Privacy policy
This is a translation of the Polish original. In case of any difference, the Polish version is binding.
Applies to the website fhr.com.pl — who is responsible for your data, why we collect it, how long we keep it and what you can do about it.
Version 1.2, effective from 11 November 2026.
1. Who is the data controller
The controller of personal data is FHR GROUP spółka z ograniczoną odpowiedzialnością (a Polish limited liability company), with its registered office in Kobyłka, ul. Wołomińska 21, 05-230 Kobyłka, Poland, NIP (tax identification number) 1251771600, KRS (National Court Register) number 0001118351.
For all matters concerning personal data, write to admin@fhr.com.pl or call: +48 600 767 907. We have not appointed a data protection officer — we handle these matters ourselves.
2. What data we collect through this website
The website has one form — “Request a quote”. In it you give your name and e-mail address, choose what your enquiry is about and, optionally, write a message. That is all we ask for.
Apart from the form, we collect — only with your consent — visit statistics through Google Analytics. They help us know how many people visit the website and which content they read. Without your consent the tool does not run at all, and the website works the same way. We do not profile visitors and we do not run advertising based on your behaviour.
Our server records technical access logs (IP address, date of the request, type of browser) — as every web server does. They are used only to maintain the website and detect abuse.
The website is available in Polish, English and Arabic. When you open the home page, the server determines from your IP address the country you are connecting from and immediately shows the matching language version. It also takes into account the language set in your browser and whether you arrive from the polandarabic.com website. We read the country from a database stored on our own server (IP geolocation by DB-IP, licence CC BY 4.0) — your IP address is not passed to anyone else for this purpose, and the result is not stored. You can change the language version at any time with the switch in the website header.
3. Why and on what legal basis
| Purpose | Legal basis |
|---|---|
| Replying to an enquiry from the form and preparing a quote | Article 6(1)(b) GDPR — steps taken at your request before entering into a contract |
| Contact in matters that do not lead to a contract | Article 6(1)(f) GDPR — our legitimate interest in answering |
| Maintaining the website, security, server logs | Article 6(1)(f) GDPR — legitimate interest |
| Displaying the website in the visitor's language (country from the IP address) | Article 6(1)(f) GDPR — legitimate interest in showing the website in a language you understand |
| Visit statistics (Google Analytics) | Article 6(1)(a) GDPR — your consent, which you can withdraw at any time |
| Defence against claims and demonstrating compliance | Article 6(1)(f) GDPR — legitimate interest |
Providing data is voluntary, but without your name and e-mail address we cannot reply to your enquiry.
4. How long we keep data
- Correspondence from the form — for the time needed to reply, and then for a year in case of follow-up questions. If we sign an agreement after your enquiry, the data falls under the rules for keeping client records described in the agreement.
- Server logs — up to 12 months.
- Statistical data in Google Analytics — up to 14 months from your last visit; once you withdraw consent we stop collecting it and delete the cookies already stored straight away.
5. Who we share data with
We do not sell data and we do not share it for marketing purposes. We do use providers without whom the website and e-mail would not work:
| Entity | Role | Where it processes data |
|---|---|---|
| Sendormeco Holding sp. z o.o. | maintaining the website and handling the form — processor | European Union |
| Hetzner Online GmbH | the server the website runs on — sub-processor | Germany / Finland |
| Sendinblue SAS (Brevo) | delivering messages from the form to our mailbox — sub-processor | France |
| Google Ireland Limited | fonts loaded when the page opens and — after your consent — visit statistics; in both cases Google learns your IP address — separate controller | European Union |
Data may also be passed to entities entitled to it under the law — for example tax authorities or courts — if they request it within the limits of the law.
We do not transfer data outside the European Economic Area.
6. Client panel
On the home page we have embedded in a frame the login window of the client panel run by PodatkiPodatki.pl. It is a separate system — we do not create or host it.
Until you start logging in, your browser loads only the form itself. You enter your login details directly in the provider's system, and it then stores its own cookies, necessary to maintain the session. The rules for processing data in the panel are set by its provider; in it you are our client, so the scope of processing also follows from the agreement you have concluded with us.
7. Cookies and browser storage
Without your consent the website stores no cookies — except one that you ask for yourself by choosing a language with the switch in the header. There is also no tool that starts by itself — we download the statistics script only after you click “I agree”. This matters: merely downloading such a script would pass on your IP address, even if it stored nothing.
We store one thing regardless of consent: your choice from the banner, in the browser's local storage. Without it we would ask on every visit. This record stays on your device and we send it nowhere.
| What | Why | How long |
|---|---|---|
| Record of your banner choice | so that we do not ask on every visit | until you clear the browser's data |
jezyk | remembering the language version chosen with the PL / EN / عربي switch; stored only after you click the switch | 12 months |
_ga, _ga_* (Google Analytics) | recognising a returning visit in the statistics | up to 24 months; deleted immediately after you withdraw consent |
You can withdraw your consent at any time — use the “Cookie settings” link in the footer of every page. Withdrawal not only stops further collection but also deletes the files already stored.
Cookies appear in two more situations that do not depend on us: when you log in to the client panel (see section 6) and when you click a link leading to an external site, for example to our Google business profile — the rules of that site then apply.
8. Your rights
You have the right of access to your data and to a copy of it, rectification, erasure, restriction of processing, data portability and the right to object to processing based on legitimate interest.
To exercise any of them, write to admin@fhr.com.pl. We reply within a month.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.
9. Automated decisions
We do not make decisions based solely on automated processing and we do not profile. The statistics referred to in section 2 tell us about traffic on the website as a whole, not about you as a person.
10. Changes
When we change the way we process data, we will also change this document and raise its version number. The current version is always on this page.