1. Who is responsible for your data?

The data controller for personal data described in this policy is:

• Company: ORVIAN sp. z o.o.
• Address: Mołdawska 5, 02-127 Warsaw, Poland
• Email: orvian@op.pl
• Website: orvianconstruction.com

For privacy-related requests, contact us at the email address above. We respond without undue delay and within time limits set by applicable law, including the GDPR where it applies.

2. What personal data we collect

We collect only data that is relevant to operating our website, responding to enquiries, or performing a contract. Depending on how you interact with us, this may include:

• Contact and identity data — name, email address, phone number, company name, and project address when you submit a form or email us.
• Project information — descriptions of renovation scope, photos, floor plans, and other materials you choose to share.
• Communication records — content of messages, meeting notes, and documents exchanged during quoting or delivery of services.
• Technical data — IP address, browser type, device information, and approximate location derived from IP when you use our website.
• Cookie and consent data — your cookie preferences stored locally in your browser (see Section 6).

Where we need personal data to respond to an enquiry or perform a contract, failure to provide it may prevent us from proceeding with your request.

3. How and why we use your data

We use personal data for the following purposes:

• To respond to enquiries and provide quotes for construction and renovation services
• To plan, administer, and deliver projects you contract us to perform
• To communicate about site access, schedules, variations, and handover
• To maintain our website, ensure security, and improve its performance
• To comply with legal, tax, and accounting obligations
• With your consent, to understand how visitors use our website through analytics cookies

Legal bases (GDPR)

Where the GDPR applies, we rely on one or more of the following legal bases:

• Contract — processing necessary to take steps at your request before a contract or to perform a contract with you
• Legitimate interests — operating and securing our business and website, in balance with your rights
• Legal obligation — retaining records required by Polish or EU law
• Consent — non-essential cookies and any optional marketing you explicitly agree to

4. Sharing and processors

We do not sell your personal data. We may share data with:

• Subcontractors and trades involved in your project, only to the extent needed for delivery
• Professional advisers (e.g. accountants, insurers, legal counsel) under confidentiality duties
• IT and hosting providers that process data on our instructions as processors
• Public authorities when required by applicable law

We require processors to protect data appropriately and to use it only for the services they provide to us.

5. How long we keep data

We retain personal data only as long as necessary for the purposes described above, including:

• Enquiry records — typically for the period needed to quote and follow up, unless a longer period is required for an active project
• Contract and project files — for the duration of the project and for periods required by tax, warranty, and limitation rules under Polish law
• Website logs — for a limited period aligned with security and troubleshooting needs
• Cookie consent choice — stored in your browser until you clear site data or change your selection

When data is no longer needed, we delete or anonymise it where possible.

6. Cookies and similar technologies

Our website uses essential cookies and storage (such as localStorage) to remember your cookie consent choice under the key orvian-cookie-consent.

With your consent, we may use analytics cookies to understand how visitors use our pages (for example, which sections are read most often). You can accept or decline non-essential cookies via the banner on first visit. You can also clear cookies and site data in your browser settings at any time.

Essential cookies are necessary for basic site operation and cannot be switched off through our banner without affecting how the site works.

7. Your rights

Depending on applicable law, including the GDPR if you are in the European Economic Area, you may have the right to:

• Access a copy of the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erase data in certain circumstances
• Restrict or object to processing in certain circumstances
• Data portability where processing is based on consent or contract and carried out by automated means
• Withdraw consent at any time where processing is based on consent (without affecting prior lawful processing)
• Lodge a complaint with a supervisory authority

In Poland, the supervisory authority is the President of the Personal Data Protection Office (UODO). Contact details are available at uodo.gov.pl.

To exercise your rights, email orvian@op.pl. We may need to verify your identity before responding.

8. Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. No method of transmission over the internet is completely secure; we encourage you to use secure channels when sending sensitive project information and to avoid sharing passwords or payment card details by unsecured email.

9. Changes to this policy

We may update this Privacy Policy when our services, legal requirements, or website features change. The current version is always published on this page. We encourage you to review it periodically. Material changes will be communicated in a clear manner where required by law.

10. Contact

If you have questions about this Privacy Policy or how we handle personal data, contact: