Privacy policy

01Data controller

The controller of your personal data is Bartecki Group Sp. z o.o., ul. Franciszka Ilskiego 2B/8, 04-479 Warsaw, Poland, entered in the register of entrepreneurs of the Polish National Court Register under KRS 0000720383 (VAT ID 5223114944, REGON 369554818).

Contact for data protection matters: biuro@barteckigroup.eu, tel. +48 791 301 671.

We have not appointed a data protection officer, as we are not required to. All matters are handled directly by the board.

02What data we collect

We collect exactly two categories of data and nothing beyond that.

• Contact form data that you provide yourself: your name, e-mail address and the content of your message.
• Technical data recorded automatically when the form is submitted: IP address and timestamp. Used solely to prevent abuse and to limit the number of submissions from one address.

03Purpose and legal basis

• Answering your enquiry - Art. 6(1)(b) GDPR, steps taken at your request prior to entering into a contract.
• Protecting the site from abuse and handling correspondence - Art. 6(1)(f) GDPR, the legitimate interest of the controller.
• Visit statistics - Art. 6(1)(a) GDPR, solely on the basis of the consent you give in the banner. Without consent no analytics runs at all.

04How long we keep data

We give concrete periods rather than generalities, because Art. 13(2)(a) GDPR requires it.

• Correspondence from the form - for as long as the matter is being handled, and afterwards for the limitation period of any claims.
• Technical submission log (IP, time, message excerpt) - 90 days, then deleted automatically.
• Rate-limiting files - 1 hour.
• Google Analytics data - per the retention setting in the service, at most 14 months.

05Who we share data with

We do not sell data and we do not share it for marketing. We do however use services that, by their nature, process data on our behalf:

• Hosting provider - website and e-mail hosting. Servers in Poland, within the European Economic Area.
• Google Ireland Limited - Google Analytics 4, only after you give consent. Data may be transferred to the United States under the European Commission adequacy decision (Data Privacy Framework). IP addresses are anonymised.
• Cloudflare, Inc. - the Turnstile service, which checks whether the form is submitted by a human. It processes technical browser data. It operates independently of analytics consent because it is necessary to provide the form securely.

We name our hosting provider as a category of recipient rather than by name. Art. 13(1)(e) GDPR expressly allows this ("the recipients or categories of recipients"), and it means a change of supplier does not leave this policy stating something untrue. We will give you the current provider’s name on request, at biuro@barteckigroup.eu.

Google and Cloudflare are named, because they process data outside the European Economic Area - and about such a transfer, and the basis for it, you need to know specifically rather than in general terms (Art. 13(1)(f) GDPR).

06Cookies and browser storage

The site sets no analytics or marketing cookies until you consent. By default every category is off.

• Local storage, key bg-consent - stores only your consent decision. Without it the banner would ask on every visit.
• PHP session cookie - set only when you start filling in the form. It protects the form against submission from another site. It disappears when you close the browser.
• Google Analytics cookies - set only after consent is given.
• Cloudflare Turnstile cookies - necessary for the anti-spam check to work.

07Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection. Just write to biuro@barteckigroup.eu - we answer within one month.

You may withdraw analytics consent at any time, as easily as you gave it: open cookie settings and choose “Reject”. Withdrawal does not affect the lawfulness of processing before it.

You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.

08Is providing data mandatory

No. Providing data in the form is voluntary, but without an e-mail address we have no way to reply. We do no profiling and take no automated decisions concerning you.