PAKA.archi privacy policy

The controller of your personal data is PAKA.ARCHI sp. z o.o., with its registered office in Skierniewice, ul. Waryńskiego 72F, 96-100 Skierniewice, entered in the register of entrepreneurs of the National Court Register under KRS number 0000906455, NIP (tax ID) 8361864938, REGON 367486774. The PAKA.archi architectural design office works in Warsaw, at ul. Armatnia 10a/1, 01-246 Warsaw.

If you have any questions about your personal data, email biuro@paka.archi or call +48 605 300 830. You can also contact us by post at our office address in Warsaw. We have not appointed a data protection officer, so please contact us directly about all data protection matters.

When you write to us or call us

• Data: name and surname, email address, phone number, company name and position, and anything you choose to share with us, such as the site address or project assumptions.
• Purpose and legal basis: replying and conducting correspondence, i.e. our legitimate interest (Article 6(1)(f) GDPR). When you ask about a project, also steps taken at your request before entering into a contract (Article 6(1)(b) GDPR).
• How long: until the matter is closed, and then until any claims arising from it become time-barred.

When we conclude and perform a design contract

• Data: contact details of the investor's representatives and of the people they designate as contacts, and data needed for invoicing.
• Purpose and legal basis: concluding and performing the contract (Article 6(1)(b) GDPR), obligations under tax and accounting law (Article 6(1)(c) GDPR), contact with the people designated by the investor, and establishing, pursuing or defending claims (Article 6(1)(f) GDPR).
• How long: for the term of the contract, and then until claims become time-barred. We keep accounting documents for 5 years from the end of the year in which the tax obligation arose.

When you send us your CV

• Data: data from your CV, cover letter and portfolio.
• Purpose and legal basis: recruitment. We process the data required by the Labour Code under Article 6(1)(c) GDPR in conjunction with Article 22¹ of the Polish Labour Code, and other data on the basis of your consent (Article 6(1)(a) GDPR), which you give by sending us your documents.
• How long: until the end of the recruitment process. If you agree to take part in future recruitment, for 12 months or until you withdraw your consent.

When you visit paka.archi

• Data: IP address, browser and device type, address of the page visited, date and time of the visit. They are logged by the server that delivers the website.
• Purpose and legal basis: operating the website and protecting it against attacks, i.e. our legitimate interest (Article 6(1)(f) GDPR). The website works only over an encrypted HTTPS connection.
• How long: as long as the hosting provider needs to deliver and protect the website.

When you consent to statistics

• Data: a browser identifier stored in Google Analytics cookies, pages visited, how you arrived at the website, approximate location (country and city) and device type.
• Purpose and legal basis: visit statistics that show us which pages are read. The legal basis is your consent given in the banner (Article 6(1)(a) GDPR).
• How long: up to 14 months in Google Analytics, or until you withdraw your consent.

When you open the Contact page

• Data: IP address and browser data that Google receives when the map loads.
• Purpose and legal basis: showing where our office is. The Google map loads together with the Contact page; the legal basis is our legitimate interest (Article 6(1)(f) GDPR).
• How long: in accordance with Google's rules described in the Google Privacy Policy.

Cookies are small text files that a website stores in your browser. Browser storage (localStorage) works in a similar way. On paka.archi we store two kinds of information this way.

Necessary. We remember your choice in the consent banner, so that we do not ask on every visit, and the language version you chose. We do not need consent for this, because without these entries the website would not remember your decisions.

Statistics. We store Google Analytics cookies only when you click “I agree”. Without consent the website works exactly the same, and nothing is sent to Google Analytics.

Map. The Google map on the Contact page loads with the page, whatever you choose in the banner. Google may then store its own cookies.

You can change your consent at any time with the “Cookie settings” button in the website footer. You can also delete cookies in your browser settings.

We do not sell data or share it for marketing purposes. We entrust it only to companies that serve our office and website, under data processing agreements and terms:

• Cloudflare, Inc.: website hosting and name servers for the paka.archi domain. It processes IP addresses and technical visit data to deliver the website and protect it against attacks.
• Google Ireland Limited: Google Tag Manager, which loads the website's scripts (when it loads, Google receives the IP address and browser data), Google Analytics after your consent and Google Maps after the map loads.
• Microsoft Ireland Operations Limited: the office's email (Microsoft 365).
• TRBK (trbk.pl): building and maintaining the website, with access to statistics and hosting settings.
• companies that provide us with accounting, legal and IT services, to the extent needed for those services.

Data may also be disclosed to courts and other public authorities when required by law.

Cloudflare, Google and Microsoft belong to groups headquartered in the United States, so data may be transferred to the USA. These companies participate in the EU-US Data Privacy Framework, which under the European Commission decision of 10 July 2023 ensures an adequate level of data protection. They also use standard contractual clauses approved by the European Commission.

• access to your data and a copy of it,
• rectification of inaccurate data,
• erasure of your data,
• restriction of processing,
• portability of the data we process on the basis of consent or a contract,
• objection to processing based on our legitimate interest,
• withdrawal of consent at any time. Withdrawing consent does not affect the lawfulness of processing before the withdrawal,
• lodging a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw (uodo.gov.pl).

To exercise these rights, write to biuro@paka.archi. We will reply without undue delay, and within one month at the latest.

Providing data is voluntary. Without an email address or phone number we cannot reply to your message, and without the data needed for a contract we cannot conclude it. You can decline statistics, and the website works exactly the same.

We do not make decisions about you based solely on automated processing, including profiling. We view statistics only in aggregated reports.

The website contains links to other services, such as Google Maps and the TRBK website. Once you go there, the privacy rules of those services apply.

When we change how we process data, for example by adding a contact form or a new tool, we will update this page and its effective date.

This privacy policy is effective from 30 October 2026.