GDPR and website terms
Effective as of 8 September 2026
Controller
The controller of personal data is PLAN GROUP sp. z o.o., al. Grunwaldzka 413, 80-309 Gdańsk, Poland, KRS 0000971382, NIP 5842817738, REGON 522004318. Contact regarding personal data: hello@plangroup.pl.
Scope of this information
This information applies to personal-data processing by PLAN GROUP sp. z o.o. in connection with use of the website, contact with the company and brands belonging to PLAN GROUP, enquiries, prospective or ongoing cooperation and business communications.
Purposes and legal bases
We may process personal data to handle enquiries and correspondence, prepare an offer or cooperation, enter into and perform a contract, comply with legal obligations, ensure website security, establish, exercise or defend legal claims and — where permitted — initiate business contact and conduct direct marketing of our own services.
Depending on the purpose and circumstances, the legal basis may be Article 6(1)(a), (b), (c) or (f) GDPR. Where Article 6(1)(f) GDPR applies, our legitimate interests may include business correspondence, handling enquiries, developing relationships with clients and prospective clients, direct marketing of our own services, website security and the establishment, exercise or defence of legal claims.
Data obtained directly from you
If you contact us, submit a form or provide data in connection with cooperation, we may process in particular identification and contact details, company and job-role information, the content of correspondence and other information you provide in relation to the matter concerned.
Data obtained from other sources
For business contacts, we may also use data from publicly available sources such as company websites, professional and business networks, public registers, industry publications and lawfully operated business-information databases. This may include, in particular, your name, job title or professional role, company name, business email address, business phone number and publicly available information about your professional activity.
Such data may be used to identify an appropriate contact person, initiate business contact, provide information about services or potential cooperation and continue subsequent correspondence. As a rule, the legal basis is our legitimate interest under Article 6(1)(f) GDPR.
Voluntary provision of data
Providing data through a contact form or correspondence is voluntary, but it may be necessary for us to respond to an enquiry, prepare an offer or deliver cooperation. Where providing specific data is required by law or necessary to enter into or perform a contract, we will inform you accordingly at the relevant time.
Retention period
We retain data no longer than necessary for the purpose for which it was collected. Data related to enquiries, correspondence and prospective cooperation may be retained for the duration of the contact and then for the period necessary to demonstrate the history of the relationship or protect against possible claims. Data connected with a contract is retained for the duration of the contract and afterwards for the period required by law and applicable limitation periods.
Where data is processed on the basis of legitimate interests, it may be processed until an effective objection is made or that interest ceases to exist. Where processing is based on consent, data may be processed until consent is withdrawn, unless another legal basis permits continued processing.
Technical data and cookies
When using the website, basic technical information may be processed, including IP address, browser data, security logs and information about privacy settings. Details are described in the Privacy and cookies policy.
Recipients and transfers outside the EEA
Data may be processed by entities supporting us with hosting, email, IT tools, security, legal, accounting and other services necessary for our operations. Data may also be disclosed to authorised public bodies where required by law.
If use of a provider involves a transfer of personal data outside the European Economic Area, we apply an appropriate mechanism under Chapter V of the GDPR, such as an adequacy decision or Standard Contractual Clauses. Information about the mechanism used in a particular case and how to obtain a copy of the relevant safeguards can be requested by contacting us at hello@plangroup.pl.
Profiling and automated decision-making
We do not make decisions about users that produce legal effects or similarly significantly affect them based solely on automated processing. The current version of the website does not conduct marketing profiling.
Data-subject rights
- right of access;
- right to rectification;
- right to erasure where the GDPR conditions are met;
- right to restriction of processing;
- right to data portability — where applicable;
- right to object to processing based on legitimate interests;
- right to withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.
Right to object, including to direct marketing
In the cases set out in Article 21 GDPR, you may object to processing based on legitimate interests. Where personal data is processed for direct-marketing purposes, you may object at any time. Once you object, we will no longer process those data for such purposes.
Complaint to the supervisory authority
If you believe that personal-data processing infringes the GDPR, you may lodge a complaint with the President of the Personal Data Protection Office in Poland.
Website terms
The content of this website is for information purposes and does not constitute an offer within the meaning of the Polish Civil Code unless expressly stated otherwise. Rights to materials, identity and content belong to PLAN GROUP sp. z o.o. or the relevant rights holders. The website must not be used in a manner that infringes the law, security or the rights of third parties.
Contact
For matters related to data protection and use of the website, contact hello@plangroup.pl.