Privacy policy
Last updated: September 2026
1. Data controller
The controller of your personal data is VIP Mobil House, ul. Legionowa 10/208, 15-099 Białystok, Poland. Tax ID (NIP) 5451830060, EU VAT PL5451830060.
Contact: [email protected] · tel. +48 573 133 137
2. What data we collect
- Contact forms — first name, last name, email, phone, the content of your message, GDPR consent.
- Configurator — finish choices, house model, contact details given when sending the configuration.
- Cookies — essential technical ones (session) and, once you consent, Google Analytics 4 analytics cookies. No advertising cookies, no profiling.
- Data in your browser — your theme preference and your stored consent decision live in your browser’s
localStorage, not in cookies. They never reach our server and you remove them by clearing this site’s data. - Visit statistics — Cloudflare Web Analytics (no cookies, no identification of the visitor) runs at all times; Google Analytics 4 with IP anonymisation loads only after you click “Accept” in the banner.
- Server logs — IP, user-agent, visit time (standard practice, kept up to 30 days for security).
3. Purpose and legal basis
- Answering quote and contact enquiries (Art. 6(1)(b) GDPR — performance of a contract or steps prior to entering into one).
- Fulfilling orders (Art. 6(1)(b) — contract).
- Marketing and newsletter (Art. 6(1)(a) — your consent; you can withdraw it at any time).
- Tax and accounting obligations (Art. 6(1)(c) — legal obligation).
- Analytics (Art. 6(1)(a) — your consent, given in the cookie banner).
4. How long we keep it
- Quote enquiries — up to 12 months from the last contact.
- Contracts and invoices — 5 years (tax obligation).
- Marketing data — until consent is withdrawn, at most 24 months without activity.
- Server logs — 30 days.
- Google Analytics data — 14 months.
5. Who we share data with
- Hosting and email providers (processing under a data processing agreement, within the EU).
- Transport companies (delivery address only, for orders).
- Banks and payment providers (where payments are made).
- Google Ireland Ltd. — Google Analytics 4 data, only if you consent in the cookie banner.
- Cloudflare — visit statistics without cookies and without identifying the visitor.
- Public authorities — where the law requires it.
We do not sell your data and we do not pass it to marketing companies.
6. Your rights
- The right to access your data and receive a copy of it.
- The right to rectification.
- The right to erasure (“the right to be forgotten”).
- The right to restrict processing.
- The right to data portability.
- The right to object to processing.
- The right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (uodo.gov.pl), or with the authority in your own country of residence.
7. Cookies
Essential technical cookies (session) run at all times — the site does not work correctly without them. Your theme preference and your consent decision are not cookies: they live in your browser’s local storage and never reach our server.
Google Analytics 4 analytics cookies load only after you click “Accept” in the banner. Until then the Google script is not fetched at all and Consent Mode keeps the analytics signal and every advertising signal set to “denied”. On acceptance we raise the analytics signal only — advertising signals stay denied permanently, even after you click “Accept”. Your IP address is anonymised. You can withdraw consent by clearing this site’s data in your browser.
We use no advertising cookies, no remarketing and no Facebook Pixel. Visit statistics are additionally collected by Cloudflare Web Analytics — without cookies and without identifying the visitor.
Your browser lets you disable cookies — but some features (the configurator, for instance) may then stop working correctly.
8. Changes to this policy
This policy may be updated — if anything material changes, we will tell active customers by email. The current version is always available on this page.