PRIVACY POLICY
Last updated: 28 October 2026
This policy explains how Interor Sp. z o.o. (“we”, “us”) uses personal data when you visit this website, send a request through the form, write to us or call us. It is written under Regulation (EU) 2016/679 (General Data Protection Regulation, “GDPR”) and the Polish Act of 10 May 2018 on the Protection of Personal Data.
1. Controller
The controller is Interor Sp. z o.o., Konińska 10 / 10, 02-495 Warszawa, Poland, KRS 0001272850, NIP 5223387174, management board: Tomasz Henryk Tomaszewski. E-mail: Interorbiuro@hotmail.com, phone: +48 725 457 493.
2. What data we process
- Requests sent through the form: where the furniture is for, the types of furniture you choose, the quantity and city if you give them, whether you buy as a company or as a private person, the company name if you give it, your name, e-mail address and/or phone number, and your message.
- E-mail and phone: your name, contact details and the content of your message or call.
- Technical data: when the site is delivered, our hosting provider processes your IP address, browser (user agent), the page requested and the time of the request, for security and delivery of the site.
When you press “Send request”, the details you entered are stored in a database hosted by Cloudflare so that we can reply to you. To protect the form against abuse, a salted one-way hash of your IP address is stored with the request and used only to limit how many requests can be sent in a short time. If the form cannot be sent, the page shows our e-mail address and phone number instead.
3. Purposes and legal bases
- To reply to your request and prepare an offer — Article 6(1)(b) GDPR (steps taken at your request before entering into a contract).
- To answer other questions, keep our correspondence in order and keep the website and the form secure — Article 6(1)(f) GDPR (our legitimate interests in running the business and the site).
4. How long we keep data
We keep requests and correspondence as long as needed to deal with the enquiry. Requests sent through the form are deleted from the website database automatically 12 months after they arrive. Where a purchase follows, records are kept as long as Polish accounting and tax law requires. Hosting logs are kept by the provider for a short period for security purposes.
5. Who receives data
Cloudflare, Inc. hosts and delivers this website and stores the requests sent through the form, as our processor and on our behalf. E-mail providers deliver the e-mails you send us. We do not sell personal data and do not share it for marketing.
6. Transfers outside the EEA
Cloudflare may process technical data and stored requests outside the European Economic Area, including in the United States. Such transfers rely on the EU-US Data Privacy Framework where the recipient is certified, or otherwise on the Standard Contractual Clauses adopted by the European Commission.
7. No cookies, no tracking
The website sets no cookies and uses no analytics, advertising or tracking tools. There is no profiling and no automated decision-making. See the Cookie policy.
8. Your rights
Under Articles 15–22 GDPR you have the right to access your personal data, to have it corrected or erased, to restrict its processing, to data portability and to object to processing based on our legitimate interests. Giving your data is voluntary, but without contact details we cannot reply to a request. To use any of these rights, write to Interorbiuro@hotmail.com.
9. Complaints
You have the right to lodge a complaint with the supervisory authority: President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa, Poland, uodo.gov.pl.
10. Changes
We may update this policy when the website or our processing changes. The date at the top shows the current version.