PRIVACY AND COOKIES POLICY

Last updated: 8 April 2026

1. Data Controller

The controller of personal data processed through prime-interiors.eu is:

Prime Advertising Wojciech Kordas
Liściasta 33
33-111 Koszyce Wielkie
Poland
VAT/NIP: 6871402124
e-mail: office@prime-interiors.eu

For all privacy-related matters, you may contact the Controller at: office@prime-interiors.eu.

The Controller has not appointed a Data Protection Officer.

2. Scope and source of data

The Controller may process the following personal data:

1. data provided voluntarily by the user in the contact form or in correspondence:
   • name,
   • email address,
   • phone number,
   • company name,
   • country,
   • message content;
2. technical data collected while using the website:
   • IP address,
   • browser and device data,
   • information about activity on the website,
   • data stored in cookies or similar technologies;
3. data related to cookie settings and consents;
4. if user account / login functionality remains active on the website – also data necessary to create, maintain, and log into a user account.

Data comes either directly from the user or is collected automatically when the website is used.

3. Purposes and legal bases of processing

Personal data is processed for the following purposes:

1. handling enquiries, contacting the user, providing commercial information, or preparing an offer at the user’s request
   legal basis: Article 6(1)(b) GDPR and, where applicable, Article 6(1)(f) GDPR;
2. managing correspondence and internal communication records
   legal basis: Article 6(1)(f) GDPR;
3. establishing, pursuing, or defending legal claims
   legal basis: Article 6(1)(f) GDPR;
4. ensuring website security, administering the website, and maintaining technical logs
   legal basis: Article 6(1)(f) GDPR;
5. website traffic analysis using Google Analytics 4
   legal basis: Article 6(1)(a) GDPR, i.e. the user’s consent expressed through the cookie banner;
6. remembering cookie settings and user preferences
   legal basis: technical necessity of the website and/or the Controller’s legitimate interest, depending on the type of cookie;
7. if the user concludes a contract with the Controller or places an order outside an online store environment – performance of the contract and compliance with legal obligations, including tax and accounting obligations
   legal basis: Article 6(1)(b) and 6(1)(c) GDPR.

4. Is providing data mandatory

Providing data is voluntary. However, where certain data is necessary to reply to a message or prepare an offer, failure to provide such data may make it impossible for the Controller to respond or handle the enquiry.

5. Data recipients

Personal data may be shared with entities that support the Controller in operating the website and business, in particular:

1. the website hosting provider – seohost.pl;
2. analytics tool providers – in particular Google Analytics 4;
3. technical, IT, and website maintenance providers, where used;
4. public authorities or other entities entitled to receive data under applicable law.

If embedded YouTube content or other third-party content remains active on the website, the providers of such services may also receive data related to playback or user interaction.

6. Transfers outside the EEA

Due to the use of Google tools, personal data may be transferred outside the European Economic Area, in particular to the United States. In such cases, the Controller relies on GDPR-compliant transfer mechanisms and appropriate safeguards provided by the service provider.

7. Data retention period

Personal data is stored for no longer than necessary for the purpose of processing, in particular:

1. contact form data and correspondence – for 1 year from the end of contact or the last active correspondence;
2. data processed for claims-related purposes – until the expiry of the relevant limitation periods;
3. data related to contract performance and accounting records – for the period required by law;
4. data processed on the basis of consent – until consent is withdrawn or the purpose no longer exists;
5. analytics data – according to the retention period resulting from the analytics tool settings and cookie lifespan;
6. if user accounts are active – for as long as the account exists and thereafter for the period necessary for settlements, legal compliance, and claims protection.

8. User rights

The data subject has the right to:

1. access personal data;
2. obtain a copy of personal data;
3. rectify personal data;
4. erase personal data;
5. restrict processing;
6. object to processing based on Article 6(1)(f) GDPR;
7. data portability, where processing is based on consent or contract and carried out by automated means;
8. withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal;
9. lodge a complaint with the President of the Polish Personal Data Protection Office (UODO).

9. Cookies and similar technologies

The website uses cookies and similar technologies to ensure proper website operation, remember user preferences, and – after consent – analyse website traffic.

9.1 Types of cookies used

a) Strictly necessary cookies
These cookies are used for website operation, security, privacy-setting storage, form handling, and – if login functionality remains active – user authentication.

b) Analytics cookies
These cookies are used to analyse traffic and user behaviour on the website, in particular through Google Analytics 4. They are used only after the user gives consent.

c) Functional cookies
These cookies may be used to remember selected user preferences where such features are active on the website.

10. Managing cookie consent

Users can manage cookies through:

1. the cookie banner available on the website;
2. their browser settings.

Consent for analytics cookies can be withdrawn at any time. Please note that disabling certain cookies may affect some website functions.

11. Automated decision-making

Personal data is not used for automated decision-making producing legal effects concerning the user or similarly significantly affecting the user.

12. Changes to this Policy

The Controller may update this Privacy and Cookies Policy, in particular in the event of legal, organisational, technical, or website functionality changes. The current version is always published on the website.