Privacy policy

This Privacy Policy sets out the rules for the processing and protection of personal data of users of the website available at www.grupaforma.com (the “Website”), as well as the rules for the use of cookies.

We care about the privacy of visitors to our Website. We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the “GDPR”) and applicable Polish law.

1. Data Controller

The controller of your personal data is Forma Szultk Oskar Paw Jakub spółka komandytowa (operating under the brand “Grupa Forma”), with its registered office in Kraków:

  • Address / registered office: ul. Gen. Bohdana Zielińskiego 22, 30-320 Kraków, Poland
  • Warehouse: Braci Saków 5, 33-100 Tarnów, Poland
  • Tax ID (NIP): 6772392322
  • Statistical number (REGON): 362474453
  • Court register number (KRS): 0000574209

For matters relating to the protection of personal data, you can contact us:

2. What data we collect

Depending on how you use the Website, we may process the following categories of data:

  • Data provided through the contact form: name, e-mail address, phone number and the content of your message.
  • Data provided during direct contact (e-mail, phone) regarding a request for a quote or cooperation.
  • Technical data and data on activity within the Website: IP address, browser and device type, operating system, traffic data and information on how you use the site – collected automatically via cookies and analytics tools.

Providing data is voluntary but necessary to use the contact form and to receive a response to your enquiry.

3. Purposes and legal bases of processing

We process your personal data for the following purposes:

  • Handling enquiries and contact submitted via the form, e-mail or phone – on the basis of your consent (Article 6(1)(a) GDPR) and in order to take steps prior to entering into a contract (Article 6(1)(b) GDPR).
  • Performance of a contract and provision of design, manufacturing and installation services – Article 6(1)(b) GDPR.
  • Compliance with legal obligations to which the Controller is subject, e.g. tax and accounting obligations – Article 6(1)(c) GDPR.
  • Pursuit of the Controller’s legitimate interests, such as marketing of our own services, asserting or defending against claims, and conducting Website analytics – Article 6(1)(f) GDPR.

4. Data retention period

We retain personal data for the period necessary to achieve the purposes for which it was collected:

  • data processed on the basis of consent – until consent is withdrawn;
  • data related to the performance of a contract – for the duration of the contract and for the limitation period for claims;
  • data processed in connection with legal obligations (e.g. accounting) – for the period required by law;
  • data processed on the basis of a legitimate interest – until an effective objection is raised or that interest ceases to apply.

5. Data recipients

Your personal data may be shared with:

  • entities providing us with IT, hosting, analytics and marketing services;
  • providers of tools used on the Website (e.g. Google);
  • subcontractors and partners involved in carrying out projects;
  • entities authorised to obtain data under applicable law.

These entities process data solely on the basis of data processing agreements and in accordance with our instructions.

6. Transfer of data outside the European Economic Area

In connection with the use of tools provided by entities established outside the EEA (e.g. Google), your data may be transferred to third countries. In such cases, the transfer takes place on the basis of appropriate safeguards, in particular standard contractual clauses approved by the European Commission, or on the basis of an adequacy decision.

7. Cookies

The Website uses cookies – small text files stored on the user’s device. We use the following types of cookies:

  • Essential – necessary for the proper functioning of the Website.
  • Performance and analytics – allow us to analyse how the Website is used, e.g. via Google Analytics and Google Tag Manager.
  • Functional – enable us to remember selected settings, e.g. the language version.
  • Marketing – serve to tailor displayed content and advertising.

You can change your cookie settings in your web browser at any time, including blocking or deleting them. Restricting the use of cookies may affect some functionalities of the Website.

8. Analytics and third-party tools

On the Website we use tools provided by third parties:

  • Google Analytics and Google Tag Manager – for traffic analysis and statistics;
  • plugins and links to social media services, including LinkedIn.

The use of these tools may involve the processing of data by their providers in accordance with their own privacy policies.

9. Your rights

In connection with the processing of personal data, you have the following rights:

  • the right to access your data and obtain a copy of it;
  • the right to rectify (correct) your data;
  • the right to erase your data (“the right to be forgotten”);
  • the right to restrict processing;
  • the right to data portability;
  • the right to object to processing;
  • the right to withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.

To exercise your rights, please contact us at wyceny@grupaforma.com.

10. Right to lodge a complaint

If you consider that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland).

11. Automated decision-making and profiling

Your personal data is not used for automated decision-making, including profiling, that would produce legal effects concerning you or similarly significantly affect you.

12. Changes to the Privacy Policy

We reserve the right to make changes to this Privacy Policy, in particular in connection with changes in the law or the technologies we use. The current version of the Policy is always available on the Website.

Last updated: 23 June 2026