Last updated: 7 April 2026
The controller of personal data collected through the blocks.concreate.pl website (hereinafter “Website”) is ConcreAte S.A., ul. Tenczyńska 18A, 32-067 Tenczynek, Poland (hereinafter “Controller”).
Contact: blocks@concreate.pl
Name, email address, phone number (optional) and message content. Data provided voluntarily by the User to establish contact.
IP address, browser type and version, operating system, screen resolution, visit source, pages visited, time spent on page, browser language. Collected via cookies and server logs.
Handling enquiries — responding to contact form messages and conducting commercial correspondence. Basis: Art. 6(1)(f) GDPR (legitimate interest).
Preparing and fulfilling offers — preparing quotations and cooperation terms. Basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR.
Contract performance — executing contracts, invoicing, logistics and complaints. Basis: Art. 6(1)(b) GDPR.
Legal obligations — maintaining tax and accounting documentation. Basis: Art. 6(1)(c) GDPR.
Website analytics — visit statistics, traffic sources, user behaviour. Basis: Art. 6(1)(a) GDPR (consent via cookie banner). Implemented via Google Analytics 4 and Microsoft Clarity. Umami Cloud operates in cookieless mode and does not require consent.
Establishing and pursuing claims — safeguarding the Controller’s legitimate interest. Basis: Art. 6(1)(f) GDPR.
PHP session (form session identifier), cookie_consent (remembering cookie preference).
Umami Cloud — collects anonymous traffic data without using cookies or storing personal data. Does not require user consent. Data processed on servers within the European Union.
Google Analytics 4 — collects anonymous traffic data. Loaded only after User consent via cookie banner. Data transferred to Google LLC (USA) under Standard Contractual Clauses.
Microsoft Clarity — collects analytics data about user behaviour (heatmaps, session recordings). Loaded only after User consent. Data transferred to Microsoft Corporation (USA).
You can change your cookie settings at any time by refreshing the page and making a new choice in the cookie banner or by changing your browser settings. Restricting cookies may affect some Website features.
Contact form (cooperation established) — duration of contract plus 6 years.
Contact form (no cooperation) — 3 years from last contact.
Tax documentation — 5 years from end of tax year.
Analytics data (cookies) — per browser settings and cookie expiry (up to 2 years).
Data processed on the basis of consent — until consent is withdrawn.
Personal data may be shared with:
Google LLC — Google Analytics 4. Transfer outside EEA under Standard Contractual Clauses.
Umami Cloud — cookieless analytics, data processed on servers within the European Union. No personal data is stored.
Microsoft Corporation — Clarity (user behaviour analytics). Transfer outside EEA under Standard Contractual Clauses.
Hosting provider (LH.pl sp. z o.o.) — data processing agreement, servers in Poland.
Entities related to the Controller — to the extent necessary for preparing offers and fulfilling contracts.
Personal data is not sold to third parties and is not used for automated decision-making or profiling.
Under GDPR you have the right to: access your data (Art. 15), rectify data (Art. 16), erase data (Art. 17), restrict processing (Art. 18), data portability (Art. 20), object to processing (Art. 21) and withdraw consent at any time.
To exercise your rights, contact: blocks@concreate.pl
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO), ul. Stawki 2, 00-193 Warsaw, Poland.
The Controller reserves the right to amend this Privacy Policy. Changes are published on this page with the update date and take effect upon publication.