Privacy policy

1. Who is the controller of your data

The controller of personal data is Tissu Sp. z o.o., registered at Al. Jana Chrystiana Szucha 2/4 apt. 24, 00-582 Warsaw, Poland, tax ID (NIP) 5252680215, statistical ID (REGON) 365647641.

For any matter concerning personal data, write to biuro@tissu.pl or call +48 512 122 220.

2. What data we collect and why

Contact form. We collect your name, e-mail address and — if you provide them — your phone number, the type and scope of your planned project, and the content of your message. This data is used solely to answer your enquiry and, where relevant, to prepare a proposal.

Ads for people who have consented. If you tick the separate, optional box in the form consenting to ads, we will share your e-mail address, phone number and full name with Meta so that we can show you Tissu ads on Facebook and Instagram. Section 9 describes the details.

Phone and e-mail contact. If you write or call us directly, we process the data you choose to give us.

Technical data. We use no analytics tools and we do not build visitor profiles. We do use the Meta pixel — a tool that measures how well our ads perform. The pixel loads only if you agree to it in the banner shown on your first visit; until then the site sends no data to third parties. Section 8 of this policy describes what reaches Meta and how to refuse.

3. Legal basis for processing

• Art. 6(1)(b) GDPR — steps taken at your request prior to entering into a contract (answering your enquiry, preparing a proposal).
• Art. 6(1)(a) GDPR — your consent. You give it separately in three places: by ticking the box in the contact form, by ticking the optional box consenting to ads in the same form, and by clicking “I agree” in the banner concerning the Meta pixel.
• Art. 6(1)(f) GDPR — our legitimate interest in conducting correspondence and defending against potential claims.

4. How long we keep your data

Correspondence relating to an enquiry is kept for 24 months from the last contact. If a contract is concluded, data is kept for its duration and for the period required by tax and accounting law (5 years from the end of the tax year).

Data shared for advertising on the basis of your consent is used until you withdraw it, and for no longer than 24 months from when it was given.

5. Who we share data with

Data may be shared only with entities that operate our technical infrastructure:

• Vercel Inc. (United States) — website hosting and handling of contact form submissions,
• Resend, Inc. (United States) — delivery of contact form messages to our mailbox,
• Microsoft Ireland Operations Limited (Ireland) — the Microsoft 365 mailbox that receives form messages and the correspondence we exchange with you.

All of these operate under data processing agreements and process data solely on our instructions.

Vercel and Resend are based in the United States, so data may be transferred outside the European Economic Area. Such transfers rely on the safeguards set out in Chapter V of the GDPR — standard contractual clauses approved by the European Commission, or an adequacy decision (the EU-U.S. Data Privacy Framework).

Two separate cases involve Meta Platforms Ireland Limited, both only with your consent: the Meta pixel (section 8) and the list of people we show ads to (section 9).

We do not sell your data. Apart from these two cases, we do not share it for marketing purposes.

6. Your rights

You have the right to:

• access your data and receive a copy of it,
• have your data corrected,
• have your data erased,
• restrict processing,
• data portability,
• object to processing,
• withdraw consent at any time — without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, write to biuro@tissu.pl.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).

7. Is providing data mandatory

Providing data is voluntary but necessary for us to answer your enquiry. Without an e-mail address or phone number we have no way of getting back to you.

8. Cookies and the Meta pixel

Without your consent the site uses no analytics, marketing or profiling cookies and sends no data to third parties. Your browser then stores only what is needed to display the page.

On your first visit we ask whether you agree to advertising statistics. Only after you click “I agree” do we load the Meta pixel — a tool from Meta Platforms Ireland Limited that lets us count how many people reached the site from our ads and how many of them sent the contact form.

What reaches Meta once you consent:

• the fact of the visit and an identifier assigned by Meta,
• the fact that the contact form was sent, along with the type of investment and the floor area you entered.

The pixel does not receive your name, e-mail address, phone number or the content of your message. Data from the form can reach Meta only in the way described in section 9 — if you tick the separate box consenting to ads.

You may refuse, and use the site without any limitation. We remember the decision in your browser and you can change it at any time — the Privacy settings link at the bottom of every page reopens the same banner. Withdrawing consent is then a single click, exactly like giving it.

When you withdraw consent we delete the _fbp and _fbc cookies set by the pixel and reload the page, so the pixel stops working immediately rather than only on your next visit.

For the data collected by the pixel we are joint controllers with Meta. Meta also processes it for its own purposes, including outside the European Economic Area; Meta’s own privacy policy describes the rules.

9. Ads for people who have consented

If you tick the optional box in the contact form consenting to ads, your e-mail address, phone number and full name are added to a list that we upload to Meta Ads Manager. This lets us show Tissu ads to people who have already been in touch with us — or, conversely, not show them to people who are already our clients.

Before being sent to Meta, the data is converted into cryptographic hashes (SHA-256). Meta uses them solely to match your account and in this respect acts as a processor on our behalf.

Neither the content of your message nor the description of your project reaches Meta this way.

You can withdraw this consent at any time by writing to biuro@tissu.pl. We will remove you from the list the next time it is refreshed, and no later than within 30 days. Not consenting has no effect whatsoever on our reply to your enquiry.

10. Changes to this policy

The current version applies from the date shown at the top of the page. We will announce any material changes visibly on the home page.