Privacy Policy

The controller of your personal data is Oscar Grzywa, trading as PROJSTOG Oscar Grzywa, ul. Jana i Jędrzeja Śniadeckich 20D/7, 35-006 Rzeszów, Poland, tax ID (NIP) 8172228348, REGON 545844575.

Contact for data protection matters:

• email: biuro@projstog.pl
• phone: +48 730 771 568

The website collects only the data you type into the contact form yourself:

• your name,
• phone number,
• email address,
• the subject area you select,
• the message text, if you write one.

The site requires no account and performs no profiling. It does not collect special categories of data — if you enter them in the message, you do so on your own initiative.

The server hosting the site records technical request logs (IP address, request time, requested resource, browser information). They are used only for diagnostics and security.

Form data is processed solely in order to answer your enquiry and, if it gets that far, to prepare a quote.

Legal bases:

• Art. 6(1)(a) GDPR — the consent you give when submitting the form,
• Art. 6(1)(b) GDPR — steps taken at your request before entering into a contract,
• Art. 6(1)(f) GDPR — legitimate interest in keeping the site secure and defending against abuse (server logs, form protection).

Providing data is voluntary, but without a name, phone number or email address there is no way to reply.

Enquiry correspondence is kept for as long as handling the matter requires, and then for the limitation period of any related claims. If an enquiry does not lead to cooperation, it is deleted once the conversation ends.

Server logs are rotated on the schedule set by the hosting provider.

⚠ TO BE AGREED with a lawyer: specific retention periods stated in years.

Your data is never sold and never shared for third-party marketing. It is entrusted only to providers that are technically necessary to handle an enquiry:

• Resend (Plus Five Five, Inc.) — transactional email provider. The message from the form reaches my inbox through this service, so the data you enter passes through it.
• the website hosting provider — for server logs and service maintenance,
• my email provider — for storing correspondence.

Resend is established in the United States, which means data is transferred outside the European Economic Area. The transfer relies on the mechanisms set out in Chapter V of the GDPR.

⚠ REQUIRES LEGAL REVIEW: the exact transfer mechanism (Data Privacy Framework or standard contractual clauses), the current legal name and address of the provider, and a signed data processing agreement with each provider listed.

In relation to your data you have the right to request:

• access to it and a copy of it,
• rectification of inaccurate data,
• erasure,
• restriction of processing,
• data portability,
• to object to processing based on legitimate interest.

You can withdraw your consent at any time — an email to biuro@projstog.pl is enough. Withdrawal does not affect the lawfulness of processing carried out before it.

You may also lodge a complaint with the supervisory authority: President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland.

This site uses no analytics, advertising or tracking cookies. There is no Google Analytics, no advertising pixel, no heatmaps and no session recording.

If such tools are added in the future, this policy will be updated and consent will be collected before any script is loaded.

Cookie settings are managed in your browser — every popular browser lets you block and delete them.

The connection to this site is encrypted with an SSL certificate, so form data is not transmitted in plain text.

The form is protected against automated submissions by bots, and everything entered is validated on the server before any message is sent.

The site software and its dependencies are kept up to date, and access to the enquiry inbox is protected with two-factor authentication.

This policy is updated whenever the scope of collected data or the list of processors changes. The date of the last change is shown at the top of the page.