR, depending on the nature of the matter.
Performing a contract and fulfilling obligations related to its conclusion and performance
The legal basis is Article 6(1)(b) GDPR.
Settlements, accounting and tax obligations
The legal basis is Article 6(1)(c) GDPR, meaning a legal obligation imposed on the Controller.
Establishing, pursuing or defending against claims
The legal basis is Article 6(1)(f) GDPR, meaning the Controller's legitimate interest in protecting its rights.
Analytics, statistics, website security and administration
The legal basis is Article 6(1)(f) GDPR and, with respect to cookies and similar technologies, also the provisions of the Polish Electronic Communications Law. Essential cookies may be used without separate consent, while analytical, functional or marketing cookies are generally used after obtaining the user's prior consent where legally required.
Marketing of own services
If the Controller markets its own services, data may be processed on the basis of Article 6(1)(f) GDPR or on the basis of consent, depending on the form of activity. Marketing communication by email, SMS or similar electronic communication means may also require separate consents under specific regulations. The data subject has the right to object at any time to the processing of data for direct marketing purposes.
4. Is providing data mandatory
Providing data is voluntary, but in some cases it may be necessary to:
- respond to a message
- prepare an offer
- conclude or perform a contract
- issue accounting documents
If the user does not provide the data required in a given form or during contact, carrying out the indicated purpose may be impossible.
5. Data recipients
Personal data may be transferred to entities supporting the Controller in operating the website and business, in particular:
- hosting providers
- email service providers
- providers of contact forms, CRM systems and analytics tools
- entities providing IT, accounting, legal or marketing services
- authorised public authorities, if the obligation to provide data results from legal provisions
6. Transfers of data outside the European Economic Area
If the website uses tools from providers established outside the European Economic Area, data may be transferred outside the EEA. In such a case, the Controller should ensure an appropriate legal basis for such transfer, in particular standard contractual clauses or other safeguards provided for by the GDPR.
7. Data retention period
Data will be stored for the period necessary to fulfil the purpose for which it was collected, and then for the time required by law or needed to secure possible claims. As a rule:
- data from correspondence and contact forms — for the duration of handling the matter and then for the period needed to demonstrate the course of contact
- data related to a contract and settlements — for the duration of contract performance and for the period resulting from tax and accounting regulations
- data processed on the basis of consent — until consent is withdrawn
- data processed on the basis of legitimate interest — until an effective objection is raised or that interest ceases to exist
- data related to traffic analysis and cookies — for the period corresponding to the lifecycle of a given cookie or until it is deleted or consent is withdrawn
8. Rights of the data subject
- the right of access to data
- the right to rectify data
- the right to erase data
- the right to restrict processing
- the right to data portability
- the right to object
- the right to withdraw consent at any time if processing is based on consent
- the right to lodge a complaint with the President of the Personal Data Protection Office
If an objection is raised against data processing for direct marketing purposes, the objection is effective and the data should no longer be used for that purpose.
9. Cookies and similar technologies
The website uses cookies and similar technologies to ensure proper operation of the website, remember user settings, compile statistics and analyse how the website is used, and potentially conduct marketing activities if such tools are actually implemented.
- essential — necessary for the proper operation of the website
- functional — supporting convenient use of the website
- analytical — helping measure traffic and improve the website
- marketing — used to tailor content or advertisements
Under the current legal approach, essential cookies may operate without separate consent, while the remaining categories should be activated after obtaining the user's consent where required by law. The user may manage consents through the cookie banner or browser settings, although disabling some cookies may affect the operation of the website.
10. Server logs
Using the website involves sending requests to the server on which the website is hosted. Each such request may be recorded in server logs. Logs may include, in particular, the IP address, server date and time, browser and operating system information, and the requested URL.
This data is used primarily for technical, administrative, security and error diagnostic purposes, on the basis of the Controller's legitimate interest.
11. Data security
The Controller applies appropriate technical and organisational measures to protect personal data against loss, destruction, unauthorised disclosure, access or other unlawful processing.
12. Changes to the Privacy Policy
The Privacy Policy may be updated in the event of changes in law, the way the website operates, or the scope of tools and technologies used. The current version of the policy is published on the Controller's website.
13. Effective date
This Privacy Policy applies from the date of publication on the website.