Privacy Policy

1. Data controller

The controller of your personal data is PG‑PROJEKT Biuro Projektów Sp. z o.o., ul. Strzegomska 42B, 53‑611 Wrocław, Poland.

For matters concerning personal data, please contact biuro@pg-projekt.pl.

2. Data we process

The data processed depends on how you use the website. In particular, we may process:

• data submitted through the contact form: name, email address, optionally telephone number and company/organisation, the subject and content of your enquiry, and any attachments you provide;
• data submitted through the careers form: name, email address, optionally telephone number, selected role and preferred location, information included in your application, and any CV, portfolio or other attachments;
• basic technical data associated with use and security of the website, such as IP address, request time, referring address and information recorded in server logs.

3. Purposes and legal bases

• Enquiries and correspondence — to respond to messages, discuss projects and, where applicable, take steps at your request before entering into a contract (Article 6(1)(b) GDPR), or on the basis of our legitimate interest in managing business correspondence and relationships (Article 6(1)(f) GDPR).
• Recruitment — to conduct a recruitment process on the legal bases arising from applicable law and steps taken at the candidate’s request before a possible contract; where additional personal data is provided voluntarily beyond the required scope, the relevant lawful basis, including consent where required, applies.
• Website security and administration — to maintain security, prevent abuse and diagnose technical problems on the basis of our legitimate interests (Article 6(1)(f) GDPR).
• Establishing, exercising or defending legal claims — where necessary, on the basis of our legitimate interests (Article 6(1)(f) GDPR).

4. Recipients of data

Personal data may be processed by service providers supporting us with website hosting, email, IT maintenance and professional advisory services, only to the extent necessary to provide those services. The website is currently hosted using MyDevil and form messages are delivered to the company’s email environment in Microsoft 365.

Data may also be disclosed to competent public authorities where required by law.

5. Transfers outside the EEA

Some IT service providers may process data outside the European Economic Area. Where this occurs, transfers are made using the mechanisms and safeguards required by the GDPR.

6. How long we keep data

• contact enquiry data is kept for as long as necessary to deal with the matter and related correspondence and, where justified, until the expiry of any applicable limitation period for claims;
• candidate data is kept for the duration of the relevant recruitment process and for longer only where there is a separate lawful basis;
• technical data and logs are retained for periods justified by website security, administration and server infrastructure requirements.

7. Your rights

Where provided for by the GDPR, you have the right to access, rectify and erase your data, restrict processing, data portability and object to processing based on legitimate interests. Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

You also have the right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes UODO).

8. Providing your data

Information marked as required in a form is necessary in order to send the relevant enquiry or application. Other fields are optional. We do not make decisions about website users solely by automated means and we do not profile users on the basis of information submitted through the forms.

9. Cookies and analytics

The current version of the website does not use analytics or marketing tracking code and does not set its own cookies for advertising or analytics purposes. The hosting provider may nevertheless process standard technical information and server logs necessary for operation and security of the service.

10. Changes to this policy

This policy may be updated if the operation of the website, the services used or applicable legal requirements change.

Last updated: 6 October 2026.