§ 1. Data Controller
The controller of your personal data is Wojciech Skibiński – Firma Wielobranżowa „FORTE", with its registered office at: Czyżeminek 33A, 95-030 Rzgów, Poland, Tax ID (NIP): 7311106193, Business Register No. (REGON): 472004624 (hereinafter: the „Controller").
§ 2. What data we collect and for what purpose
The Controller processes personal data for the following purposes:
- performance of contracts and orders for flooring services (parquet, floor-laying and related) – in the scope of: first and last name, address, phone number, e-mail address, property address, Tax ID (NIP) (in the case of businesses);
- preparation of quotes and offers – in the scope of: first and last name, phone number, e-mail address, property address;
- issuing invoices and keeping accounting records – in the scope of: first and last name or company name, address, Tax ID (NIP);
- contact on matters related to services performed or planned – in the scope of: first and last name, phone number, e-mail address;
- marketing of our own services (with consent) – in the scope of: first and last name, e-mail address, phone number;
- use of the website and measurement of its performance (with consent to analytics or marketing cookies) – in the scope of: IP address, cookie identifiers, information about the device and browser and about how the website is used.
§ 3. Legal bases for processing
We process your personal data on the following legal bases arising from Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR):
- Article 6(1)(b) GDPR – processing is necessary for the performance of a contract or to take steps prior to entering into a contract (e.g. preparing a quote, carrying out an order);
- Article 6(1)(c) GDPR – processing is necessary for compliance with a legal obligation to which the Controller is subject (e.g. issuing invoices, keeping tax records);
- Article 6(1)(f) GDPR – processing is necessary for the purposes of the legitimate interests pursued by the Controller (e.g. pursuing claims, direct marketing of our own services, maintaining customer relationships);
- Article 6(1)(a) GDPR – processing based on your voluntary consent (e.g. sending commercial information by electronic means). Consent may be withdrawn at any time, without affecting the lawfulness of processing carried out before its withdrawal.
§ 4. How we protect your data
The Controller applies appropriate technical and organisational measures to ensure the security of the personal data processed, in particular:
- access to personal data is granted only to persons authorised by the Controller and bound by an obligation of confidentiality;
- data stored electronically is protected by access passwords and security software;
- data stored in paper form is secured in locked cabinets/rooms with restricted access;
- the Controller regularly reviews the data protection measures in place and adapts them to current threats.
§ 5. Data retention period
We store your personal data for the period necessary to achieve the purposes for which it was collected:
- data related to the performance of a contract – for the duration of the contract and for the period of limitation of claims (as a rule 6 years from the end of the contract);
- data processed on the basis of a legal obligation (invoices, tax records) – for the period required by law (as a rule 5 years from the end of the tax year);
- data processed on the basis of consent – until the consent is withdrawn;
- data processed on the basis of a legitimate interest – until an effective objection is raised.
§ 6. Rights of data subjects
In connection with the processing of personal data, you have the following rights:
- right of access – you may obtain information about what data we process and for what purpose;
- right to rectification – if the data is incorrect or incomplete;
- right to erasure („right to be forgotten") – in the cases provided for in Article 17 GDPR, subject to the reservation that this does not apply to data whose processing is required by law;
- right to restriction of processing – in the cases provided for in Article 18 GDPR;
- right to data portability – for data processed on the basis of a contract or consent, in a machine-readable format;
- right to object – to the processing of data on the basis of the Controller's legitimate interest, including to direct marketing;
- right to withdraw consent – at any time, without affecting the lawfulness of processing carried out before the withdrawal of consent;
- right to lodge a complaint – with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland, www.uodo.gov.pl), if you consider that the processing of your data infringes the GDPR.
To exercise the above rights, please contact the Controller using the details provided in § 1.
§ 7. Data recipients
Your personal data may be shared only with entities with which the Controller cooperates in order to provide its services, in particular:
- the accounting office servicing the Controller;
- IT service providers (website hosting, e-mail);
- the provider handling submissions from the website contact form — through which enquiries sent via the form are delivered to the Controller;
- entities authorised under the law (tax authorities, the Social Insurance Institution (ZUS), courts);
- WhatsApp (Meta Platforms Ireland Limited) — if you choose to contact us via the WhatsApp button on the site, the data provided in this way (phone number, message content) is also processed by Meta, on the terms set out in its own privacy policy, which is independent of this document. The Controller has no influence over how Meta processes data within the WhatsApp service;
- Google Ireland Limited — in respect of the Google Analytics tool used to measure traffic and website usage statistics; this tool is activated only after you have consented to analytics cookies;
- Meta Platforms Ireland Limited — in respect of Meta's marketing and social tools (including the Facebook Pixel and Facebook and Instagram plugins and widgets); these tools are activated only after you have consented to marketing cookies.
The use of Google and Meta tools (including WhatsApp) may involve the transfer of data to third countries, in particular to the United States. Such transfers take place on the basis of appropriate safeguards provided for in the GDPR — standard contractual clauses approved by the European Commission and, for certified entities, an adequacy decision (EU–US Data Privacy Framework). Apart from the cases listed above, the Controller does not transfer personal data outside the European Economic Area or to international organisations. Details of the processing of data by Google and Meta are set out in their own privacy policies, which are independent of this document.
§ 8. Cookies
The forte.lodz.pl website uses cookies in three categories:
- necessary — required for the website to function properly; they do not require your consent;
- analytics — allowing traffic on the site to be measured and the way it is used to be analysed (e.g. Google Analytics);
- marketing — related to advertising and remarketing activities (e.g. the Meta / Facebook Pixel and Facebook and Instagram social plugins and widgets).
Cookies other than necessary ones are activated only after you have given your consent in the cookie banner displayed on your first visit to the site. You can change your choice at any time using the „Cookie settings" link in the website footer or in the settings of your own web browser.
Analytics and marketing cookies — including Google Analytics, the Meta Pixel and Facebook and Instagram plugins and widgets — are activated only after you have given the relevant consent and only to the extent covered by it. Until consent is given, only necessary cookies operate on the site. Consent may be withdrawn or changed at any time in the cookie settings available in the website footer, without affecting the lawfulness of processing carried out before its withdrawal.
§ 9. Information on continuity of processing
The Controller informs you that the personal data of customers, suppliers and business partners was acquired as part of the purchase of the „FORTE" enterprise from its previous owner – Aleksander Gaczyński, under an enterprise sale agreement (within the meaning of Article 55¹ of the Polish Civil Code) dated 1 July 2026. This data is processed for the existing purposes, with all the rights of data subjects set out in § 6 of this Policy being preserved.
§ 10. Changes to the Privacy Policy
The Controller reserves the right to make changes to this Privacy Policy. The Controller will provide notice of any material changes via the forte.lodz.pl website.
In force since: 1 July 2026
Last updated: 27 July 2026 (clarified the form of the acquisition — purchase of the entire enterprise within the meaning of Article 55¹ of the Polish Civil Code, rather than an organised part of an enterprise; added provisions on the Google Analytics and Meta tools — the Pixel and Facebook and Instagram plugins and widgets — on the handling of the contact form, and on the transfer of data to third countries on the basis of appropriate safeguards)