Privacy policy

This policy describes what personal data idealidea.com.pl collects, for what purpose and on what legal basis, who it is shared with, and what rights the people it concerns have.

Data controller

The controller of personal data is JM Construction Management spółka z ograniczoną odpowiedzialnością with its registered office in Warsaw (00-844) at Grzybowska 87 Street, entered in the register of entrepreneurs under KRS number 0000936098, REGON 520593084, tax identification number (NIP) 5272979472.

Contact for matters concerning personal data: rodo@idealidea.com.pl

Data protection officer

The controller has not appointed a data protection officer. All matters concerning the processing of personal data should be addressed to the e-mail above.

Contact form

When you send an enquiry through the form, you provide:

  • first and last name
  • company name
  • e-mail address
  • phone number
  • the location your enquiry concerns
  • the message itself
  • the language you are browsing the site in, and the date the enquiry was sent

This data is used solely to answer the enquiry and to conduct the related correspondence. It is not used for marketing or for a newsletter.

Legal basis: Article 6(1)(b) GDPR (steps taken at the request of the data subject prior to entering into a contract) and Article 6(1)(f) GDPR (the controller's legitimate interest in conducting correspondence).

Providing the data is voluntary, but without an e-mail address or phone number we cannot reply.

Data collected automatically

The site is hosted on Vercel. Each visit records in the server logs the IP address, the date and time, the page visited and information about the browser. This data serves the security and correct operation of the site.

Legal basis: Article 6(1)(f) GDPR (the controller's legitimate interest).

Maps

On pages with a map the site uses Google Maps. Loading the map transmits the visitor's IP address and browser information to Google LLC. Google's own privacy policy describes how it processes that data.

Cookies

The site stores the following in your browser:

  • NEXT_LOCALE — a cookie remembering the chosen language, valid for 12 months. It is necessary for the site to work as the visitor chose and requires no consent.
  • The decision made in the analytics consent bar. Stored in the browser's local storage, it is not a cookie and is not shared with anyone.
  • Google Analytics cookies — stored only after consent is given. Without consent they are not stored at all.

Analytics consent can be changed at any time through the „Cookie settings” link in the footer.

Analytics

After consent is given, the site uses Google Analytics 4 (Google Ireland Limited / Google LLC) to count visits and see which pages are viewed. IP addresses are anonymised. Data retention in Google Analytics is set to 2 months. Advertising features and Google Signals remain switched off.

The site also uses Vercel Analytics (Vercel Inc.), which counts visits without cookies and without identifying individuals.

Legal basis for analytics: Article 6(1)(a) GDPR (consent).

Recipients of the data

Data is shared only with providers processing it on the controller's behalf, under data processing agreements:

  • Vercel Inc. — hosting
  • Sanity.io — the content management system where form enquiries are stored
  • Resend — e-mail notifications about new enquiries
  • Google Ireland Limited / Google LLC — maps and analytics
  • External service providers — including providers of accounting, legal, advisory and hosting services, as well as suppliers of CRM systems and IT tools supporting the Data controller’s day-to-day operations.

Transfers outside the European Economic Area

Some of the providers listed above are established in the United States. Personal data is transferred on the basis of the European Commission’s adequacy decision of 10 July 2023 under the EU–US Data Privacy Framework — for providers certified under that framework — or on the basis of the standard contractual clauses approved by Commission Implementing Decision (EU) 2021/914 of 4 June 2021 — for other service providers.

Retention periods

  • Enquiries that did not lead to a contract: for the period necessary to handle the enquiry (up to a maximum of 3 years for the purpose of defending against claims).
  • Data relating to a concluded lease: for a period of 6 years from the end of the year in which the agreement was terminated or expired.
  • Server logs: according to the hosting provider's policy.
  • Google Analytics data: 2 months.

Your rights

In connection with the processing of your data you have the right to:

  • access your data and obtain a copy of it
  • rectify inaccurate data or complete incomplete data
  • erasure of your data
  • restriction of processing
  • data portability
  • object to processing based on legitimate interest
  • withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal
  • lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland

To exercise these rights, write to the address given under „Data controller”.

Automated decision-making

The data is not used for automated decision-making or profiling.

Changes to this policy

This policy may be updated. The date of the last update is shown below the title of this page.