1. General information
This Privacy Policy sets out the rules for processing the personal data of users of the cegielnia‑labuda.pl website (hereinafter, the “Website”). We respect your privacy and take all reasonable steps to protect personal data in accordance with applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council (“GDPR”). By using the Website, you accept the data‑processing practices described below.
The Website may collect personal data in the following situations: when you browse the Website (e.g. through cookies and analytical tools) and when you use the contact form. Providing personal data is voluntary, yet in some cases it is necessary to access specific functions (e.g. to submit an enquiry via the form). All data we collect are used solely for the purposes specified in this Policy and always in a lawful manner.
2. Data controller and contact details
The controller of your personal data (the “Controller”) is Wojciech Łabuda, conducting business under the name Cegielnia Łabuda Wojciech Łabuda, with its registered office at Trześń, ul. Gorzycka 97, 39‑432 Gorzyce, Poland, NIP (tax ID): 8672074003.
For any matters related to personal‑data processing you can reach us at: cegielnialabuda@gmail.com or by post at the address above.
3. Purposes and legal bases of processing
We process personal data only for specified purposes, on defined legal bases, and for no longer than is necessary to achieve those purposes. The key areas of processing are set out below.
3.1 Website traffic analysis (Google Analytics)
We use Google Analytics, provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, to analyse Website traffic. Google Analytics enables us to collect anonymous data on how users interact with the Website—for example, which pages are visited, how long users stay, the type of device and browser, approximate location and the source of the visit. This information helps us improve the Website, tailor its functionality to users’ needs and compile visitor statistics.
The legal basis is our legitimate interest (Art. 6 (1) (f) GDPR) in generating statistics and optimising the Website. We do not collect data that directly identify you. IP anonymisation is enabled, which means Google truncates your IP address before storage, and Google does not combine it with any other data it holds.
Google Analytics collects the information via cookies. Data may be transferred to Google servers outside Europe (e.g. the USA); see section 6 for details on international transfers. Google processes the data on our behalf to prepare reports and provide related services.
Retention period: Analytics data are kept for up to 14 months, after which they are automatically deleted or anonymised. We only have access to aggregate statistics and cannot identify individual persons.
Opt‑out options:
• Block Google Analytics cookies in your browser settings.
• Install Google’s official opt‑out browser add‑on (tools.google.com/dlpage/gaoptout).
• Use a consent‑management or opt‑out tool offered by many providers.
3.2 Contact form
The Website features a contact form allowing you to send us enquiries. The form may require: name, surname, e‑mail address, telephone number and the message itself (which may also contain personal information). Providing these data is voluntary but essential for us to respond.
Purpose: To handle your enquiry and respond to it. If the message relates to a potential contract (e.g. request for a quotation), the data are also processed to take steps at your request prior to entering into a contract or to perform the contract (Art. 6 (1) (b) GDPR).
Legal basis:
• Our legitimate interest (Art. 6 (1) (f) GDPR) in communicating with prospective clients and handling requests; and/or
• The necessity to take steps prior to, or perform, a contract (Art. 6 (1) (b) GDPR).
Retention period: We keep the data for as long as needed to resolve the matter, then for the period required by law or justified by our archiving interest (usually up to 3 years after the correspondence ends, matching general limitation periods). Where the correspondence leads to a contract, data may be stored longer (e.g. for the duration of the relationship plus the statutory retention of accounting documents—5 years).
Earlier deletion is possible on request unless legal obligations or overriding interests require continued storage.
4. Cookies and similar technologies
Like most websites, we use cookies—small text files stored on your device. They recognise your device on subsequent visits, remember preferences and gather statistics.
We use:
• Essential (technical) cookies – required for core Website functions; disabling them may impair operation.
• Analytical cookies (Google Analytics) – third‑party cookies that collect anonymous usage data. They are set only with your consent. You can withdraw consent at any time by deleting or blocking these cookies.
Browser settings allow you to manage or block cookies. Disabling all cookies may affect Website usability.
Continuing to use the Website without changing cookie settings, or clicking “Accept” on our cookie banner, constitutes consent to our use of cookies as described.
External services (e.g. links to Facebook, Instagram, YouTube) may set their own cookies beyond our control; please consult their privacy policies.
5. Recipients of personal data
Data may be shared with:
- Google LLC – provider of Google Analytics and Gmail. Google processes data solely on our instructions under a data‑processing agreement and does not use them for its own marketing.
- IT and hosting providers – companies that host, maintain and support the Website. They operate under confidentiality agreements and process data only to ensure proper functioning.
- Other trusted partners – e.g. couriers (for deliveries), accounting or legal firms, or authorities entitled by law. We always ensure a lawful basis and share only the minimum necessary data.
We never sell personal data and do not share them with unauthorised parties.
6. Transfers outside the EEA
While we strive to keep data within the European Economic Area, services such as Google Analytics and Gmail may involve transferring data to the USA. Because the USA lacks an adequacy decision, transfers rely on Standard Contractual Clauses (Art. 46 (2) (c) GDPR) and supplementary measures such as IP anonymisation and encryption, ensuring protection comparable to the EU level.
You may request a copy of these safeguards—contact details in section 2.
7. Your rights
Under the GDPR you have the right to:
- Access your data (Art. 15).
- Rectify inaccurate or incomplete data (Art. 16).
- Erase data (“right to be forgotten”, Art. 17) in certain cases.
- Restrict processing (Art. 18).
- Data portability where processing is based on consent or contract (Art. 20).
- Object to processing based on legitimate interest, including separate right to object to direct marketing (Art. 21).
- Withdraw consent at any time where processing is based on consent (Art. 7 (3)).
- Lodge a complaint with the supervisory authority — in Poland: the President of the Personal Data Protection Office (PUODO), ul. Stawki 2, 00‑193 Warsaw.
To exercise your rights, contact the Controller (see section 2). We will respond without undue delay, normally within one month. We may request additional information to verify your identity. Exercising your rights is free of charge, save for excessive or repetitive requests, where a fee may apply.
8. Final provisions
Data security: We implement appropriate technical and organisational measures to safeguard personal data against unauthorised access, loss or damage. Data transmitted via the Website’s forms are protected by HTTPS encryption. Only authorised personnel have access to the data, and all collaborators are trained in data protection.
Changes to the Privacy Policy: We may update this Policy to reflect legal changes, new functionalities or new processing methods. Any modifications will appear on this page in a consolidated version. We encourage you to review the Policy periodically. For significant changes, we may inform you additionally (e.g. by e‑mail, where we hold your contact details, or via an on‑site banner during your next visit).