Privacy Policy

1. Data controller

The controller of your personal data is:

For any question about your personal data or this policy, please contact us by email at lumeroza@op.pl or by post at the address above.

2. Scope of this policy

This policy applies to the website available at https://lumeroza-sp.com and to correspondence you send us, including enquiries prepared with the contact form on this website. Contracts for renovation work, if concluded, may be accompanied by separate information about data processing.

3. How this website works

This website has been built to collect as little data as possible:

• It does not use analytics, advertising or social media tracking tools.
• It does not set cookies. Fonts, images, styles and scripts are served from our own website, so no third-party content is loaded when you browse.
• Messages you send through the contact page or by email are used only to reply to your enquiry.
• Your choice in the privacy banner is remembered in your browser, as described in our Cookie Policy.

4. Data we process and why

Enquiries and correspondence

When you email us, either directly or using the contact form, we process the data you include in your message, such as your name, email address, phone number (if provided), details about your property and planned renovation, and any attachments such as photos.

• Purpose: to reply to your enquiry, discuss a possible renovation and prepare a proposal at your request.
• Legal basis: Article 6(1)(b) GDPR (steps taken at your request before entering into a contract) and, for general correspondence, Article 6(1)(f) GDPR (our legitimate interest in responding to messages addressed to us).

Technical data processed by the hosting provider

Like any website, this website is delivered by a web server. When you visit it, your browser automatically transmits technical information such as your IP address, the date and time of the request, the page requested and your browser type. This information may be recorded in server logs by our hosting provider.

• Purpose: to deliver the website, keep it secure and diagnose technical problems.
• Legal basis: Article 6(1)(f) GDPR (our legitimate interest in operating a secure, functioning website).

Legal obligations

If a contract is concluded, some data may need to be kept to meet our obligations under tax and accounting law, on the basis of Article 6(1)(c) GDPR.

5. Is providing data required?

Providing personal data is voluntary. However, we cannot reply to an enquiry without a way of contacting you, so an email address is needed for us to respond.

6. Recipients of data

We do not sell personal data. Data may be made available only to the extent necessary to:

• providers of hosting and email services that we use to operate this website and our mailbox;
• providers of IT, accounting or legal services, where needed for the purposes described above;
• public authorities, where we are required to do so by law.

Such providers process data on our behalf under appropriate agreements or as independent controllers, as applicable.

7. Transfers outside the EEA

We do not intentionally transfer personal data outside the European Economic Area. If a service provider we use processes data outside the EEA, such a transfer will take place only on the basis of the safeguards provided for in Chapter V GDPR, such as an adequacy decision or standard contractual clauses.

8. How long we keep data

We keep personal data only for as long as it is needed for the purpose for which it was collected: correspondence for as long as necessary to handle the enquiry and any resulting cooperation, and afterwards for the period required by law or for the limitation period of possible claims. Server log retention depends on the configuration of the hosting service. Data that is no longer needed is deleted.

9. Your rights

Under the GDPR, you have the right to:

• access your personal data and receive a copy of it;
• have inaccurate data rectified;
• have your data erased, where the conditions of Article 17 GDPR are met;
• restrict processing;
• data portability, where processing is based on a contract and carried out by automated means;
• object to processing based on our legitimate interests, on grounds relating to your particular situation.

To exercise these rights, contact us at lumeroza@op.pl. You also have the right to lodge a complaint with the supervisory authority in Poland, the President of the Personal Data Protection Office (Prezes Urzedu Ochrony Danych Osobowych, UODO), or with the supervisory authority in your country of residence.

10. Automated decision-making

We do not use your personal data for automated decision-making or profiling within the meaning of Article 22 GDPR.

11. External links

This website may contain links to third-party websites. If you follow such a link, the privacy policy of that website applies.

12. Changes to this policy

We may update this Privacy Policy, for example if the website or the way we process data changes. The current version is always available on this page, with the date of the last update shown at the top.