Privacy policy
This policy explains what personal data we collect on this site, what for, on what legal basis and how long we keep it. We apply the GDPR - Regulation (EU) 2016/679.
Data controller
The controller of your personal data is GLK Project Sp. z o.o., the company that owns the GLK Development brand. For anything concerning personal data, contact us at:
- GLK Project Sp. z o.o., Fabryczna 5, 38-320 Gorlice
What we collect
The site needs no account and no sign-in. We collect data in two situations:
- Contact form - your name, email address, project type and message, plus optionally your company name and phone number. You decide what the message contains.
- Technical submission data - your IP address and the time of submission, used only to limit how many enquiries arrive from one address and to filter out automated spam.
We do not ask for special categories of data (Art. 9 GDPR). Please do not include such data in your message.
Purposes and legal bases
- Answering your enquiry and taking steps prior to entering into a contract - Art. 6(1)(b) GDPR, and to the extent covered by the consent checkbox on the form - Art. 6(1)(a) GDPR.
- Protecting the site against abuse and spam - our legitimate interest, Art. 6(1)(f) GDPR.
- Establishing, exercising or defending legal claims - our legitimate interest, Art. 6(1)(f) GDPR.
Providing your data is voluntary, but without an email address and a message we cannot answer your enquiry.
How long we keep it
- Correspondence from the form - up to 24 months from the last contact on the matter. If we go on to work together, records are kept for as long as tax and accounting law requires.
- The IP address used for rate limiting - no longer than one hour, held in server memory only; it is not written to a database.
- The record of your consent and the time it was given - for as long as we process data on that basis.
Recipients and transfers outside the EEA
We do not sell personal data and do not share it with third parties for marketing. Data may be accessible to:
- the hosting and infrastructure provider that runs this site (Vercel Inc.), acting as our processor,
- the email provider through which your enquiry reaches us,
- our accounting or legal advisers, where necessary.
Some of these providers are established outside the European Economic Area. Where that is the case, transfers are made under the standard contractual clauses approved by the European Commission.
Your rights
In relation to this processing you have the right to:
- access your data and receive a copy of it,
- have inaccurate or incomplete data corrected,
- have your data erased,
- restrict processing,
- data portability,
- object to processing based on our legitimate interest,
- withdraw consent at any time - without affecting the lawfulness of processing carried out before the withdrawal.
To exercise any of these rights, email us at the address above. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland.
Cookies and analytics
The site stores no cookies or other identifiers in your browser for analytics, marketing or profiling. We use no analytics tools and no third-party ad networks.
Typefaces are served from our own origin, so opening the page makes no requests to external font providers.
If we ever introduce analytics, we will ask for your consent first and update this policy.
Security and automated decisions
The connection to this site is encrypted (HTTPS), and correspondence is accessible only to the people who need it to answer you.
We do not make decisions about you based solely on automated processing, including profiling.
Changes to this policy
If the way we process data changes, we will update this page along with the last-updated date shown at the top.