Last updated: 29 September 2026
We respect your privacy. Below we explain in plain language what data we collect through figaro.pl, why, how long we keep it and what rights you have.
This is an English translation for your convenience. In case of any discrepancy, the Polish version of this policy prevails.
1. Data controller
The controller of your personal data is:
Paweł Jaguś FIGARO CORPORATIONul. Warszawska 10, 08-500 Ryki, Poland
Tax ID (NIP): 716-109-70-66
email: ryki@figaro.pl
tel. +48 81 865 65 65
For any matters relating to personal data, you can contact us by email, by phone or by post at our registered address.
2. What data we collect
We only collect personal data that you give us yourself – in the contact form, the calendar order form, or when you write to us or call us. This may include:
- your name,
- email address and phone number,
- company or agency name,
- order details (e.g. type of product, quantity, deadline) and the content of your message.
Providing data is voluntary, but without your name, email address and consent we will not be able to reply to an enquiry sent through the form.
In addition, the server hosting the website automatically records technical information about visits in its logs (including IP address, date and time, and browser type). We use it solely to keep the website secure and working properly, including protecting the forms against spam.
3. Purposes and legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Replying to an enquiry sent by form, email or phone | Your consent – Art. 6(1)(a), and our legitimate interest in conducting correspondence – Art. 6(1)(f) |
| Preparing a quote and offer, issuing a pro forma invoice and fulfilling the order | Steps taken before entering into a contract and its performance – Art. 6(1)(b) |
| Issuing invoices and keeping accounting records | Legal obligation – Art. 6(1)(c) |
| Establishing, pursuing or defending legal claims | Legitimate interest – Art. 6(1)(f) |
| Keeping the website secure and protecting the forms against abuse | Legitimate interest – Art. 6(1)(f) |
We do not make automated decisions about you or profile your data. The estimated price in the calendar form is only an indicative calculation – the final terms are agreed individually.
4. Who we share data with
We do not sell your data. Access to it may only be given to entities that help us run our business, under data processing agreements:
- the hosting provider whose server runs the website and forms,
- Google Ireland Ltd. – our email provider (Google Workspace), through which we receive and reply to form messages,
- our accounting office – for accounting documents,
- courier companies – if the order is shipped.
Because we use Google services, data may be transferred outside the European Economic Area, in particular to the USA. This takes place on the basis of the European Commission’s decision on the EU-US Data Privacy Framework or standard contractual clauses approved by the European Commission.
5. How long we keep data
- correspondence and enquiries that did not lead to an order – up to 12 months from the last contact or until consent is withdrawn,
- order-related data – for the duration of the order and then until the limitation period for claims expires,
- accounting documents – for the period required by tax law (as a rule, 5 years from the end of the tax year),
- server logs – no longer than 30 days.
6. Your rights
In connection with the processing of your data, you have the right to:
- access your data and receive a copy of it,
- have inaccurate data corrected,
- have your data erased (“the right to be forgotten”),
- restrict processing,
- data portability,
- object to processing based on legitimate interest,
- withdraw your consent at any time – without affecting the lawfulness of processing carried out before its withdrawal.
To exercise these rights, email us at ryki@figaro.pl. You also have the right to lodge a complaint with the Polish data protection authority – the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl) – or with the supervisory authority in your country of residence.
7. Cookies and third-party services
Our website does not use its own cookies for analytics or marketing. We do, however, use a few third-party services:
- Visitor statistics (Umami) – we collect anonymous, aggregated statistics: which pages are viewed, where visitors come from (e.g. a search engine), device and browser type, country, and clicks on our phone number, email address or form submissions (without their content). The tool does not store cookies, does not keep your IP address and cannot identify you or track you on other websites. We do this in our legitimate interest – to understand what is useful on the site and improve it,
- Google Maps on the Contact page – the embedded map may set Google cookies and process your IP address,
- Google reviews – profile pictures of reviewers may be loaded from Google’s servers,
- links to our profiles on Facebook, Instagram and YouTube – only when you click them are you taken to the service, which processes data under its own privacy policy.
The only thing the site stores in your browser (sessionStorage) is whether you have closed the EU funding notice bar – until you close the browser tab. It is not used to identify you.
You can delete or block cookies at any time in your browser settings.
8. Changes to this policy
This policy may be updated, e.g. if the way the website works or the law changes. The current version is always available on this page, and the date of the last change is shown at the top.
