Privacy and cookies policy
Last updated: 7 September 2026
1. Data controller
The data controller isPLAN GROUP sp. z o.o., al. Grunwaldzka 413, 80-309 Gdańsk, Poland, KRS 0000971382, NIP 5842817738, REGON 522004318. For privacy matters, contact hello@planweb.pl.
2. Data we process
We may process data provided through the form or correspondence, in particular your name, company, email address, phone number, enquiry content and information about a planned project or cooperation. The server may also process basic technical data such as IP address, device type, connection date and time, and security logs.
3. Purposes and legal bases
- handling enquiries and taking steps before entering into a contract — Article 6(1)(b) GDPR;
- business correspondence, website security and establishing, pursuing or defending claims — Article 6(1)(f) GDPR;
- compliance with legal, accounting and tax obligations — Article 6(1)(c) GDPR;
- other activities requiring consent — Article 6(1)(a) GDPR, where such consent is given.
Our legitimate interests include efficient handling of business correspondence, protecting the website against abuse and the ability to defend against claims.
4. Contact form
Providing data in the form is voluntary, but fields marked as required are necessary for us to respond. Sending an enquiry does not require marketing consent. Data is used to handle the specific enquiry and, where applicable, prepare cooperation.
5. Data recipients
Data may be disclosed or entrusted to providers of hosting, email, IT tools, security, legal and accounting services — only to the extent necessary to provide their services and on an appropriate legal or contractual basis.
6. Transfers outside the EEA
Where a provider transfers data outside the European Economic Area, mechanisms permitted under Chapter V GDPR are used, including an adequacy decision or Standard Contractual Clauses, depending on the provider and place of processing.
7. Retention periods
- enquiry data — for the duration of handling the enquiry and then for the period necessary to document correspondence and until relevant limitation periods expire;
- contract-related data — for the duration of the contract and for periods required by tax, accounting and claims regulations;
- technical and security logs — for a period justified by website security and incident diagnostics, in accordance with the hosting provider’s policy.
8. Your rights
You have the right to access, rectify or erase your data, restrict processing, data portability, object to processing and, where processing is based on consent, withdraw that consent at any time without affecting prior lawful processing. You may also lodge a complaint with the President of the Personal Data Protection Office in Poland.
9. Cookies and local storage
If such tools are added in the future, they will be activated only after appropriate consent has been obtained and this policy will be updated.
10. Cookie settings
The “Cookie settings” button in the footer shows the current scope of mechanisms used. As only necessary mechanisms are currently used, there are no optional categories requiring consent.
11. Fonts
The website uses the Montserrat typeface hosted locally on the PLAN Web server. Displaying the font does not require a connection to Google Fonts or data transfer to Google for this purpose.
12. Profiling and automated decisions
We do not make decisions about users based solely on automated processing of form or technical website data where those decisions produce legal effects or similarly significantly affect them. The current version of the website does not conduct marketing profiling.
13. Security and changes
We apply technical and organisational measures appropriate to the risk. This policy may be updated if the website operation, tools used, scope of services or applicable law changes.