Privacy Policy

I. General Information

This Privacy Policy defines the rules for the processing and protection of personal data provided by Users in connection with their use of the website operating at www.westbud.pl (hereinafter referred to as the "Service").

II. Personal Data Controller

The Controller of personal data contained in the Service is: WESTBUD.PL SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ with its registered office at ul. Jedności Narodowej 194 lok.2, 50-302 Wrocław NIP: 8971834404 KRS: 0000661161 e-mail: biuro@westbud.pl phone: +48 795 850 650 (hereinafter referred to as the "Controller").

III. Data Protection Officer (DPO)

The Controller has not appointed a Data Protection Officer. For matters related to personal data protection, please contact the Controller directly via email at: biuro@westbud.pl.

IV. Purposes and Legal Bases for Data Processing

The Controller processes the personal data of Service Users for the following purposes:

Responding to inquiries and providing an offer (Contact Form):
Legal Basis: Art. 6(1)(b) of the GDPR (taking steps at the request of the data subject prior to entering into a contract).
Analyzing Service traffic, conducting statistics, and improving the Service (Google Analytics and cookies):
Legal Basis: Art. 6(1)(a) of the GDPR (voluntary consent of the User) – applies to analytical and marketing cookies.
Establishing, asserting, or defending against claims:
Legal Basis: Art. 6(1)(f) of the GDPR (legitimate interest of the Controller).

V. Types of Processed Data

The Controller processes the following categories of personal data:

Data from the Contact Form: Name, surname, email address, phone number, content of the message.
Automatically Collected Data (Cookies and Analytics): IP address, geolocation data, device identifiers, browser data, time and manner of using the Service, visited subpages.

VI. Data Retention Period

Users' personal data will be stored for the following periods:

Data from the Contact Form: For the time necessary to conduct correspondence, negotiations, and until the expiration of the limitation period for any potential claims arising from the cooperation/contract.
Data processed based on consent (Analytical Cookies): Until the consent is withdrawn, and subsequently until the expiration of the limitation period for claims related to processing. The cookie retention period is determined by the tool providers (e.g., Google).
Data for the purpose of defending against claims: For the duration of the limitation period for claims under applicable law.

VII. Data Recipients and Transfer of Data to Third Countries (Outside the EEA)

Recipients of Users' personal data may include:

Entities processing data on behalf of the Controller, such as IT service providers, accounting, and legal service providers.
Entities authorized to obtain data under applicable law, such as courts or law enforcement agencies.

Transfer of Data Outside the EEA:

The Service is built on the Tilda Publishing, LTD platform, which may process data outside the European Economic Area (EEA), including in the USA. The Controller also uses analytical tools (e.g., Google Analytics), which may also involve data transfer to the USA.
The transfer of data outside the EEA is carried out based on mechanisms compliant with the GDPR, in particular the Standard Contractual Clauses (SCCs) adopted by the European Commission, in order to ensure an adequate level of data protection.

VIII. User Rights

Users have the following rights related to the processing of personal data:

The right to access their data (Art. 15 GDPR).
The right to rectify (correct) their data (Art. 16 GDPR).
The right to erase data ("right to be forgotten") (Art. 17 GDPR).
The right to restrict data processing (Art. 18 GDPR).
The right to object to data processing (Art. 21 GDPR).
The right to data portability (Art. 20 GDPR).
The right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
The right to lodge a complaint with a supervisory authority (President of the Personal Data Protection Office in Poland).

IX. Information on the Voluntariness of Providing Data

The provision of personal data is voluntary but is necessary for:

Using the contact form (without providing data, we will not be able to respond to the inquiry).
Using the full functionality of the Service in terms of analytics (if the User gives consent).

X. Automated Decision-Making and Profiling

The Controller does not use automated decision-making or profiling within the meaning of Art. 22 of the GDPR that would produce legal effects or similarly significantly affect the User. The use of Google Analytics is analytical and statistical in nature.

XI. Cookies

The Service uses cookies, which are small text files stored on the User's end device.
Purpose of Cookies: Cookies are used to:

Ensure the proper operation of the Service (technical cookies – necessary).
Remember User preferences.
Collect statistical data using external tools (Google Analytics).

Types of Cookies:

Necessary: These are essential for the proper functioning of the Service.
Analytical: They help analyze traffic and User behavior for the purpose of optimizing the Service (require active consent of the User).

Detailed information on the use and management of cookies, including the rules for withdrawing consent, is available via the cookie banner or in the browser settings.

XII. Data Security

The Controller applies appropriate technical and organizational measures ensuring the security of the processed personal data, adequate to the threats and categories of data covered by protection. These measures include, among others, connection encryption (SSL certificate).

XIII. Changes to the Privacy Policy

The Controller reserves the right to change this Privacy Policy. Users will be informed of all changes by publishing the updated version of the document on the Service page.

XIV. Contact

For matters related to personal data, please contact us via email at: biuro@westbud.pl or by phone: +48 795 850 650.
Date of the last update: 29.11.2025