Privacy policy

How we process the personal data of users of szyldyreklamy.pl.

Last updated: 1 October 2026.

This is a translation provided for convenience. If it differs from the Polish version, the Polish version prevails.

1. General provisions

This Privacy Policy sets out how we process the personal data of users of the szyldyreklamy.pl website, including data sent through the quote request form and data collected through cookies. It fulfils the information obligation under Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).

2. Data controller

The controller of your personal data is:

3. Data Protection Officer

The Controller has not appointed a Data Protection Officer. For any matter related to the processing of personal data, you can contact the Controller directly at biuro@szyldyreklamy.pl.

4. Data we process

Through the quote request form we process your name and email address and, if you provide them, your phone number, company name, preferred contact method, installation address, project description, notes and the files you attach (photos, drawings and documents) together with their names. When you send a request, we also record your device's IP address and the date and time it was sent.

If you consent to analytics cookies, Google Analytics collects identifiers stored in cookies, technical data about your browser and device, the address of the page you visit and information about how you use the site. If you consent to marketing cookies, Meta Pixel collects identifiers stored in cookies, your IP address, technical data about your browser and device, the address of the page you visit and information about events on the site, such as page views and sent requests.

5. Purposes and legal bases

We process personal data in order to:

• prepare and present a quote and respond to your request, including taking steps at your request before entering into a contract, under Article 6(1)(b) GDPR;
• protect the form against spam and automated submissions, under Article 6(1)(f) GDPR, that is the Controller's legitimate interest in keeping the site secure;
• analyse traffic on the site and how it is used, based on your consent, under Article 6(1)(a) GDPR in connection with Article 399 of the Polish Electronic Communications Law of 12 July 2024;
• measure the effectiveness of ads shown on Facebook and Instagram and show ads to people who have visited the site, based on your consent, under Article 6(1)(a) GDPR in connection with Article 399 of the Polish Electronic Communications Law of 12 July 2024;
• establish, pursue or defend legal claims, under Article 6(1)(f) GDPR, that is the Controller's legitimate interest in protecting its rights.

By ticking the consent box in the form, you agree that we may use the contact details you provide to prepare and present a quote, including contacting you by phone or email about it, as referred to in Article 398 of the Polish Electronic Communications Law of 12 July 2024. This consent covers only that request.

Providing data in the form is voluntary but necessary for us to prepare a quote. Consenting to analytics and marketing cookies is voluntary, and not consenting does not limit your use of the site.

Your data is not used for automated decision-making that produces legal effects concerning you or similarly significantly affects you. With your consent, data collected by Meta Pixel may be used for profiling to tailor the ads you see.

6. How long we keep data

Data sent through the form is kept for 12 months from the day the request was sent. It is then deleted from the Controller's systems. If a claim arises, data may be kept until the claim becomes time-barred or the proceedings are finally concluded.

Attached files are stored in Cloudflare R2 for 90 days from the day the request was sent and are then deleted automatically. Files uploaded without sending the form are deleted automatically after one day. Copies of files that the Controller downloads to prepare a quote are kept for the period stated above for the rest of the form data.

Data used to protect the form against abuse is stored in a form that does not directly identify you, only for as long as that purpose requires, and is then deleted. Section 10 describes how long cookies are kept.

7. Recipients

Personal data may be shared with:

• providers of hosting, database and email services to the Controller, to the extent needed to run the site and handle the form;
• Cloudflare, Inc., provider of Cloudflare Turnstile, which protects the form against automated submissions, as regards your IP address and technical data about your browser and device, and also as provider of Cloudflare R2, which stores attached files, as regards the files, their names and the IP address of the device they are uploaded from;
• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, provider of Google Tag Manager, as regards your IP address and the technical data needed to load its script, and, if you consent to analytics cookies, as provider of Google Analytics, as regards the data that tool collects;
• Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, D04 X2K5, Ireland, provider of Meta Pixel, as regards data collected after you consent to marketing cookies;
• bodies entitled under the law, at their request.

For collecting data with Meta Pixel and sending it to Meta, the Controller and Meta Platforms Ireland Ltd. are joint controllers under the terms of the Controller Addendum. Meta's further processing of the data is described in the Meta Privacy Policy. You can send requests about data processed by Meta to the Controller or directly to Meta.

8. Transfers outside the European Economic Area

Because we use Cloudflare Turnstile and Google Tag Manager and, with your consent, Google Analytics and Meta Pixel, data may be transferred to the United States. The transfer is based on the European Commission's adequacy decision under the EU-US Data Privacy Framework, in which Cloudflare, Inc., Google LLC and Meta Platforms, Inc. participate, and, where that decision does not apply, on standard contractual clauses approved by the European Commission. Attached files are stored on servers located in the European Union.

9. Your rights

You have the right to:

• access your data and receive a copy of it;
• have your data corrected;
• have your data erased and its processing restricted;
• data portability for data processed to take steps before entering into a contract;
• object to processing based on the Controller's legitimate interest;
• withdraw your consent to phone and email contact at any time, without affecting the lawfulness of contact made before you withdrew it;
• withdraw your consent to analytics and marketing cookies at any time with the “Cookie settings” button in the site footer, without affecting the lawfulness of processing carried out before you withdrew it;
• lodge a complaint with the supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, Poland.

To exercise these rights, contact the Controller at biuro@szyldyreklamy.pl.

10. Cookies

The site uses the following cookies and similar technologies:

• necessary: the cc_cookie cookie, set by the site for 6 months, which stores your choice in the cookie banner; the theme entry in browser storage, which stores your chosen colour theme and is never sent to the server; Cloudflare Turnstile may also store technical data in your browser that is needed to run its check;
• analytics: the _ga and _ga_* cookies of Google Analytics, kept for up to 2 years, used to distinguish users and analyse how the site is used;
• marketing: the _fbp and _fbc cookies of Meta Pixel, kept for up to 3 months, used to measure the effectiveness of ads and show them to people who have visited the site.

Necessary cookies are required to provide the service you request, so under Article 399 of the Polish Electronic Communications Law of 12 July 2024 they do not need consent. Analytics and marketing cookies are set only after you consent in the cookie banner. You can change or withdraw your consent at any time with the “Cookie settings” button in the site footer, or by deleting cookies in your browser settings.

11. Security

The Controller uses appropriate technical and organisational measures to keep the data secure, including an encrypted connection (HTTPS/TLS) and restricted access to the data.

12. Final provisions

This policy applies from the day it is published. The Controller may change it, in particular because of changes in the law or in the site's functionality.