Privacy policy

Last reviewed: 22 September 2026

This notice explains how KSP Construction handles personal data under Regulation (EU) 2016/679 (GDPR) and the Polish Personal Data Protection Act. It covers this website and the phone and email contact the website points you to.

1. Who is responsible

The controller of your personal data is KSP CONSTRUCTION SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, Krzywa 14, 26-610 Radom, Poland, KRS 0001266880, NIP 9482660833, REGON 545728490.

Contact the controller about anything in this notice by email at kspkkacprowicz@gmail.com or by telephone on +48 661 769 870, or by post to the registered office above.

The company has not appointed a data protection officer. It is not required to, because it is not a public authority and its core activity is construction work rather than large-scale monitoring or processing of special category data. Contact the company directly at the address above.

2. What this website collects

The website itself collects nothing from you. It is a set of static pages with no contact form, no account, no analytics, no advertising and no third-party embeds, and its fonts are served from this site rather than from an external font service. Personal data reaches the company only when you choose to call or write.

As with any website, the hosting provider's servers record technical connection data, such as IP address, request time, requested address and browser identification, in order to deliver the pages and keep the service secure.

3. What is processed, why, and on what legal basis

Answering your enquiry

Data: your name, telephone number, email address, the site address and whatever you choose to tell us about the work. Purpose: to answer and to take steps at your request before any contract. Lawful basis: Article 6(1)(b) GDPR, and Article 6(1)(f) (our legitimate interest in handling business correspondence) where you write on behalf of another person or company. Retention: kept while the enquiry is live and for up to 12 months after the last contact, unless a contract follows.

Performing an agreed contract

Data: the contact and site details needed to carry out and settle the work. Purpose: performance of the contract. Lawful basis: Article 6(1)(b) GDPR. Retention: for the duration of the contract, then under the headings below.

Accounting, tax and statutory records

Data: invoicing and settlement data. Purpose: to meet obligations under Polish accounting and tax law. Lawful basis: Article 6(1)(c) GDPR. Retention: for the period those laws require, which is generally five years counted from the end of the relevant accounting or tax year.

Establishing and defending claims

Data: correspondence and contract records. Purpose: to establish, exercise or defend legal claims. Lawful basis: Article 6(1)(f) GDPR, our legitimate interest in protecting the company's position. Retention: until the relevant limitation period under the Polish Civil Code has expired.

Delivering and securing the website

Data: server connection logs held by the hosting provider. Purpose: to serve the pages, diagnose faults and prevent abuse. Lawful basis: Article 6(1)(f) GDPR. Retention: the retention period applied by the hosting provider for technical logs.

Giving your data is voluntary. Without contact details we cannot reply to an enquiry, and without the data needed for invoicing we cannot conclude or settle a contract. There is no automated decision-making and no profiling.

4. Who receives the data

Personal data may be made available to providers that support the company's operations and act on its instructions or under their own legal obligations: the email provider, the telecommunications operator, the website hosting provider, and accounting, legal or IT advisers. Data may also be disclosed to public authorities and courts where the law requires it. Personal data is never sold, rented or used for advertising.

Business email is handled through Google's Gmail service, so the content of any message you send to the address above is processed on Google's infrastructure.

5. Transfers outside the European Economic Area

Because email and hosting are provided by international service providers, personal data may be processed outside the EEA, including in the United States. Transfers of that kind rely on the mechanisms permitted by Chapter V of the GDPR, such as a European Commission adequacy decision or standard contractual clauses published by the provider. You can ask us which mechanism applies to a particular provider and we will tell you what the provider has published.

6. Your rights

Under the GDPR you have the right to:

• obtain confirmation of processing and a copy of your data (Article 15);
• have inaccurate or incomplete data corrected (Article 16);
• have data erased where one of the grounds in Article 17 applies;
• have processing restricted in the cases listed in Article 18;
• receive data you provided in a structured, machine-readable format and have it transmitted to another controller, where processing is based on consent or on a contract and is carried out by automated means (Article 20);
• object at any time, on grounds relating to your particular situation, to processing based on legitimate interests (Article 21);
• withdraw consent at any time, without affecting processing carried out before the withdrawal, where processing is based on consent (Article 7(3)).

To exercise any of these rights, write to kspkkacprowicz@gmail.com or to the registered office and say which right you are using. We will respond within one month of receiving the request; if the request is complex that period can be extended by up to two further months, and we will tell you if that happens. We may ask for information needed to confirm your identity. Exercising these rights is free of charge.

7. Complaints

If you believe your data is being processed unlawfully, you can lodge a complaint with the Polish supervisory authority: the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, Poland, uodo.gov.pl. You can also bring proceedings before a court.

8. Cookies

This website sets no cookies and stores nothing on your device. The cookie policy sets out what that means in practice.

9. Changes to this notice

This notice is updated when the website, the service providers or the legal requirements change. The review date at the top identifies the current version. Material changes will be reflected here before they take effect.

Back to the website