ProWebCrafting
Privacy and cookie policy
Effective from:
1. Who is the data controller
The controller of your personal data is KOWALEWSKI GROUP spółka z ograniczoną odpowiedzialnością (limited liability company) based in Ligota (ul. Pod Lasem 8, 43-518 Ligota, Poland), entered in the National Court Register (KRS) under number 0001269032, NIP (tax ID) 6521761733, REGON 545797628, share capital PLN 5,000 — owner of the ProWebCrafting brand.
Contact on personal data matters: prowebcrafting8@gmail.com, phone +48 730 305 800.
2. What data we collect and why
| Source | Data | Purpose | Legal basis (GDPR) |
|---|---|---|---|
| Configurator ("Order a free project preview") | name, company, e-mail, phone, message, selected services and quote | preparing the project preview and quote, contact about the order | Art. 6(1)(b) (steps prior to entering into a contract) |
| Contact form | name, company, e-mail, phone, message, selected interests | replying to your inquiry | Art. 6(1)(b) and (f) (legitimate interest — replying to correspondence) |
| "Check your website" (audit) | address of the audited website; e-mail if you request the full report | performing the audit, sending the report, contact about the results | Art. 6(1)(b) and (f) |
| AI assistant on the site | conversation content; name and e-mail/phone if you provide them | answering questions, passing on your inquiry | Art. 6(1)(b) and (f) |
| Client panel (once launched) | account data, services, invoices | performing the contract, settlements | Art. 6(1)(b) and (c) (accounting obligations) |
| All forms — security | hash of the IP address (not the full address) | protection against spam and abuse (submission limit) | Art. 6(1)(f) |
Providing data is voluntary, but without an e-mail address or phone number we cannot reply to your inquiry.
3. Who we share data with
Data is processed on our behalf only by providers of services needed to run the site:
- Lovable / Supabase — website hosting and database (inquiries, site content).
- Hostinger — server running the n8n automation tool that forwards notifications about new inquiries.
- Telegram — notification of a new inquiry is sent to the owner's messenger (name, contact details, content, quote).
- Google (Gmail) — e-mail notification of a new inquiry to the owner's mailbox; correspondence with clients.
- Google PageSpeed Insights — in the audit we only send the address of the audited website (no personal data).
- AI model provider (on-site assistant) (Google — Gemini model, provided via Lovable Cloud) — conversation content, to generate replies.
- Accounting office — data needed for bookkeeping and invoicing.
Some of these providers may process data outside the European Economic Area (e.g. in the USA). This is based on standard contractual clauses approved by the European Commission or an adequacy decision (EU–US Data Privacy Framework).
We do not sell data or share it with other companies for marketing purposes.
4. How long we keep data
- Inquiries that did not lead to an order — 12 months from the last contact.
- Client data and accounting documents — for the duration of the contract and then 5 years from the end of the year in which the invoice was issued (tax law).
- AI assistant conversations without contact details — 90 days.
- Website audit results — 24 hours in cache; if you leave your e-mail — as for inquiries (12 months).
5. Your rights
You have the right to access your data, rectify it, erase it, restrict processing, data portability, and to object to processing based on legitimate interest. To exercise these rights, write to prowebcrafting8@gmail.com.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl).
We do not make decisions about you based solely on automated processing that would have legal effects. The AI assistant only answers questions — the final offer is always prepared by a human.
6. Cookies and browser storage
We only use files that are essential for the site to work:
| Name | Purpose | Duration |
|---|---|---|
pwc_currency | remembering the selected price currency | 1 year |
| cookie consent | remembering your choice in the banner | 1 year |
| login session (admin / client panel) | keeping you signed in | until you sign out |
We currently do not use analytics or advertising cookies. If that changes, we will list them here and enable them only after your consent in the banner.
You can delete or block cookies in your browser settings; the site will still work but, for example, will not remember your currency.
7. Changes to this policy
We will announce material changes on this page, stating the new effective date.