Privacy Policy

Version: 1.1 Last updated: 16 September 2026

of the denwooddesign.pl website (in all language versions)

This is a translation of the Polish original. In the event of any discrepancy, the Polish version prevails.

1. CONTROLLER OF PERSONAL DATA

The controller of personal data collected through the denwooddesign.pl website is:

Denwood Design Sebastian Denkiewicz
Address: Czołki 87b, 22-424 Sitno, Poland
Tax identification number (NIP): 9223086871 | Statistical number (REGON): 542137357
Telephone: +48 517 077 968
E-mail: kontakt@denwooddesign.pl
Website: denwooddesign.pl

Data Protection Officer: the controller has not appointed a Data Protection Officer (DPO). In all matters concerning the processing of personal data and the exercise of rights connected with that processing, please contact the controller directly.

2. PURPOSES, LEGAL BASES AND SCOPE OF PROCESSING

We process personal data only to the extent necessary to fulfil the purposes of the website. We do not obtain it from external sources and we do not use it for profiling.

The website has no contact form. The data you give us reaches us outside the website — by e-mail or in a telephone conversation. The website itself collects no data entered by visitors.

The footer of the website contains a link to our Instagram profile. If you write to us that way, the conversation takes place on a service run by Meta and is governed by its own rules on data processing; we read only the content of the message you send us.

2.1. Quote enquiries (telephone and e-mail)

When you contact us about a quote, you usually give us: first name, e-mail address, telephone number, town or city, the scope of the enquiry, the timescale, a description of what you need, and — if you attach them — files with floor plans, drawings or photographs.

• Purpose: analysing the enquiry, working out a concept, and preparing and sending a joinery quote.
• Legal basis: taking steps at the request of the data subject prior to entering into a contract (Article 6(1)(b) GDPR), and the legitimate interest of the controller in conducting correspondence and handling the enquiry (Article 6(1)(f) GDPR).

2.2. Server access logs

While the website is in use, users’ IP addresses are automatically recorded in the server’s technical logs by the hosting provider (LH.pl) in order to ensure stability and network security and to diagnose faults. The legal basis for this processing is the legitimate interest of the controller (Article 6(1)(f) GDPR).

Apart from the server logs, the website does not process visitors’ IP addresses for any other purpose.

2.3. Processing of third-party data in files sent to us

Where architects’ floor plans or technical documentation containing the data of third parties (for example the investor’s surname or the address of the project) are sent to us by e-mail, such data is processed solely in order to prepare the quote, on the basis of the legitimate interest of the controller (Article 6(1)(f) GDPR). The person sending the files should be authorised to disclose them.

3. RECIPIENTS OF PERSONAL DATA

Personal data is disclosed only to trusted parties providing services necessary for the website to function and for the order to be carried out:

• LH.pl Sp. z o.o. (hosting provider): storage of the website’s database and files, and maintenance of the server logs.
• E-mail service provider: handling of correspondence with the controller.
• Accountancy office: financial and accounting data passed on only after a contract has been concluded and the service performed.
• Subcontractors (transport, installation): contact and address data passed on only after a contract has been concluded, to the extent necessary to arrange travel and installation.

4. DATA RETENTION PERIOD

• Correspondence about a quote, together with any files sent: kept for 12 months from the end of the correspondence, unless a contract has been concluded, after which it is deleted.
• Server logs: kept in accordance with the retention policy of the hosting provider LH.pl.
• Contractual and financial data: kept for the period arising from tax and accounting legislation (as a rule, 5 years from the end of the tax year).

5. RIGHTS OF DATA SUBJECTS

Every data subject has the following rights:

• The right of access to data (Article 15 GDPR) and to obtain a copy of it,
• The right to rectification (correction) of data (Article 16 GDPR),
• The right to erasure of data (the “right to be forgotten”) (Article 17 GDPR),
• The right to restriction of processing (Article 18 GDPR),
• The right to data portability (Article 20 GDPR): to the extent that data is processed by automated means in order to take steps prior to entering into a contract (Article 6(1)(b) GDPR), this right covers the possibility of receiving your personal data from the controller in a structured, commonly used, machine-readable format and of transmitting it to another controller,
• The right to object (Article 21 GDPR) to processing based on legitimate interest.

The right to lodge a complaint with a supervisory authority:

If you consider that the processing of personal data infringes the GDPR, you have the right to lodge a complaint with the supervisory authority:

President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, PUODO) — the Polish supervisory authority
Address: ul. Stawki 2, 00-193 Warszawa, Poland
Helpline: +48 606 950 000 | Website: uodo.gov.pl

6. COOKIES

The website does not use analytics, tracking or advertising cookies (there is no Google Analytics, Meta Pixel or similar). Only one technical cookie is used, and it is necessary for the multilingual version of the site to work:

Cookie name	Purpose of processing	Retention period
pll_language	Remembers which language version of the site you chose (Polish, English or German), so that the same one opens on your next visit. Set by the Polylang plugin, which provides the language versions.	1 year

This cookie is necessary for the website to work properly, so storing it does not require consent. Apart from it, the website sets no cookies of its own.

Cookies generated by WordPress apply only to logged-in administrators of the website and are not saved on the devices of ordinary visitors.

7. EXCLUSIONS AND LIMITS OF PROCESSING

The denwooddesign.pl website does not use automated decision-making or profiling, does not transfer personal data to third countries (outside the EEA), does not run newsletter sign-ups and does not offer user account registration.

---

Document prepared for the denwooddesign.pl website | Legal and technical status as at 16 September 2026.