Privacy
and cookie policy.
This document explains how BUTTON GROUP sp. z o.o. processes data relating to visitors of buttongroup.pl, contact form users and website analytics.
Data controller
The controller is BUTTON GROUP sp. z o.o., ul. Widok 11, 62-070 Dąbrówka, Poland, KRS 0001259543, tax ID 7773473980, REGON 54544287100000.
Privacy contact: kontakt@buttongroup.pl, phone +48 506 313 000.
Data, purposes and legal bases
| Purpose and data | Legal basis | Retention |
|---|---|---|
| Responding to enquiries. Name, e-mail, optional phone number, topic and message. | Article 6(1)(b) GDPR for pre-contractual steps, or Article 6(1)(f) GDPR for our legitimate interest in handling correspondence. | Until the matter is completed and then until relevant claims or record-keeping obligations expire. |
| Website security and operation. IP address, request time, browser and device details, diagnostic data. | Article 6(1)(f) GDPR — security, abuse prevention and diagnostics. | For as long as reasonably necessary for security and diagnostics, in line with infrastructure providers’ justified retention periods. |
| Optional Google Analytics 4. Online identifiers, device and browser data, approximate location and website interactions. | Article 6(1)(a) GDPR and Article 399 of the Polish Electronic Communications Law — only with consent. | Until consent is withdrawn; GA4 user and event data for no longer than 14 months and analytics cookies for no longer than 12 months. |
Providing data is voluntary, but your name, e-mail, topic and message are necessary for us to respond. A phone number is optional. Please do not submit special-category data or information that is unnecessary for your enquiry.
Contact form
The form uses FormSubmit.co to receive the submission and route it to contact@buttongroup.pl. Data entered in the form is therefore also transmitted to this provider. According to the provider, unconfirmed submissions may be retained for up to 30 days.
The form is used solely to respond to your enquiry. Sending a message does not subscribe you to marketing or a newsletter.
Recipients and international transfers
Data may be received by our hosting, security, e-mail, form delivery and analytics providers, in particular OpenAI, Cloudflare, Google and FormSubmit, as well as authorised advisers and public authorities where required by law.
Some providers may process data outside the European Economic Area. Where this occurs, transfers rely on a mechanism under Chapter V GDPR, such as an adequacy decision, the EU–US Data Privacy Framework or Standard Contractual Clauses.
Cookies and browser storage
Necessary mechanisms protect the website and remember your privacy choice. Analytics starts only after consent. Refusal does not affect access to the website.
| Name / provider | Purpose | Type and duration |
|---|---|---|
| button-analytics-consent BUTTON GROUP | Stores the analytics preference. | Necessary localStorage entry, up to 6 months. |
| __cf_bm Cloudflare | Protects the website against automated and malicious traffic. | Necessary; expires after approximately 30 minutes of inactivity. |
| _ga, _ga_* Google Analytics | Measures traffic and use of the website. | Analytics; consent-only; up to 12 months. |
You can withdraw consent at any time using “Change cookie settings” in the footer. Withdrawal disables analytics and deletes available Google Analytics cookies for this domain. You can also delete or block cookies in your browser settings.
Your rights
Subject to applicable law, you may request access, rectification, erasure, restriction, portability, object to processing based on legitimate interests and withdraw consent at any time. Withdrawal does not affect the lawfulness of earlier processing.
You may lodge a complaint with the President of the Polish Personal Data Protection Office. To exercise your rights, contact kontakt@buttongroup.pl.
Automated decisions, security and updates
We do not make solely automated decisions producing legal effects and do not use contact-form data for marketing profiling. Google Signals and advertising personalisation in GA4 are disabled.
We apply appropriate technical and organisational safeguards, including HTTPS encryption and access controls. This policy may be updated when services or laws change. The current version and effective date will remain available at this address.