Privacy policy

1. Data controller

The controller is Wojciech Daszkowski, operating under the NAPREMO™ brand, Polish tax ID (NIP) 9820314311. Contact for personal-data matters: biuro@napremo.pl.

2. Data we process

Depending on how you contact us, we may process your name or contact name, phone number, e-mail address, organisation and role, town/city, street, building and unit number, report description, form selections and uploaded photos or documents. The server and hosting provider may also process technical data, in particular IP address, connection date and time, request information and data required to protect the service.

3. Purposes and legal bases

We process inquiry and report data to reply, determine the scope and conditions of a service, prepare a quotation, arrange an inspection and take steps at your request before entering into a contract or to perform a contract – Article 6(1)(b) GDPR. Data may also be processed to secure the service, organise correspondence and establish, pursue or defend claims on the basis of legitimate interests – Article 6(1)(f) GDPR, and where required by law – Article 6(1)(c) GDPR. Google Analytics operates only on the basis of voluntary consent – Article 6(1)(a) GDPR.

4. Required and optional data

Fields marked with an asterisk are required because without them we cannot accept or properly handle the report. Other data is optional. FIX, ADMIN and GREEN require at least information identifying the subject, the town/city, building or house number and a contact phone number; the street may be left blank where an address has no street name. Photos and documents are optional.

5. Attachments and data minimisation

Upload only materials necessary to assess the work. Do not upload identity documents, national identification numbers, health data or other special or excessive data unless strictly necessary for the report. Temporary attachment copies created by the application on the server are deleted after the attempt to hand the report to the mail system; further storage of the e-mail and its attachments follows the period necessary to handle the matter and applicable obligations.

6. Town and street suggestions – Geoapify

FIX, ADMIN and GREEN may use Geoapify while you type a town/city or street in order to show suggestions. The Geoapify request is made through the NAPREMO server; only the typed town/street fragment, selected language and town context are sent. Phone number, e-mail, house number and unit number are not sent through this mechanism. You can always enter an address manually. The legal basis is our legitimate interest in helping users enter addresses correctly – Article 6(1)(f) GDPR.

7. Cookies and essential mechanisms

Without consent, we use only mechanisms necessary for website operation and security. The session cookie __Host-id is used, among other things, to protect forms and expires with the session or according to session settings. napremo_privacy remembers the privacy choice for up to 180 days. We do not store a persistent cookie solely to remember the website language.

8. Google Analytics and consent

Google Tag Manager and Google Analytics are not loaded before you allow analytics. After consent, Analytics may store identifiers such as _ga and _ga_* and receive technical usage information such as page views and interaction events. We do not send form contents, phone numbers, e-mail addresses or submission identifiers to Analytics. Advertising consent is kept denied. Analytics cookies are configured for a maximum of 180 days without renewal on later visits. Consent can be withdrawn at any time through “Privacy settings”; refusal or withdrawal does not limit the website or forms.

9. Recipients and processors

Data may be entrusted or disclosed to hosting and technical infrastructure providers, e-mail providers, Geoapify, IT service providers and – after analytics consent – Google for Google Tag Manager and Google Analytics. Data may also be disclosed to competent authorities where required by law. We use providers that should offer appropriate data-protection guarantees.

10. Transfers outside the EEA

We use Geoapify’s European API endpoint (api-eu.geoapify.com). Geoapify provides a data-processing agreement and states that API requests sent through this endpoint are processed within the European Union/EEA. Google Analytics data may also be processed outside the European Economic Area. Google uses applicable transfer safeguards, including, depending on the situation, the EU–US Data Privacy Framework or Standard Contractual Clauses.

11. Retention

Inquiry and report data is kept for the period necessary to handle the matter, prepare and perform the service and afterwards for as long as justified by legal obligations or the establishment, pursuit or defence of claims. Accounting or tax data is retained for periods required by law. Abuse-prevention technical state is stored as a hash linked to the IP address and removed on a short technical cycle; the application does not maintain a separate archive of complete form contents or raw IP addresses.

12. Your rights

Subject to the GDPR, you have rights of access, rectification, erasure, restriction, data portability where applicable and objection to processing based on Article 6(1)(f) GDPR. Where processing is based on consent, you may withdraw it at any time without affecting prior lawful processing. You may also lodge a complaint with the President of the Polish Personal Data Protection Office (UODO).

13. Automated decisions and other people’s data

We do not make decisions producing legal effects concerning you solely by automated means and do not profile for that purpose. If you provide another person’s data, for example a contact person, provide them with this policy and make sure you have a basis for sharing their data.

14. Contact and changes

Questions, rights requests and privacy comments can be sent to biuro@napremo.pl. We may update this policy when website functions, providers or legal requirements change. The current version is published on this page.