Privacy and cookie policy

This policy explains which personal data we process in connection with the QS DESIGN · QS BUD website, for what purpose, and what rights you have.

1. Data controller

The controller is Mariia Khilko, trading as QS BUD MARIIA KHILKO, ul. Mariana Zdziechowskiego 11/11, 02-659 Warsaw, Poland, tax number (NIP) 5214015266, REGON 525057775.

For anything concerning personal data, contact us at qsbud.khilko@gmail.com or +48 733 373 212.

2. What we process and why

• Enquiry form: name, phone, optionally e-mail, and information about the property (type, area, scope, approximate budget, planned start, your message). Purpose: replying to the enquiry and preparing an estimate. Legal basis: Article 6(1)(b) GDPR (steps taken at your request before a contract) and Article 6(1)(f) (our legitimate interest in handling correspondence and establishing or defending claims).
• Contact by phone, e-mail and messengers (WhatsApp, Telegram): whatever you share in the conversation. Purpose and basis are the same as for the form. The messengers operate under their own terms and privacy policies.
• Contract: if we work together, we process the data needed to conclude and perform the contract and to settle accounts (Article 6(1)(b) and (c) GDPR).
• Statistics and marketing: only with your consent (Article 6(1)(a) GDPR) — see section 8.
• Technical data: IP address, date and time and browser type, recorded in server logs. Purpose: security and the correct operation of the site (Article 6(1)(f) GDPR).

3. How long we keep data

• Enquiries that did not lead to a contract: up to 12 months from the last contact.
• Contract data: for the duration of the contract, then until claims become time-barred and for the periods required by tax and accounting law.
• Data processed on the basis of consent: until you withdraw it.
• Server logs: for the period needed for security, in line with the hosting provider’s settings.

4. Who receives the data

We share data only with providers that help us run the site and the business: the hosting provider (Vercel Inc.), the database provider (Neon, servers in the European Union), the e-mail provider and, where needed, an accounting office and a law firm. If you consent to cookies, data is also received by Google Ireland Limited (Google Analytics) and Meta Platforms Ireland Limited (Meta Pixel). We do not sell data.

5. Transfers outside the European Economic Area

Some providers are based in the United States. Data is transferred on the basis of a European Commission adequacy decision (the Data Privacy Framework) or standard contractual clauses.

6. Your rights

You have the right to access your data, to have it corrected or erased, to restrict its processing, to data portability, to object to processing based on legitimate interest, and to withdraw consent at any time without affecting the lawfulness of processing before the withdrawal. Write to the address given in section 1.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw.

7. Whether you must provide data, and automated decisions

Providing data is voluntary, but without it we cannot reply to an enquiry or prepare an estimate. We do not make decisions based solely on automated processing that would have legal effects on you.

8. Cookies and similar technologies

• Essential: remembering your cookie choice (in the browser’s storage) and running the admin panel. No consent needed.
• Cookieless statistics — Vercel Web Analytics and Vercel Speed Insights: aggregated data on visits and page speed, without identifying anyone and without storing anything in the browser; no consent needed.
• Analytics — Google Analytics 4: visit statistics. Switched on only after consent.
• Marketing — Meta Pixel and Google advertising signals: measuring how ads perform and building audiences. Switched on only after consent.

Until you consent, the Google and Meta scripts are not loaded. You can change or withdraw consent at any time through the “Cookie settings” link in the footer or in your browser settings.

9. Changes to this policy

We update the policy when the way the site works or the law changes. The current version is always available at this address.