Privacy Policy

This Privacy Policy provides essential information regarding the purposes, methods of processing, and security of your personal data as a user of the website: gmfgroup.pl (hereinafter referred to as the “Website”). By reviewing this Privacy Policy, you will learn who the Controller of your personal data is, what personal data is collected by the Website, for what purposes it is used, and how it is protected.

§1. Basic Information

The Controller of your personal data is GMF Groups sp. z o.o., entered into the Register of Entrepreneurs kept by the District Court for the Capital City of Warsaw, 14th Commercial Division, under KRS number 0000365082, NIP: 9522097440, REGON: 9522097440.

You may contact the Controller via:

e-mail: rodo@gmfgroup.pl
phone: +48 22 789-09-76

§2. Principles of Data Processing

The Controller processes personal data in accordance with the following principles:

based on a legal basis and in compliance with the law (lawfulness);
fairly and honestly (fairness);
transparently for the data subject (transparency);
for specific purposes and not “just in case” (purpose limitation);
no more than necessary (data minimization);
ensuring data accuracy (accuracy);
for no longer than necessary (storage limitation);
with appropriate data security (integrity and confidentiality).

§3. Purposes, Legal Bases, and Scope of Data Processing

1. Your data will be processed for the following purposes:

Contact purposes — to respond to your message sent directly by e-mail, via a contact form, social media channel, or phone call, based on the Controller’s legitimate interest to respond to your inquiry.
Marketing purposes, only if you have given your consent.
Informational purposes — to provide you with important information regarding services you use via our Website.
Social media profile management (e.g., Facebook, Instagram) and informing users about our products, promotions, and business updates, based on our legitimate interest to run a business profile.
Technical purposes using cookies (technical cookies), based on our legitimate interest in ensuring the proper functioning of the Website.
Statistical and analytical purposes, if you have consented to analytical cookies.
Marketing purposes, if you have consented to marketing cookies.
Archiving phone numbers, messages, emails, based on our legitimate interest related to protection against potential claims.
Analysis of anonymous information, such as browser data, operating system, device, time spent on the website, navigation, clicks, approximate location, age range, and gender. These are anonymized, collected via advertising and analytics systems of our partners, and cannot identify a specific user.

2. Scope of data processing

If you contact us by email, through a form, social media, or phone, we will process the data you provide. Providing such data is voluntary. You may request deletion at any time.
If you like, comment, message, react to, or follow our social media profiles (e.g., Facebook, Instagram), we will process the data you make available on that platform. You can stop processing by unsubscribing/unfollowing the profile.
Other data we process include your IP address and cookie-stored information. You decide the scope of cookie use. Consent is voluntary and can be changed at any time through your browser or by deleting cookies.
We use APIs provided by external partners to integrate features such as maps, analytics, advertising, or social media. These may create or use cookies for data processing in accordance with the partners’ own privacy policies.

§4. No Automated Profiling

We do not use automated profiling on our Website to create marketing campaigns based on measuring user activity that would allow us to target a specific advertisement to an individual user.

Although we use advertising systems of our partners (Facebook, Google), the data they collect about your activity does not enable automated decision-making about you personally. Ads are created only for user groups based on general statistical data.

Information on how our partners apply profiling is available in their respective privacy policies.

§5. Data Recipients and Transfers Outside the EEA

Depending on the purpose of processing, your data may be shared with:

public authorities and state institutions, where required by Polish law;
the provider of Website software (hosting, server, domain);
the provider of Website development services;
the provider of marketing services and social media management;
the provider of cloud-based data/document storage;
the provider of cookie and consent management tools;
advertising partners (Facebook, Google), if you consented to marketing cookies;
analytics service providers (e.g., Google Analytics, Hotjar), if you consented to analytical cookies.

Your data is not transferred outside the EEA except when processed by:

Google Inc. (USA) — analytics (Google Analytics), Maps, Search Console, and other functionalities.
Google Inc. (USA) — advertising and ad measurement (Google Ads).
Facebook Inc. (USA) — social media services (Facebook, Instagram), ads, and analytics (Pixel, Conversion API).
Google Inc. (USA) — embedded YouTube videos.
Hotjar Ltd (Malta) — behavioral analytics.

§6. Data Retention Period

We cannot specify one universal data retention period.

If you contacted us by email, phone, form, or social media, your data will be processed until you request deletion or object to processing, or until we conclude that the Controller’s legitimate interest has been fulfilled.

§7. User Rights

You have the right to:

access your personal data and request correction, deletion, or restriction of processing;
data portability;
object to processing;
withdraw consent at any time (unless processing is required for contractual, legal, or legitimate interest purposes).

You may also file a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw).
More information is available at: www.uodo.gov.pl

§8. Information About Cookies

We use cookies on our Website.

A cookie-management plugin is installed on the Website, compliant with Google Consent Mode v2, created by a certified Google partner. This allows you to fully manage your cookie preferences in a clear and user-friendly way.

Cookies are small text files stored on user devices during website browsing. They facilitate Website use, improve service quality, and enable traffic analysis.

Cookies may be:

persistent, stored until their expiration or manual deletion;
session-based, removed when the browser closes.

We use first-party cookies (for website functionality, preferences, statistics) and third-party cookies (analytics, advertising, social media integration).

Users may manage cookie settings through their browser. Disabling cookies may affect Website functionality.

Types of cookies used:

Technical cookies — essential for Website operation.
Marketing cookies — for personalized ads, remarketing, and measuring ad effectiveness.
Analytical cookies — for analyzing Website usage, visits, traffic sources, and user behavior.

§9. Why We Use Cookies

Cookies help ensure:

convenient use of the Website;
content personalization;
saving user settings;
login management;
session continuity;
performance optimization;
personalized advertising;
integration with social media platforms.

§10. Functions of Technical Cookies

maintaining user sessions;
storing user preferences;
supporting form functionality (login, registration, contact forms);
monitoring performance for optimization;
enhancing Website security (e.g., CSRF protection, identity verification).

§11. Functions of Analytical Cookies

measuring Website traffic;
analyzing user behavior and navigation paths;
optimizing conversions;
segmenting users by behavior;
supporting A/B testing.

§12. Functions of Marketing Cookies

displaying personalized advertisements;
remarketing;
measuring ad performance;
managing multi-channel advertising campaigns;
testing and optimizing advertising content.