Privacy policy

The Deska i Dłuto website is a demonstration project. The workshop, its address, tax identification number, and named individuals are fictional, and the forms and payment are provided solely to demonstrate how the website works.

The data controller is Deska i Dłuto Pracownia Stolarska, ul. Rzemieślnicza 14, 61-491 Poznań, Poland, NIP: 000-000-00-00 (fictional).

For data-related matters, you can contact us at kontakt@deskaidluto.pl or by phone at +48 500 123 456.

We process only the data entered in the forms and basic technical data recorded in server logs.

• Contact form: full name, email address, optional phone number, message, and consent information.
• Measurement and quote order form: full name, email address, phone number, type of service, and description.
• Server logs: IP address, request time, and address of the page visited.

We use contact form data to receive and respond to your message. The legal basis is Article 6(1)(f) GDPR, our legitimate interest in handling the enquiry, as well as the user's consent.

Providing data is voluntary, but without the contact details we need, we cannot respond to the message.

We use order form data to accept and handle the measurement and quote service. The legal basis is Article 6(1)(b) GDPR, performance of a contract or steps taken before entering into a contract.

Order data is not stored in a database. It is encoded in a digitally signed token placed in the page address, then emailed to the workshop and sent to the customer as a confirmation.

The deposit is PLN 200 gross, payable in advance and deducted from the value of a later order. Payment operates in test mode as a simulated Stripe gateway. No money is collected and we do not collect payment card data.

Messages from both forms are sent by PB Devs through mail.pbdevs.com. PB Devs acts as a processor, and its servers are located in the European Union.

The website is hosted on a server in the European Union, on a VPS managed by PB Devs.

We use the self-hosted Umami tool at umami.pbdevs.com. Analytics starts only after consent is given in the cookie banner. The legal basis is consent under Article 6(1)(a) GDPR.

Umami does not use cookies and does not identify a user across websites. It collects anonymous visit statistics: the page visited, country, browser, and referral source. Umami servers are located in the European Union.

The website uses only solutions necessary to remember the language and the analytics choice. We do not use advertising cookies.

• The NEXT_LOCALE cookie, used by next-intl to remember the language, is stored for 1 year.
• The dd-consent localStorage entry contains the decision version, whether analytics was accepted or declined, and the date of the decision.

The map does not load automatically on the contact page. The frame from openstreetmap.org is loaded only after you consciously click the "Show map" button.

After the click, OpenStreetMap, operated by the OpenStreetMap Foundation in the United Kingdom, may store its own cookies and receive technical connection data.

The server records the IP address, request time, and address of the page visited. Logs are used solely to keep the website secure and are retained for up to 30 days.

Data may be received only by PB Devs as the email and managed hosting provider, and by the workshop itself. We do not transfer data outside the European Economic Area, except for data that may be sent to the OpenStreetMap Foundation in the United Kingdom after the map is consciously enabled.

We do not create user accounts, profile users, or make automated decisions about them.

We retain data only for as long as the stated purpose requires.

• Contact form data: for up to 12 months after the correspondence ends.
• Quote order data: until claims become time-barred, but no longer than 6 years.
• Server logs: for up to 30 days.

You can exercise your rights by emailing kontakt@deskaidluto.pl. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

You may lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warszawa, Poland.

• The right to access your data and receive a copy.
• The right to rectification, erasure, and restriction of processing.
• The right to data portability.
• The right to object to processing based on a legitimate interest.
• The right to withdraw consent at any time.