General provisions
- This Privacy Policy sets out the rules for processing personal data collected through the website CasaLinea.pl, hereinafter the "Website".
- The controller of personal data is RenovEstimate Sp. z o.o., with its registered office in Kraków, ul. Królewska 65A / 1, 30-081 Kraków, tax ID (NIP): 6772528201, REGON: 542266014, entered in the register of entrepreneurs of the National Court Register under KRS number 0001184550, kept by the District Court for Kraków-Śródmieście in Kraków, 11th Commercial Division of the National Court Register, with share capital of PLN 5,000 (hereinafter the "Controller").
- Where necessary, the Controller can be contacted on matters relating to the protection of personal data at the e-mail address: kontakt@casalinea.pl
- This policy also covers the use of external tools (Google Analytics 4, Meta Pixel and the Meta Conversions API, Vercel Web Analytics) and of the cookies and similar technologies used on the Website.
Scope of the data collected and purposes of processing
The table below sets out the categories of data, the purposes of processing and the legal bases:
| Type of data | Purpose of processing | Legal basis |
|---|---|---|
| Full name, e-mail address, phone number and the information about the planned work given in the contact form or the quote form (service, wall preparation status, area, location, timing, message, attachment) | Contacting the user in order to prepare a quote / carry out the renovation | Art. 6(1)(b) GDPR (steps taken prior to entering into a contract) |
| Technical and technological data (IP address, data about the device and browser, traffic source) | Keeping the Website running and secure (server logs, protecting the forms against abuse), aggregate visit statistics without cookies (Vercel Web Analytics) | Art. 6(1)(f) GDPR (the controller’s legitimate interest) |
| Google Analytics cookies (_ga, _ga_*), a pseudonymous browser identifier, device and browser data, approximate location (country, region), the addresses of pages visited and events on the Website (e.g. a form being sent, a click on the phone number or e-mail address, without contact details), passed on by Google Analytics 4 | Statistics on how the Website is used (which pages are visited, where users come from, how many people send the forms), in order to improve the Website | Art. 6(1)(a) GDPR (analytics consent given in the cookie settings, which can be withdrawn at any time) |
| Meta cookies (_fbp, _fbc), IP address, browser data, the addresses of pages visited and events on the Website (e.g. a form being sent, without contact details), passed on by Meta Pixel and the Meta Conversions API | Retargeting, measuring the effectiveness of advertising campaigns | Art. 6(1)(a) GDPR (marketing consent given in the cookie settings, which can be withdrawn at any time) |
| Data relating to e-mail communication / documentation (optional) | Pursuing claims, documentation, customer service | Art. 6(1)(f) GDPR |
The data will not be used for purposes other than those the user is informed of.
Recipients of the data
- The Controller entrusts the processing of personal data to entities that process it on the Controller’s behalf (processors): Vercel Inc. (hosting of the Website and visit statistics), Supabase Pte. Ltd. (database and file storage: quote requests and offers), Plus Five Five, Inc., the operator of Resend (sending e-mails from the forms), Upstash, Inc. (protecting the forms against abuse). Once analytics consent has been given, data is also processed by Google Ireland Limited (Google Analytics 4), and once marketing consent has been given, data is passed to Meta Platforms Ireland Limited (Meta Pixel and the Meta Conversions API).
- Processors receive data only to the extent necessary to perform the service and must apply appropriate security measures.
- Where required by law, data may be disclosed to public authorities (e.g. courts) in accordance with the applicable legislation.
Transfer of data outside the European Economic Area (EEA)
Some providers (Vercel, Supabase, Resend, Upstash, Google, Meta) are based or have infrastructure outside the EEA, in particular in the United States and Singapore. If data is processed outside the EEA, the Controller ensures that the transfer takes place on the basis of appropriate safeguards: the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework (Vercel, Resend, Upstash, Google, Meta) and the EU standard contractual clauses (Supabase, and for the other providers as an additional safeguard). The user has the right to obtain information on which safeguards have been applied.
Data retention period
- Personal data from the forms (the contact form and the quote form) will be stored for no longer than 12 months from the time it was obtained, unless the user’s consent or other legal provisions require a different period.
- Technical data (server logs) will be stored in accordance with the policy of the hosting provider (e.g. 3–6 months), in line with the agreement with the provider. Google Analytics 4 data linked to a browser identifier is kept for 14 months and then deleted by Google. The IP address recorded to protect the forms against abuse is deleted automatically after 121 minutes at the latest.
- Once the retention period has expired, the data will be deleted or anonymised.
User rights
Under the GDPR the user has the following rights:
- the right of access to the data
- the right to rectification of the data
- the right to erasure of the data ("the right to be forgotten")
- the right to restriction of processing
- the right to object to processing (e.g. marketing)
- the right to data portability (to another controller)
- the right to withdraw consent – withdrawing consent does not affect the lawfulness of processing carried out before its withdrawal
In addition, the user has the right to lodge a complaint with the President of the Personal Data Protection Office (UODO).
Data security
The Controller applies appropriate technical and organisational measures (e.g. encryption of transmission, restricted access, backups, audits) to protect the data against unauthorised access, loss, destruction or alteration.
Final provisions
- The Controller reserves the right to make changes to the Privacy Policy (e.g. in the event of changes to legislation or to the tools used).
- Users will be informed of any material changes (e.g. by a notice on the Website) at least 14 days before the changes take effect.
- Any questions about the Privacy Policy should be addressed to the Controller at the e-mail address given above.
Contact on data protection matters
RenovEstimate Sp. z o.o., ul. Królewska 65A / 1, 30-081 Kraków
kontakt@casalinea.plWrocław and the surrounding area – service area