Skip to content

Privacy Policy

Last updated: 08.06.2026

1. Data controller

The controller of your personal data is Tectum DachDesign sp. z o.o., registered office: ul. Akacjowa 5, Lędziny, 46-053 Chrząstowice, Poland (Opole Voivodeship). The company has a branch in Głogówek (Rynek 15).

  • VAT ID (NIP): 9910556911
  • REGON: 529364617
  • KRS: 0001121203 (District Court in Opole, 8th Commercial Division of the National Court Register)

For data protection matters write to biuro@tectum-dachdesign.pl or call +48 517 394 461.

2. Purposes and legal basis

  • Responding to enquiries (website forms, phone, email) - GDPR Art. 6(1)(b) (pre-contractual steps) or Art. 6(1)(f) (our legitimate interest: handling enquiries).
  • Preparing a quote and performing a contract - GDPR Art. 6(1)(b).
  • Legal obligations (invoices, accounting, archiving) - GDPR Art. 6(1)(c).
  • Recruitment (form on the /kariera/ page) - GDPR Art. 6(1)(b); for data provided voluntarily and future recruitment - Art. 6(1)(a) (consent).
  • Measuring traffic and ad performance (Google tag) - GDPR Art. 6(1)(f) (our legitimate interest: statistics and campaign evaluation).
  • Establishing, exercising or defending legal claims - GDPR Art. 6(1)(f).

3. Scope of processed data

  • Contact data: name, phone number, email address, company name - if you provide them.
  • Project information: type of service, roof area, location, planned date, message content.
  • Recruitment data: data provided in the careers form and attached documents.
  • Billing data: invoice details - for clients we sign a contract with.
  • Technical data: IP address, browser and device type, usage data collected by the Google tag.

4. Data recipients

Your data may be received only by:

  • our hosting provider - the server that runs the website and stores form submissions, and the email service that receives submission notifications,
  • Google (Google Ireland Ltd. and Google LLC) - the Google tag: Google Ads (AW-16969000856) and Google Analytics 4 (G-6HS56VG1JL), and Google Maps on the contact page,
  • public authorities - only where required by law.

Processors acting on our behalf do so under data processing agreements (GDPR Art. 28).

5. Transfers outside the EEA

Google may also process data in the United States. Transfers are based on the European Commission decision on the EU-US Data Privacy Framework, in which Google LLC participates, and on standard contractual clauses.

6. Retention period

  • Form enquiries and correspondence: up to 12 months from the last contact, unless we sign a contract.
  • Client data (contracts): for the term of the contract and the warranty period, then until claims become time-barred.
  • Invoices and accounting records: 5 years from the end of the year in which the tax payment deadline passed.
  • Recruitment: until the recruitment ends or, if you consent to future recruitment, until you withdraw that consent.
  • Google tag data: according to the retention settings in Google Analytics (up to 14 months) and Google Ads.

7. Your rights (GDPR)

You have the right to:

  • access your data and receive a copy (Art. 15 GDPR),
  • rectification (Art. 16),
  • erasure (Art. 17),
  • restriction of processing (Art. 18),
  • data portability (Art. 20),
  • object to processing based on legitimate interest (Art. 21),
  • withdraw consent at any time, without affecting the lawfulness of processing before withdrawal (Art. 7(3)),
  • lodge a complaint with the President of the Personal Data Protection Office (uodo.gov.pl).

To exercise your rights, write to biuro@tectum-dachdesign.pl.

Providing data is voluntary, but without contact details we cannot reply to your enquiry, and without the careers form data we cannot consider your application.

8. Cookies and analytics

The website tectum-dachdesign.pl stores in your browser:

  • settings - your chosen language (cookie blueprint_lang_pref) and light/dark theme (browser local storage),
  • Google tag files (e.g. _ga, _ga_*, _gcl_au) - visit statistics and Google Ads performance measurement.

Details and how to disable them are in the Cookie Policy.

9. Profiling and automated decisions

We do not make decisions about you based solely on automated processing, including profiling. We use Google tag data as statistics and to evaluate advertising campaigns.

10. Data security

We apply technical and organisational measures to protect data against unauthorised access, loss or destruction, including an encrypted connection (HTTPS), restricted access to the admin panel and regular backups.

11. Data protection contact

12. Changes to this policy

We update this policy when the way we process data or the law changes. The current version is always available on this page.

Last updated: 27.09.2026

Menu