Last updated: 20 October 2026
1. Data controller
The controller of personal data is MERITUM 24 CHLOST LEŚ LEŚ spółka komandytowa with its registered office in Ziempniów, Ziempniów 89, 39-304 Czermin, Poland, entered in the National Court Register (KRS) under number 0000946415, VAT ID (NIP) 8172172346, REGON 180839875 (hereinafter: the “Controller”).
For matters concerning personal data, you can contact the Controller by e-mail at biuro@meritum24.pl, by phone at +48 17 788 16 97 or in writing at the registered office address.
2. What data we process and why
- Contact forms and requests for quotation: full name, e-mail address, phone number, the content of the message and attached files (e.g. drawings, sketches or photos of the project). We process the data in order to respond to the enquiry, prepare a quote and take steps prior to entering into a contract (Art. 6(1)(b) GDPR), and in the legitimate interest of the Controller, which is conducting correspondence with customers (Art. 6(1)(f) GDPR).
- E-mail and telephone contact: data provided in the correspondence, processed in order to handle it (Art. 6(1)(f) GDPR).
- Order fulfilment and settlements: data necessary to conclude and perform the contract and to issue accounting documents (Art. 6(1)(b) and (c) GDPR).
- Website visit statistics: data collected by Google Analytics cookies, only after consent is given in the cookie banner (Art. 6(1)(a) GDPR).
- Establishing or defending claims: in the legitimate interest of the Controller (Art. 6(1)(f) GDPR).
3. Voluntary provision of data
Providing data is voluntary but necessary to respond to an enquiry or prepare an offer. Fields marked as required in the form are necessary to send it.
4. Recipients of data
Data may be transferred to entities that provide the Controller with services necessary to run the website and the business, in particular: hosting and e-mail providers, providers of analytics and map tools (Google Ireland Limited), the accounting office, transport companies and IT service providers. These entities process the data on the basis of agreements with the Controller and only in accordance with its instructions.
5. Transfer of data outside the European Economic Area
In connection with the use of Google services, data may be transferred to the United States. The transfer takes place on the basis of a European Commission adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses.
6. Data retention period
- data from enquiries that did not result in a contract: until a reply is given and then for the limitation period of any claims, no longer than 12 months;
- customer data: for the duration of the cooperation and then for the period required by tax and accounting regulations;
- data processed on the basis of consent: until consent is withdrawn.
7. Rights of data subjects
Every person has the right to access their data, to rectify, erase or restrict its processing, the right to data portability, the right to object to processing based on the legitimate interest of the Controller, and the right to withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland).
8. Cookies
The website uses cookies necessary for its operation and, after consent is given, analytics cookies. You can manage your consent at any time using the cookie banner. Details are described in the Cookie Policy.
9. Google Maps and external services
A Google Maps map is embedded on the Contact page, and the website content contains links to the company’s Google Business Profile and to the Controller’s profiles on Facebook and LinkedIn. The map loads only after consent is given in the cookie banner. Once it is displayed, or after you go to an external service, data (e.g. IP address and browser information) may be processed by the providers of these services in accordance with their own privacy policies.
10. Automated decision-making
Data is not used for automated decision-making, including profiling that produces legal effects.
11. Changes to the privacy policy
The Controller may update this privacy policy. The current version is always available on this page.