Privacy policy

This document sets out the rules for the processing of personal data by FORMEE Sp. z o.o. — both in business relationships (clients, business partners, persons contacting us) and in connection with the use of the website available at formee.pl (the 'Website').

The controller of personal data is FORMEE Sp. z o.o. with its registered office in Międzyrzecz, ul. Zakaszewskiego 7, 66-300 Międzyrzecz, NIP: 596 176 28 31, REGON: 388 888 571 ('FORMEE' or the 'Controller').

In matters relating to the protection of personal data, the Controller can be contacted by e-mail at info@formee.pl, by phone on +48 95 740 21 11, or by post at the registered office address.

The information below fulfils the information obligation arising from Articles 13 and 14 of the General Data Protection Regulation (GDPR). The Controller exercises due care to protect users' privacy and to ensure that processing complies with applicable law, including the GDPR and the provisions on electronic communications.

The information in this document is addressed to persons whose data we process in connection with our business activities, in particular to:

• clients and prospective clients — individual investors, developers and general contractors,
• business partners, suppliers and subcontractors,
• persons representing the above entities and persons designated as contacts for the performance of contracts (e.g. employees and associates of our business partners),
• persons sending us enquiries — via the forms on the Website, by e-mail or by phone,
• persons visiting the Website.

The scope of the data processed depends on the nature of the cooperation and primarily includes:

• identification data — first name and surname, company name, NIP or REGON number,
• contact details — address, e-mail address, phone number,
• information about the function held, the position and the entity represented,
• the content of correspondence and enquiries, including information about a planned project provided in the contact form or the quote form,
• data needed for settlements — invoicing details and bank account number,
• data related to the performance of contracts — orders, deliveries, acceptance reports and design documentation, where they contain personal data.

We receive data primarily directly from you. The data of contact persons may also be provided to us by their employer or by the entity they represent, and business data may be supplemented with information from public registers (KRS, CEIDG).

In connection with the use of the Website, the Controller may process the user's technical and usage data, in particular:

• IP address,
• device and browser data,
• approximate location,
• the user's behaviour on the site (e.g. pages visited, time of visit),
• data stored in cookies or similar technologies.

We process personal data for the following purposes:

• preparing and presenting an offer or quote and taking other steps prior to entering into a contract — Article 6(1)(b) GDPR,
• concluding and performing a contract, including the production, delivery and installation of precast elements and contact in the course of delivery — Article 6(1)(b) GDPR,
• handling enquiries and conducting correspondence — the Controller's legitimate interest in communicating with persons interested in its offering (Article 6(1)(f) GDPR),
• contacting persons designated by business partners for the performance of a contract — the legitimate interest of the Controller and the business partner in efficient cooperation (Article 6(1)(f) GDPR),
• ensuring the proper functioning of the Website and the security of its infrastructure — the Controller's legitimate interest (Article 6(1)(f) GDPR),
• producing statistics and traffic analyses on the Website — for cookie-based analytics technologies, the legal basis is the user's consent (Article 6(1)(a) GDPR),
• issuing and storing invoices and fulfilling accounting and tax obligations and other obligations arising from legal provisions — Article 6(1)(c) GDPR,
• establishing, pursuing or defending claims — the Controller's legitimate interest (Article 6(1)(f) GDPR),
• direct marketing of our own products and services, including informing existing clients about new offerings — the Controller's legitimate interest (Article 6(1)(f) GDPR), and, in the case of electronic communications, consent (Article 6(1)(a) GDPR),
• other purposes for which you have given separate consent — Article 6(1)(a) GDPR.

The Website may use analytics tools, including Google Analytics provided by Google LLC / Google Ireland Limited.

Analytics tools may use cookies or similar technologies to analyse how the Website is used. Data is processed in an aggregated or pseudonymised form.

We use cookies other than strictly necessary ones (e.g. analytics cookies) only after obtaining the user's consent. The Website may use cookies in order to:

• ensure the proper functioning of the site,
• analyse traffic (Google Analytics).

Users can change their cookie settings in their web browser at any time and manage their consents from within the tool available on the Website. Restricting the use of cookies may affect the operation of some of the Website's features.

Google ads settings can be managed at: https://www.google.com/ads/preferences/.

We may share personal data with entities that support us in running our business — solely to the extent necessary to achieve the purposes described above:

• providers of accounting, legal and advisory services,
• providers of IT, hosting and e-mail services,
• transport companies and entities involved in the delivery and installation of precast elements,
• banks and payment institutions, for settlement purposes,
• entities authorised to receive data under legal provisions.

The Website is hosted on the servers of domeny.pl (cyber_Folks S.A.). The hosting provider may process technical data such as IP addresses, server logs and error information.

We entrust data to entities acting on our behalf under data processing agreements (Article 28 GDPR), which oblige them to protect data to the standard required by the GDPR. We do not sell personal data and we do not share it with third parties for purposes other than those described in this document.

As a rule, we do not transfer personal data outside the European Economic Area (EEA).

An exception is the use of external tools — in particular analytics tools — in connection with which data may be transferred outside the EEA, primarily to the United States.

In such cases, the transfer takes place only with the safeguards provided for in the GDPR — on the basis of a European Commission decision finding an adequate level of protection, or on the basis of standard contractual clauses approved by the European Commission (Articles 45 and 46 GDPR).

We keep data no longer than is needed to achieve the purpose for which it was collected:

• enquiries and offers that did not lead to a contract — for the time needed to handle the matter, and then until the limitation periods for any claims expire,
• contracts — for the duration of their performance, and then until the limitation periods for claims arising from the contract expire,
• accounting and tax documents — for 5 years from the end of the year in which the tax obligation arose,
• technical data and server logs — for a period justified by system security and diagnostics,
• data processed for marketing purposes — until an objection is raised or consent is withdrawn,
• data processed on the basis of consent — until the consent is withdrawn, unless another legal basis for further processing exists.

In connection with the processing of personal data, you have the following rights:

• the right of access to your data and to obtain a copy of it (Article 15 GDPR),
• the right to rectification and completion of your data (Article 16 GDPR),
• the right to erasure of your data, where there is no basis for its further processing (Article 17 GDPR),
• the right to restriction of processing (Article 18 GDPR),
• the right to portability of data processed on the basis of consent or a contract (Article 20 GDPR),
• the right to withdraw consent at any time — without affecting the lawfulness of processing carried out before its withdrawal (Article 7(3) GDPR).

To exercise any of these rights, simply contact us by e-mail at info@formee.pl or by post at our registered office address. We respond to requests without undue delay, and no later than within one month of receiving them.

Where we process data on the basis of a legitimate interest (Article 6(1)(f) GDPR), you may object to that processing at any time on grounds relating to your particular situation.

You may object to the processing of data for direct marketing purposes at any time and without giving a reason — once we receive the objection, we will no longer process your data for that purpose.

Objections can be submitted by e-mail to info@formee.pl.

If you consider that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes UODO — the Polish supervisory authority), ul. Stawki 2, 00-193 Warszawa (uodo.gov.pl).

Providing personal data is voluntary, but it is necessary for preparing an offer, concluding and performing a contract, or responding to an enquiry — without this data we will not be able to fulfil the given purpose.

An obligation to provide certain data may also arise from legal provisions, e.g. tax law (invoicing details).

When using the Website, the provision of data is voluntary, but it may be necessary in order to use certain features or to obtain a response to an enquiry.

We do not make decisions based solely on the automated processing of data, including profiling, that would produce legal effects concerning you or similarly significantly affect you.

We apply technical and organisational measures appropriate to the risk, in particular:

• encrypted connections (SSL),
• regular system updates,
• access controls for the administration panel,
• backups.

Data is accessible only to authorised persons bound by confidentiality obligations.

The Website includes an administration panel accessible only to authorised persons. Panel login data is appropriately secured, is not accessible to Website users and is used solely to manage the site's content.

In matters relating to the processing of personal data, the Controller can be contacted at the e-mail address: info@formee.pl.

The content of this document may be updated periodically, for example when legal provisions, technology or the scope of our business activities change.

The current version is always published on the Website.