Privacy Policy
This policy explains the circumstances and principles under which we process your personal data when you use havenconstruction.pl, contact us online, participate in recruitment, or use our social media profiles. Finally, you'll find information about cookies and server logs.
Who processes your data?
The controller of your personal data processed using the havenconstruction.pl website is Haven Construction sp. z o. o. with its registered office in Warsaw.
You can contact us at: ul. Szamocka 8 lok. IX P., 01-748 Warsaw, or by e-mail: biuro@havenconstruction.pl.
Who ensures data compliance?
We have appointed a Data Protection Officer – Damian Stachyra. You can contact him by email at: iod@havenconstruction.pl.
Why and how do we process your data?
Below you will find information about our processing of personal data for specific purposes.
Email contact
When you contact us directly via our email address:
| Purpose and basis of processing | Handling and managing email correspondence – Article 6(1)(f) of the GDPR, i.e. our legitimate interest in communicating on current matters and performing the contract, if correspondence is related to such a contract, as well as archiving correspondence. |
|---|---|
| Data storage period | We retain correspondence for 12 months from the time it ends, unless its nature requires longer retention, e.g. in connection with an ongoing contract. |
| Data recipients | Entities providing services to us that require the processing of personal data, including providers of hosting services, cloud services, and office software. Your personal data may also be disclosed to entities authorized to obtain it under applicable law. |
| The nature of the data provided | Providing your data is voluntary, but necessary to conduct email correspondence with us. |
Contact form (offer)
When you send an inquiry via the form:
| Purpose and basis of processing |
Contact in response to your request and presentation of the requested commercial information – pursuant to Article 6(1)(a) of the GDPR (consent). Conducting internal analyses related to the bidding process – pursuant to Article 6(1)(f) of the GDPR, i.e. our legitimate interest in assessing the effectiveness of our commercial activities. |
|---|---|
| Data storage period | We will store your data for 12 months from the presentation of the offer or the last contact related to your inquiry. |
| Data recipients | Entities providing services to us that require the processing of personal data, including providers of hosting services, cloud services, and office software. We may also disclose your personal data to entities authorized to obtain it under applicable law. |
| The nature of the data provided | Providing data is voluntary, but necessary to obtain a tailored commercial offer. |
Protecting the form from abuse – reCAPTCHA
We use Google reCAPTCHA in our contact form to protect the site against spam, automated submissions, and other abuses.
In connection with the use of reCAPTCHA, technical data relating to the use of the website may be processed, in particular the IP address, information about the device, browser and method of interaction with the form.
The provider of this technology is Google. Data may be transferred outside the European Economic Area in accordance with Google's policies.
The basis for processing is Article 6(1)(f) of the GDPR – our legitimate interest in ensuring the security of the website and protecting the form against abuse and automated submissions.
Recruitment
When you apply to us via the forms provided:
| Purpose and basis of processing |
Conducting the current recruitment process:
Including your CV in the candidate database for future recruitment purposes – Article 6(1)(a) of the GDPR, i.e. your consent. |
|---|---|
| Data storage period | We store your data until the recruitment process you are participating in is completed. If you consent to participate in future recruitment processes, we store your data for 12 months from the date it is collected. |
| Data recipients | Entities providing services to us that require the processing of personal data, including hosting providers, cloud services, and office software providers, as well as recruitment platforms and ATS systems providers. We may also disclose your personal data to entities authorized to obtain it under applicable law. |
| The nature of the data provided | Providing data is voluntary but necessary to participate in the recruitment process. This does not apply to data obtained based on consent, which is voluntary and does not affect participation in the recruitment process. |
Social media
When you interact with us via social media (Instagram, LinkedIn):
| Purpose and basis of processing | Maintaining our social media profiles (Instagram, LinkedIn), including responding to private messages and public comments – Article 6(1)(f), i.e. our legitimate interest in providing information about the company's activities and the services it offers, as well as promoting its activities. |
|---|---|
| Data storage period |
We process your personal data for the duration of our social media channels (Instagram, LinkedIn). Please remember, however, that your data is also administered by the providers of the above-mentioned media under the terms set out in their privacy policies:
|
| Data recipients | The recipients of your personal data are the social media providers through which you interact with us, in particular Instagram (Meta) and LinkedIn (LinkedIn Corporation). Therefore, your personal data may be transferred to the United States of America. This transfer is based on the European Commission's decision of July 10, 2023, confirming the adequacy of personal data protection (EU-US Data Privacy Framework). |
| The nature of the data provided | Providing data is voluntary, but necessary to achieve the above-mentioned purposes. |
Exercising rights under the GDPR
When you ask us to exercise your rights under the GDPR:
| Purpose and basis of processing | Consideration of your request related to the exercise of the rights provided for in Articles 15-22 of the GDPR and documentation of related activities – Article 6(1)(c) of the GDPR in conjunction with Article 5(2), Article 12, Articles 15-22 of the GDPR. |
|---|---|
| Data storage period | We store your personal data for a period of 5 years from the date we respond to your request. |
| Data recipients | The recipients of your personal data are entities providing us with services related to personal data processing, including providers of legal and data protection consulting services, IT services, and office software suppliers. We may also disclose your data to authorized authorities. |
| The nature of the data provided | Providing data is voluntary, but necessary to process your request. |
Your rights
You have a number of rights in connection with our processing of your personal data. These include the right to:
- access to data, including obtaining copies thereof,
- rectification of data – if you believe that your personal data processed by us is incorrect or incomplete,
- deletion of data ("being forgotten") - remember, however, that you are not entitled to this right, among others, when the processing of your data by us is necessary to fulfill a legal obligation, execute the contract between us, or establish, pursue or defend legal claims,
- processing restrictions – for example, when you believe that we are processing your data unlawfully but you object to its deletion, or when we no longer need your data but you still need it to establish, pursue or defend claims,
- objection – if we process your personal data based on our legitimate interest, e.g. for marketing purposes.
You also have the right to withdraw your consent to the processing of your personal data if it is the basis for its processing. Please note, however, that withdrawing consent does not affect the lawfulness of any processing we conducted prior to your withdrawal.
To exercise the above rights, please contact us or our data protection officer.
Regardless of the above rights, you may lodge a complaint with the data protection supervisory authority if you believe we are processing your data unlawfully. In Poland, this authority is the President of the Personal Data Protection Office.
Transfer of data outside the European Economic Area
In our ongoing work, we use solutions provided by, among others, Microsoft Corporation (Office 365). Therefore, your personal data may be transferred to the United States of America. The basis for transferring data to the aforementioned entities is the European Commission's decision confirming the adequacy of data protection provided by the EU-US Data Privacy Framework.
Due to the use of Google reCAPTCHA, technical data related to your use of the website may also be processed by Google.
Automated decision making
We do not make decisions based solely on automated processing of personal data.
Cookie Policy
Our website uses cookies, including third-party cookies. Detailed information can be found below.
1. What are cookies?
Cookies are small pieces of information that are stored on your device (e.g., computer or smartphone) or read from it when you use our website. They may come from us or from third parties. They enable us to, among other things, ensure the website functions properly, remember selected settings, measure site usage, or—with your consent—tailor marketing activities.
Detailed information about the cookies used, their providers, purposes and duration can be found in the table below.
2. Types of cookies and the basis for their processing
Our website uses necessary cookies, which are required for the proper and secure operation of the website. The basis for processing the information contained in these cookies is Article 6(1)(f) of the GDPR, i.e., our legitimate interest in ensuring the proper and secure operation of the website.
Analytical and marketing cookies allow us to understand how users use the Website, measure campaign effectiveness, and tailor advertising and content. We only enable them after obtaining your consent. For these cookies, the basis for storing or reading information from a device is Article 399, paragraphs 1-2 of the Electronic Communications Act, and the basis for processing personal data is Article 6, paragraph 1, letter a of the GDPR.
You can withdraw your consent at any time, which will not affect the lawfulness of previous processing.
3. Cookie management
When you first visit our website, you decide whether you agree to our collection and use of analytical and marketing cookies.
Change cookie settingsYou can also change your web browser settings to block cookies or to alert you when they are being sent to your devices. There are many ways to manage cookies. Detailed information can be found on your browser provider's help pages:
4. Categories of cookies used by the website
We use the following cookies and similar technologies on our website:
| Type | Name / technology | Supplier | The / description | Operating time |
|---|---|---|---|---|
| Essential | Cookie consent management mechanism | Haven Construction | Remembers the user's choice to consent to the use of optional cookies and similar technologies. | Until you delete your browser data or collect your consent again. |
| Essential / safety | Google reCAPTCHA | Protect your contact form against spam, automated submissions and abuse. | Depending on the technology and settings used by Google. |
A detailed list of cookies set by external analytical and marketing tools will be updated as they are implemented on the website.
5. Server logs
When you use the website, the server may automatically save technical information about your connection, e.g. your IP address, the date and time of your request, the address of the page you requested, the HTTP response code, information about your browser or device, and the address of the page from which you came – if such information is transmitted by your browser.
Information stored in logs may constitute personal data, especially when it includes an IP address or other identifiers.
We process them to ensure the security and proper functioning of the website, diagnose errors, prevent abuse, and create aggregated statistics.
The basis is Article 6(1)(f) of the GDPR – our legitimate interest in the secure administration of the website.
We store logs for the period necessary to ensure security, diagnose and handle incidents, and longer only when necessary to clarify a specific event or to establish, pursue or defend claims.
Hosting and IT service providers acting on our behalf may have access to logs.
CONTACT US
Do you have a project?
Let's make it happen together.
From the first concept to the finished space
- let's talk about your investment and see how we can implement it together.
We create spaces with people and businesses in mind. We design and implement comprehensive projects – from the initial concept to the finished space.
Navigation
Services
Contact
Telephone: +48 518 993 753
E-mail: biuro@havenconstruction.pl
Address:
ul. SZAMOCKA, nr 8, lok. IX P.,
01-748 WARSAW
© 2026 HAVEN CONSTRUCTION. All rights reserved.
