Who is responsible for the data you leave on this website, why we collect it, how long we keep it and which rights you can use.
Who the data controller is
The controller of your personal data is Miara Pracownia Mebli sp. z o.o., ul. Rzemieślnicza 8, 05-500 Piaseczno, Poland, entered in the Polish National Court Register (KRS) under number 0000000000, tax ID (NIP) 000-000-00-00, REGON 000000000. In this policy we call it “we”.
The same controller is responsible for the data from every form on miara-meble.vercel.app: the online quote, consultation booking, contact form and job applications.
We have not appointed a data protection officer. For anything to do with your personal data, write to kontakt@bfirsthome.pl or to the workshop address.
What we collect, why, and on what legal basis
We collect the data you type into our forms and, only with your consent, information about how you use the website. Each form is described separately below. “GDPR” means Regulation (EU) 2016/679.
This website is a demo: all four forms below run through the same validation as a live site would, but nothing you type is saved or sent on anywhere once you submit it.
Online quote
Data: first name, email, phone, town, how you prefer to be contacted, a description of your plans (furniture categories, type and stage of the room, rough dimensions, style, materials, budget, timing) and attachments such as a floor plan or photos of the room.
Purpose: preparing an initial quote, arranging a measurement or consultation, and contacting you about it. Legal basis: Article 6(1)(b) GDPR, steps taken at your request before entering into a contract.
Consultation booking
Data: first name, email, phone, type of meeting, topic, suggested dates, notes and, for a meeting at your place, your address.
Purpose: agreeing a date and holding the consultation or measurement. Legal basis: Article 6(1)(b) GDPR.
Contact form
Data: first name, email or phone, and your message.
Purpose: replying to your message. Legal basis: Article 6(1)(f) GDPR, our legitimate interest in answering questions, and Article 6(1)(b) GDPR when the message concerns an order.
Job applications
Data: first name, email, phone, CV and, if you add them, a portfolio link and a message.
Purpose: running the recruitment for the role you apply for. Legal basis: Article 6(1)(c) GDPR together with Article 22¹ of the Polish Labour Code for the data an employer may ask for (name, date of birth, contact details, education, professional qualifications and employment history), and Article 6(1)(b) GDPR for work under a civil-law contract. Anything else you choose to include, such as a photo in your CV, is processed on the basis of your consent (Article 6(1)(a) GDPR).
Consent to be considered for future roles is separate and optional. Please leave out information about your health, religion or views: we don't need it.
Contracts, accounts and claims
If we sign a contract, we process client data to carry it out (Article 6(1)(b) GDPR), to keep accounts and meet tax obligations (Article 6(1)(c) GDPR), and to establish, pursue or defend legal claims (Article 6(1)(f) GDPR).
Protecting the forms from abuse
When a form is sent, the server keeps the IP address in memory for 10 minutes to limit attempts to 8, and checks whether the form was filled in by a bot. We don't write IP addresses to logs or emails. Legal basis: Article 6(1)(f) GDPR, keeping the website secure.
Statistics and advertising, only with consent
The consent banner asks about visit-statistics and marketing files, but the website doesn't use any analytics or advertising tool, so whatever you choose, we don't collect anything of that kind.
Do you have to give us your data
Giving us your data is voluntary. Without the fields marked as required, though, we can't reply to your enquiry or consider your application.
We don't make decisions about you based solely on automated processing, including profiling, that have legal or similarly significant effects on you (Article 22 GDPR).
How long we keep data
- Quote and consultation enquiries that didn't lead to a contract: 12 months from our last contact.
- Messages from the contact form: 12 months from our reply.
- Client data: for the length of the contract and the warranty, then until claims become time-barred (generally 6 years, or 3 years for claims connected with running a business, in both cases to the end of the calendar year). Accounting records: 5 years from the end of the year in which the tax payment deadline passed.
- Job applications: until the recruitment ends, and no longer than 3 months after that. With consent to future recruitment: 12 months from the application or until you withdraw consent.
- Your choice in the consent banner: 12 months, after which we ask again.
Data processed on the basis of consent is also deleted when you withdraw it, unless we have to keep it for another reason described above.
Who we share data with
We don't sell data. Forms on this website are a demo (see above), so their content doesn't reach any recipient. The companies below are about running the website itself, under data processing agreements, and we'd share data with public authorities if the law required it.
- Vercel Inc. (USA): website hosting and receiving form requests (without saving their content).
- Our accountants and lawyers: client data only, and only as far as needed for accounts or legal matters.
Transfers outside the European Economic Area
Vercel may process data in the United States. For companies certified under the EU-US Data Privacy Framework, the transfer relies on the European Commission's adequacy decision (Article 45 GDPR); otherwise it relies on standard contractual clauses adopted by the Commission (Article 46(2)(c) GDPR). We'll send you a copy of these safeguards if you ask at kontakt@bfirsthome.pl.
Your rights
You have the right to:
- access your data and get a copy of it (Article 15 GDPR);
- have your data corrected (Article 16 GDPR);
- have your data erased (Article 17 GDPR);
- restrict processing (Article 18 GDPR);
- data portability for data processed under a contract or consent (Article 20 GDPR);
- object to processing based on our legitimate interest (Article 21 GDPR);
- withdraw consent at any time, without affecting the lawfulness of processing before the withdrawal (Article 7(3) GDPR).
We'll reply without undue delay and within one month at the latest (Article 12(3) GDPR).
If you think we process your data unlawfully, you can lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland (uodo.gov.pl), or with the supervisory authority in the EU country where you live or work.
Cookies
Cookies are small files saved by your browser. The website works without them. We only store what's essential: your choice in the consent banner and a draft of the quote form. The website doesn't use any analytics or advertising tool, so it doesn't set cookies of that kind.
| Name | Type | Provider | Purpose | Duration |
|---|---|---|---|---|
| miara_zgody | essential | Miara | remembers your choice in the consent banner: the version of the rules, the date and your analytics and marketing consent | 12 months |
| miara:wycena:draft (browser session storage) | essential | Miara | keeps a draft of the online quote so your answers survive a page reload | until you close the tab |
You can change your consent at any time in the “Customise” window or with the button below. You can also delete cookies in your browser settings.
Contact about your data
Write to kontakt@bfirsthome.pl, ideally with “Personal data” in the subject line, or send a letter to Miara Pracownia Mebli sp. z o.o., ul. Rzemieślnicza 8, 05-500 Piaseczno, Poland. About a job application you can also write to kontakt@bfirsthome.pl.
Changes to this policy
We update the policy when the way the website works changes, for example when we add a new tool or form. The current version is always at this address, with its date at the top of the page.