Privacy Policy
This Privacy Policy explains how personal data is processed in connection with the use of https://forrestcarpentry.com (the “Website”), operated under the ForRest Carpentry brand.
1. Data controller
The controller of personal data is — do uzupełnienia — (the “Controller”), Tax ID (NIP): — do uzupełnienia —, REGON: — do uzupełnienia —, address: — do uzupełnienia —, — do uzupełnienia — Pułtusk, Poland.
Trade name: ForRest Carpentry.
2. Contact regarding personal data
For matters related to personal data protection, you may contact the Controller at:
- email: kontakt@forrestcarpentry.com
- phone: +48 535 578 711
- postal address: — do uzupełnienia —, — do uzupełnienia — Pułtusk, Poland
3. What data we process
The scope depends on how you contact us. Most often we process:
- data from the contact form: name, email address, phone number (optional), message content;
- data from phone, email or WhatsApp contact: phone number, conversation / message content, and identifying details needed to reply;
- technical data required for the Website to work (e.g. language preference stored locally in the browser).
4. Purposes and legal bases
We process data for the following purposes:
- replying to enquiries and correspondence — Art. 6(1)(b) GDPR (pre-contractual steps) or Art. 6(1)(f) (legitimate interest: contacting someone interested in our services);
- preparing an offer / delivering a commission — Art. 6(1)(b) GDPR;
- establishing, exercising or defending legal claims — Art. 6(1)(f) GDPR;
- ensuring basic Website operation (e.g. remembering language) — Art. 6(1)(f) GDPR.
5. Recipients of data
Data may be entrusted to processors supporting the Controller, only to the extent necessary:
- hosting and email provider (currently Hostinger) — to run the Website and deliver contact-form messages;
- communication providers (e.g. WhatsApp / Meta) if you choose that channel;
- authorities entitled by law — only where required by applicable regulations.
6. Transfers outside the EEA
As a rule, data is processed within the European Economic Area. If you use external channels (e.g. WhatsApp), their providers may also process data outside the EEA — under their own privacy policies and applicable transfer mechanisms (e.g. standard contractual clauses).
7. Retention period
We keep data only as long as necessary for the purpose, in particular:
- correspondence via form / email / phone / WhatsApp — usually until the matter is closed and for up to 3 years afterwards (or longer if a dispute is pending);
- data related to a contract / commission — for periods required by law (including accounting and tax rules);
- language preference in the browser — until the user clears local data.
8. Your rights
Under the GDPR you have rights including:
- access to your data;
- rectification;
- erasure (“right to be forgotten”) — where applicable;
- restriction of processing;
- data portability — where applicable;
- objection to processing based on legitimate interests;
- lodging a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland, https://uodo.gov.pl.
9. Voluntary provision of data
Providing data in the contact form is voluntary but necessary to receive a reply. Without it, we cannot respond.
11. Changes to this policy
The Controller may update this Policy. The current version is always available on the Website with the date of the last change.
