Privacy and cookie policy

1. Data controller

AVESTO sp. z o.o.
ul. Miodowa 3
83-010 Straszyn
Poland

KRS 0001251737 · Tax ID 6040271576 · REGON 545171047

For anything concerning personal data: avesto.biuro@gmail.com or +48 784 382 698.

2. What data we may process

Simply browsing the site requires you to give us nothing. Data appears only when you hand it to us yourself.

From the forms

The site has two forms — a free quote request and a request for a free website design. Only three things are required: your name or company name, an e-mail address and a description of what you need. The rest is optional: a phone number, the address of your current site, the type of site and a rough budget.

Enquiries reach us only as an e-mail and stay there. We do not save them in any database and we do not build a contact list from them.

Technical data

The server the site runs on keeps standard access logs containing, among other things, an IP address, a timestamp and the requested address. The hosting provider keeps them as part of its service. We do not use those logs to analyse visitor behaviour.

So that nobody can flood our mailbox with hundreds of messages, we limit how many can be sent from one connection. We do not store your IP address for this — we replace it with an irreversible marker, which is deleted within an hour at the latest.

3. Why, and on what basis

A. Answering your enquiry and preparing an offer

The basis is Article 6(1)(b) GDPR — steps taken at your request before entering into a contract.

B. Carrying out the work

If a contract comes about — Article 6(1)(b) GDPR (performance of the contract), and for invoices and accounts Article 6(1)(c) GDPR (legal obligation).

C. Keeping the site secure

Server logs and the limit on form submissions — Article 6(1)(f) GDPR, our legitimate interest in keeping the site working and free of spam.

D. Establishing and defending claims

Should it become necessary — Article 6(1)(f) GDPR, our legitimate interest.

E. Visit statistics

Solely Article 6(1)(a) GDPR — your consent. Storing and reading information on your device also requires consent under the Polish Electronic Communications Law of 12 July 2024.

4. How long we keep data

• Enquiries that did not lead to work — up to 12 months from the last contact.
• Enquiries that did lead to work — for the duration of the project and then for as long as tax and accounting rules require, plus the period during which claims under the contract can be pursued or defended.
• The safeguard protecting the form from abuse — at most one hour.
• Your choice in the privacy settings — one year, after which we ask again.
• Data in Google Analytics — for the retention period set in Google Analytics.

5. Who else may receive data

• the hosting provider whose servers run this site,
• the e-mail provider where the correspondence is kept,
• IT service providers — only to the extent needed to deliver a service to us,
• Google — for Google Analytics, and only after you have consented,
• public authorities, where the law requires it.

We do not sell personal data and we do not share it with others for their own marketing.

6. Google Analytics

We use Google Analytics 4 to understand better how our website is used and to improve it. That covers, among other things, which pages are visited, where visits come from, and the type of device and browser.

Google Analytics runs only after you consent. If you do not give consent, the tool is not used to measure your visit.

We do not send data entered into the forms to Google Analytics — not your name, company name, e-mail address, phone number or the content of your message.

We do not currently use Google Analytics for remarketing or ad personalisation. The advertising features are switched off in our configuration.

The service is provided by Google on terms that Google itself publishes and updates. Data may also be processed outside the European Economic Area; for such cases Google states that it applies the safeguards provided for in data protection law. Google’s current documents are available at business.safety.google/privacy.

Refusing does not limit access to the site — all content and forms work exactly the same. You can change your choice at any time in Privacy settings, in the footer. Once consent is withdrawn we stop measuring and delete the Google Analytics files stored in your browser.

7. What we store on your device

Opening the site connects you to no server but ours — every part of the page is kept here.

8. Your rights

You have the right to:

• access your data and receive a copy of it,
• have inaccurate data corrected,
• have data erased,
• restrict processing,
• data portability, where it applies,
• object to processing based on legitimate interest,
• withdraw your consent to statistics at any time,
• lodge a complaint with the President of the Polish Data Protection Office.

Withdrawing consent does not affect the lawfulness of processing carried out on that basis beforehand.

To exercise any of these rights, write to avesto.biuro@gmail.com. We respond without delay and within one month at the latest.

9. Do you have to provide data

Providing data is voluntary. The fields marked as required are, however, needed to handle your enquiry — without them we may not be able to prepare an answer, a quote or a free website design.

Fields marked as optional can be left blank. You can also skip the form and write directly to avesto.biuro@gmail.com or call us.

Refusing consent to Google Analytics has no effect on your ability to use the site or the forms.