Privacy policy

1. Controller

The controller for data processing on this website is Mateusz Przygoda Ffa Group (Mateusz Przygoda), ul. Śniadeckich 23A/4, 75-900 Koszalin, Poland (NIP 6692591321, REGON 544340192).

For data protection questions, contact us at [email protected]. We are not legally required to appoint a data protection officer and have not done so.

2. Overview

We process personal data only where necessary to run this website, handle your enquiry and perform our services, or where you have consented. We do not sell data or use it for profiling.

3. Hosting, server logs and security

The website and database run on servers of Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany) in data centres in Germany, under a data processing agreement (Art. 28 GDPR).

When you visit the site, technically necessary data (IP address, date and time, page requested, referrer, browser and operating system) is processed in server logs to provide the site and keep it secure (Art. 6(1)(f) GDPR). Logs are deleted after 14 days at the latest.

All traffic is encrypted via TLS (HTTPS). Fonts are served from our own server; no connection to Google Fonts is made.

The website is delivered via the content delivery and security network of Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA). Cloudflare processes technically necessary connection data (including IP addresses) to fend off attacks and deliver the site quickly (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework; a data processing agreement is in place.

4. Contact form, email and quotes

When you contact us via the form, by email or by phone, we process the details you provide (name, company if any, email, phone, property location, requested service, message) to answer your enquiry, arrange a site visit and prepare a quote. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures).

Name, email and phone are required, as we cannot handle your enquiry without them. All other details are optional.

Your enquiry is stored in our database (Hetzner, Germany). Notification and confirmation emails are sent via Brevo (Sendinblue SAS, 7 rue de Madrid, 75008 Paris, France) as our processor.

Together with your enquiry we store which page and – if present – which campaign (UTM parameters, Google Ads click ID) or referring website brought you to us. This is kept only for the duration of your visit in your browser's session storage (no cookie) and helps us understand which channels bring enquiries (Art. 6(1)(f) GDPR).

5. Performing orders

If an order is placed, we process the data needed to perform and invoice it (e.g. property address, access details, contact persons, billing data, job and handover records including photos of the property) under Art. 6(1)(b) and (c) GDPR. Photos serve only to document our work; we avoid showing people wherever possible.

6. Cookies and consent

We set necessary cookies under § 25(2) no. 2 TDDDG, e.g. to store your cookie choice (cookie “cc_cookie”, stored for 6 months). All other cookies are set only with your consent (§ 25(1) TDDDG, Art. 6(1)(a) GDPR).

You can change or withdraw your choice at any time via “Cookie settings” in the footer, with effect for the future.

7. Google Tag Manager, Google Analytics and Google Ads

Google Tag Manager is only loaded after you consent to analytics or marketing; without consent no connection to Google is made. Only with your consent do we use services of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland): Google Tag Manager to manage these services, Google Analytics 4 for audience measurement (with truncated IP addresses) and Google Ads conversion tracking. We do not use remarketing or personalised advertising.

Data may be transferred to Google LLC in the USA. Google is certified under the EU-US Data Privacy Framework (EU Commission adequacy decision, Art. 45 GDPR).

8. Recipients

Your data is accessed only by our staff handling your enquiry or order and by the processors named above (Hetzner, Cloudflare, Brevo and, with consent, Google). We disclose data to other third parties only where legally required (e.g. tax authorities).

This website does not send your data to any artificial intelligence system.

9. Retention

Enquiries that do not lead to an order are deleted no later than 24 months after the last contact. Order and invoice data is kept for the statutory retention periods (up to 10 years under commercial and tax law) and then deleted.

10. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You may withdraw consent at any time with effect for the future. A simple message to [email protected] is enough.

You may also lodge a complaint with a supervisory authority, in particular in the member state of your residence, workplace or the alleged infringement. Our lead authority is the President of the Polish Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland).

11. No automated decision-making

We do not use your data for automated decision-making or profiling within the meaning of Art. 22 GDPR.

12. Changes

We update this policy when our website or the law changes. The version published here applies.