Legal

Privacy Policy

This Privacy Policy describes how Elvara sp. z o.o. ("Elvara", "we", "us") processes personal data when you browse elvararenovations.com, request a quote, or work with us on renovation and interior projects. We aim to handle information lawfully, transparently, and only for clear purposes connected to our services in Poland and, where relevant, the European Economic Area (EEA).

1. Data controller

The controller responsible for your personal data is:

Elvara sp. z o.o.
ul. Egejska 6
02-764 Warszawa, Poland
Email: elvara@op.pl

For questions about this Policy or your data, please contact us using the details above. We may ask for information to verify your identity before responding to privacy requests.

2. Personal data we may process

The categories of data depend on your relationship with us. We may process:

Identity & contact data — name, email, telephone number, correspondence address, company name (if applicable);
Project & property data — location, scope of works, photos, floor plans, access notes, preferences, and other details you provide for quotations or delivery;
Commercial data — enquiry history, proposals, contracts, invoices, and payment-related records where applicable;
Communications — content of emails, forms, messages, and call notes related to our services;
Technical & usage data — IP address, device and browser type, operating system, referral URLs, pages viewed, and cookie identifiers;
Compliance data — records required for legal, tax, or regulatory purposes.

Providing some data is optional; however, without contact or project information we may be unable to respond to enquiries or perform agreed work.

3. Sources of personal data

We collect personal data from:

You directly (website forms, email, phone, meetings);
Your authorised representatives (property managers, agents);
Automatically when you use our website (cookies, server logs, similar technologies);
Partners or subcontractors where necessary to deliver services and where you have been informed or consent applies.

4. Purposes and legal bases

Under the GDPR, we process personal data on the following bases:

Contract / pre-contract (Art. 6(1)(b)) — handling enquiries, preparing quotes, planning and performing renovation services, customer care;
Legal obligation (Art. 6(1)(c)) — accounting, tax, responding to lawful requests from authorities;
Legitimate interests (Art. 6(1)(f)) — operating and securing our website, preventing misuse, improving our services, limited B2B outreach where permitted, defending legal claims; balanced against your rights;
Consent (Art. 6(1)(a)) — non-essential cookies and optional analytics/marketing where you choose "Accept all" in our cookie banner. You may withdraw consent at any time without affecting lawfulness of processing before withdrawal.

5. Cookies and similar technologies

Our website uses cookies and similar tools to remember preferences, keep sessions secure, and (only with consent) understand how the site is used.

Essential cookies — required for core functionality, security, and storing your cookie choice;
Analytics cookies (optional) — help us measure traffic and improve content; enabled only after consent;
Preference cookies — remember settings you select where applicable.

You can manage cookies through our banner ("Accept all" / "Essential only"), your browser settings, or by contacting us. Blocking essential cookies may affect site functionality.

6. Data retention

We retain personal data only as long as necessary for the purposes described in this Policy, including:

Enquiry records — typically for the period needed to respond and follow up, unless a contract follows;
Contract and project records — for the duration of the relationship and thereafter as required by Polish commercial and tax law;
Marketing/consent records — until you withdraw consent or object, plus a short period to record your choice;
Server logs — for a limited security-focused period unless longer retention is justified.

When data is no longer needed, we delete or anonymise it in a secure manner.

7. Recipients of personal data

We may share personal data with trusted recipients who process data on our instructions or as independent controllers where required, including:

Hosting, IT support, and website infrastructure providers;
Email and communication tools;
Analytics providers (only if you consent);
Professional advisers (legal, accounting) when necessary;
Subcontractors involved in delivering your project;
Public authorities when required by law.

We require processors to protect data under written agreements consistent with GDPR Article 28.

8. International transfers

We primarily process data within the EEA. If a provider is located outside the EEA, we ensure appropriate safeguards — such as European Commission adequacy decisions or Standard Contractual Clauses — and assess transfer risks. You may request more information about safeguards by contacting us.

9. Security

We implement technical and organisational measures appropriate to the risk, including access controls, secure communication where practicable, and staff awareness. No method of transmission or storage is completely secure; we encourage you to use strong passwords and protect your devices when communicating with us.

10. Your rights

Subject to GDPR conditions and exceptions, you may have the right to:

Access your personal data and obtain a copy;
Rectify inaccurate or incomplete data;
Erase data in certain circumstances;
Restrict processing in certain circumstances;
Object to processing based on legitimate interests;
Data portability for data you provided, where applicable;
Withdraw consent at any time for consent-based processing;
Lodge a complaint with the Polish supervisory authority — UODO (or your local EU authority).

To exercise your rights, email elvara@op.pl. We respond without undue delay and within applicable statutory time limits.

11. Children

Our services are directed at adults and businesses. We do not knowingly collect personal data from children under 16. If you believe a child has provided us data, please contact us and we will take appropriate steps to delete it.

12. Changes to this Policy

We may update this Privacy Policy when our practices, services, or legal requirements change. The current version is published on this page. We encourage you to review it periodically. Material changes may be highlighted on the website where appropriate.

13. Contact

For any privacy-related questions, requests, or concerns:

Elvara sp. z o.o.
ul. Egejska 6, 02-764 Warszawa, Poland
elvara@op.pl