Privacy and cookies policy
Effective as of 7 September 2026
1. Data controller
The controller of personal data is PLAN GROUP sp. z o.o., al. Grunwaldzka 413, 80-309 Gdańsk, Poland, KRS 0000971382, NIP 5842817738, REGON 522004318. For privacy matters, contact hello@plangroup.pl.
2. Scope of data processed
We may process data provided through the contact form or correspondence, in particular your name, company, email address, telephone number, enquiry content and information concerning potential cooperation. The server may also process basic technical data such as IP address, device type, connection date and time and security logs.
3. Purposes and legal bases
- handling enquiries and taking steps prior to entering into a contract — Article 6(1)(b) GDPR;
- business correspondence, website security and the establishment, exercise or defence of legal claims — Article 6(1)(f) GDPR;
- compliance with legal, accounting and tax obligations — Article 6(1)(c) GDPR;
- other activities requiring consent — Article 6(1)(a) GDPR, where such consent is given.
Our legitimate interests include efficient handling of business correspondence, protecting the website against abuse and the ability to defend against claims.
4. Contact form
Providing data through the form is voluntary, but fields marked as required are necessary for us to respond. Sending an enquiry does not require marketing consent. The data is used to handle the specific enquiry and, where relevant, prepare potential cooperation.
5. Data recipients
Data may be disclosed or entrusted to providers of hosting, email, IT tools, security, legal and accounting services, only to the extent necessary to perform their services and on the basis of the relevant legal basis or agreement.
6. Transfers outside the EEA
If the use of a provider involves a transfer of data outside the European Economic Area, mechanisms permitted under Chapter V of the GDPR are used, in particular an adequacy decision or Standard Contractual Clauses, depending on the provider and place of processing.
7. Retention periods
- enquiry data — for the time necessary to handle the enquiry and then for the period needed to document the correspondence and until the applicable limitation periods for claims expire;
- contract-related data — for the duration of the contract and for the period required by tax, accounting and claims-related laws;
- technical and security logs — for the period justified by website security and incident diagnostics, in accordance with the hosting provider’s policy.
8. Your rights
You have the right to access, rectify and erase your data, restrict processing, data portability and object to processing. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal. You may also lodge a complaint with the President of the Personal Data Protection Office in Poland.
9. Cookies and local storage
If such tools are added in the future, they will be activated only after the appropriate consent has been obtained and this policy will be updated.
10. Cookie settings
The “Cookie settings” button in the footer shows the current scope of mechanisms used. Because only necessary mechanisms are currently used, there are no optional categories requiring consent.
11. Fonts
The website uses the Montserrat typeface hosted locally on the PLAN Group server. Displaying the font does not require a connection to Google Fonts or the transfer of data to Google for this purpose.
12. Profiling and automated decisions
We do not make decisions about users that produce legal effects or similarly significantly affect them based solely on automated processing of contact-form or technical website data. The current version of the website does not conduct marketing profiling.
13. Security and changes
We use technical and organisational measures appropriate to the risk. This policy may be updated if the way the website operates, the tools used, the scope of services or the law changes.