Privacy policy

1. Who is the controller of your data

The controller of personal data is Tissu Sp. z o.o., registered at Al. Jana Chrystiana Szucha 2/4 apt. 24, 00-582 Warsaw, Poland, tax ID (NIP) 5252680215, statistical ID (REGON) 365647641.

For any matter concerning personal data, write to biuro@tissu.pl or call +48 512 122 220.

2. What data we collect and why

Contact form. We collect your name, e-mail address and — if you provide them — your phone number, the type and scope of your planned project, and the content of your message. This data is used solely to answer your enquiry and, where relevant, to prepare a proposal.

Phone and e-mail contact. If you write or call us directly, we process the data you choose to give us.

Technical data. We use no analytics tools and we do not build visitor profiles. We do use the Meta pixel — a tool that measures how well our ads perform. The pixel loads only if you agree to it in the banner shown on your first visit; until then the site sends no data to third parties. Section 8 of this policy describes what reaches Meta and how to refuse.

3. Legal basis for processing

• Art. 6(1)(b) GDPR — steps taken at your request prior to entering into a contract (answering your enquiry, preparing a proposal).
• Art. 6(1)(a) GDPR — your consent. You give it separately in two places: by ticking the box in the contact form, and by clicking “I agree” in the banner concerning the Meta pixel.
• Art. 6(1)(f) GDPR — our legitimate interest in conducting correspondence and defending against potential claims.

4. How long we keep your data

Correspondence relating to an enquiry is kept for 24 months from the last contact. If a contract is concluded, data is kept for its duration and for the period required by tax and accounting law (5 years from the end of the tax year).

5. Who we share data with

Data may be shared only with entities that operate our technical infrastructure:

• Vercel Inc. (United States) — website hosting and handling of contact form submissions,
• Resend, Inc. (United States) — delivery of contact form messages to our mailbox,
• Microsoft Ireland Operations Limited (Ireland) — the Microsoft 365 mailbox that receives form messages and the correspondence we exchange with you.

All of these operate under data processing agreements and process data solely on our instructions.

Vercel and Resend are based in the United States, so data may be transferred outside the European Economic Area. Such transfers rely on the safeguards set out in Chapter V of the GDPR — standard contractual clauses approved by the European Commission, or an adequacy decision (the EU-U.S. Data Privacy Framework).

The Meta pixel is a separate case: the data it collects reaches Meta Platforms Ireland Limited only if you consent to it. Section 8 describes this.

We do not sell your data. Apart from the Meta pixel described in section 8, which we load only with your consent, we do not share it for marketing purposes.

6. Your rights

You have the right to:

• access your data and receive a copy of it,
• have your data corrected,
• have your data erased,
• restrict processing,
• data portability,
• object to processing,
• withdraw consent at any time — without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, write to biuro@tissu.pl.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).

7. Is providing data mandatory

Providing data is voluntary but necessary for us to answer your enquiry. Without an e-mail address or phone number we have no way of getting back to you.

8. Cookies and the Meta pixel

Without your consent the site uses no analytics, marketing or profiling cookies and sends no data to third parties. Your browser then stores only what is needed to display the page.

On your first visit we ask whether you agree to advertising statistics. Only after you click “I agree” do we load the Meta pixel — a tool from Meta Platforms Ireland Limited that lets us count how many people reached the site from our ads and how many of them sent the contact form.

What reaches Meta once you consent:

• the fact of the visit and an identifier assigned by Meta,
• the fact that the contact form was sent, along with the type of investment and the floor area you entered.

Meta does not receive your name, e-mail address, phone number or the content of your message — that stays with us and goes only to our mailbox.

You may refuse, and use the site without any limitation. We remember the decision in your browser and you can change it at any time — the Privacy settings link at the bottom of every page reopens the same banner. Withdrawing consent is then a single click, exactly like giving it.

When you withdraw consent we delete the _fbp and _fbc cookies set by the pixel and reload the page, so the pixel stops working immediately rather than only on your next visit.

For the data collected by the pixel we are joint controllers with Meta. Meta also processes it for its own purposes, including outside the European Economic Area; Meta’s own privacy policy describes the rules.

9. Changes to this policy

The current version applies from the date shown at the top of the page. We will announce any material changes visibly on the home page.