Privacy Policy

1. Data Controller

The controller of your personal data is Constans Consulting Sp. z o.o., ul. Pużaka 2/7, 02-495 Warsaw, Poland, KRS 0000365425, NIP 522-296-14-35, REGON 142592915.

Data-protection contact: biuro@constans.biz.pl.

2. Scope and purposes of processing

We process personal data for the following purposes:

• Handling enquiries sent via the contact form or e-mail – legal basis: Art. 6(1)(a) GDPR (consent) and Art. 6(1)(f) GDPR (legitimate interest – responding to the enquiry).
• Performance of contracts and business communication – Art. 6(1)(b) and (f) GDPR.
• Compliance with legal obligations (e.g. accounting, tax) – Art. 6(1)(c) GDPR.

Categories of data: name, e-mail address, phone number, company name, message content and any other information voluntarily provided.

3. Contact form – processor

The contact form is processed using FormPost.eu, operated at https://www.formpost.eu/. FormPost.eu acts as a data processor within the meaning of Art. 28 GDPR – it receives data submitted through the form and forwards it to our e-mail address.

When you submit the form, FormPost.eu may process:

• the form content (fields listed above),
• the sender's IP address and technical information needed for spam protection,
• submission timestamps.

Data is processed on servers located within the European Union. Detailed information is available in the provider's policy at https://www.formpost.eu/.

4. Other recipients

Data may be disclosed to:

• e-mail and hosting providers,
• website hosting provider (Lovable / Vercel),
• accounting and legal service providers,
• public authorities, only within the scope required by law.

5. Retention period

• Correspondence resulting from the form – up to 24 months from the last contact, unless a cooperation is established.
• Contract-related data – for the duration of the contract and the period required by law (including tax law – up to 5 years).

6. Your rights

You have the right to: access your data, rectify, erase, restrict processing, data portability, object, and withdraw consent at any time (without affecting the lawfulness of processing carried out before withdrawal). You also have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).

7. Cookies

The website may use essential cookies required for proper operation. We do not use cookies for advertising profiling. Cookie settings can be changed in your browser.

8. Transfers outside the EEA

As a rule, data is processed within the European Economic Area. Any transfer outside the EEA is carried out on the basis of Standard Contractual Clauses approved by the European Commission.

9. Automated decision-making

We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning data subjects.

10. Changes to this policy

We reserve the right to update this policy. The current version is always available at this URL.

Last updated: 28 April 2026.