Legal notice
Privacy policy
Last updated: 11 August 2026
This policy explains what personal data we collect through stolmar.co, why we process it and what rights you have. It describes only what the site actually does.
1. Who is the data controller
The controller of your personal data is STOLMAR Marian Czajkowski Sp. k., registered at Chmielewskiego 10/1, 81-721 Sopot, Poland, VAT ID PL5851483828.
Our workshop and office are located at Hodowlana 7, 84-230 Rumia, Poland.
For data protection matters contact us at info@stolmar.co or +48 505 999 275.
We have not appointed a data protection officer — please use the contact details above.
2. What we collect and why
Contact form
When you send an enquiry you provide your name and email address (required), and optionally a project brief and attachments. We also record which language version the enquiry came from.
We use this data solely to answer your enquiry and prepare a quote. The legal basis is Art. 6(1)(b) GDPR (steps taken at your request prior to entering into a contract) and, for further commercial correspondence, Art. 6(1)(f) GDPR (our legitimate interest in handling enquiries).
Providing the data is voluntary, but without an email address we cannot reply.
Deck download
Downloading the PDF requires no personal data and involves no data collection. If you have consented to statistics, we record only an anonymous “deck download” event, not linked to any individual.
Visit statistics
If you consent, we use Google Analytics 4 to understand which content is useful and how the site performs. The legal basis is Art. 6(1)(a) GDPR (consent), which you may withdraw at any time.
Analytics starts only after consent is given. Until then it stores no identifiers in your browser. IP addresses are truncated and advertising data is redacted.
Server
The site runs on hosting infrastructure which, like any server, records technical access logs (IP address, request time, browser type) for security and diagnostics. The legal basis is Art. 6(1)(f) GDPR.
3. Cookies and browser storage
The site sets no tracking cookies of its own. We do store two items in your browser (localStorage) so that your decisions are respected:
| Name | Purpose | Duration |
|---|---|---|
| stlm-consent | Remembers your consent choice so we do not ask on every visit | Until you clear browser data |
| stlm-lang | Remembers the language version you chose manually | Until you clear browser data |
This data stays in your browser and is never sent to us. Without it the site could not remember that you declined statistics — which is why it is strictly necessary and does not require consent.
Once you consent, Google Analytics sets its own cookies to distinguish visits. You can change your choice at any time via “Cookie settings” in the footer.
We run no advertising tracking. The site uses no advertising pixels or campaign measurement tools — we do not collect data for remarketing and we do not build audiences. Should that ever change, we will update this policy and any such tools would load only after separate consent.
4. Who we share data with
We use external providers who process data on our behalf:
| Provider | Role | Location |
|---|---|---|
| Formspree, Inc. | Delivering form submissions to our inbox | United States |
| Vercel, Inc. | Website hosting | United States / EU |
| Google Ireland Limited | Visit statistics (only after consent) | Ireland |
Some providers are based outside the European Economic Area. Transfers are made under Standard Contractual Clauses approved by the European Commission or the Data Privacy Framework.
We do not sell your data or share it with third parties for marketing purposes.
5. How long we keep data
- Form correspondence — for the duration of our conversations and afterwards for the limitation period of potential claims, no longer than 3 years.
- Records of completed projects — for the period required by tax and accounting law (5 years from the end of the tax year).
- Statistical data — per Google Analytics settings, up to 14 months.
- Server logs — short term, for security and diagnostics.
6. Your rights
In relation to the processing of your data you have the right to:
- access your data and receive a copy,
- rectify inaccurate or incomplete data,
- erasure (“right to be forgotten”),
- restriction of processing,
- data portability,
- object to processing based on our legitimate interest,
- withdraw consent at any time — without affecting the lawfulness of processing carried out before withdrawal.
To exercise these rights, write to info@stolmar.co. We respond without undue delay, within one month at the latest.
You also have the right to lodge a complaint with the supervisory authority: President of the Personal Data Protection Office, Stawki 2, 00-193 Warsaw, Poland.
7. Automated decision-making
We do not make decisions about you based solely on automated processing, and we do not carry out profiling that produces legal effects.
8. Changes to this policy
If we change how we process data or add new tools, we will update this document and the date at the top of the page. For material changes we will ask for your consent again.