Privacy policy and GDPR notice
Effective from: 2026-10-15
This notice covers website use, contact with OTB24 and enquiry submissions. It explains data processing under Article 13 GDPR.
- Polish tax identification number (NIP):
- 5214020422
- REGON:
- 525360410
- National Court Register number (KRS):
- 0001037079
1. Controller and contact
The data controller is Obsługa Techniczna Budynków Sp. z o.o., ul. Pawła Lipowczana 6, 02-260 Warsaw. Privacy requests can be sent by post to this address or raised by phone at +48 690 530 630. Any additional electronic address displayed below also serves these purposes. You do not have to use the contact form to exercise your rights.
2. Data, purposes and legal grounds
We process the information entered in the form: name or contact person, company name, email, optional phone number, subject and message. The quotation form also includes property location, type and optional floor area, selected services and cooperation type. We record acknowledgement of the privacy policy and acceptance of the terms; this is not marketing consent. The form does not accept attachments. Enquiries from a person seeking to enter a contract are handled under Article 6(1)(b) GDPR. Communication with company representatives, other correspondence, security and legal claims rely on Article 6(1)(f): our legitimate interests in communication and protecting rights. Legal obligations relating to a contract may require Article 6(1)(c). We do not use the form to send advertising.
3. Recipients and Google Chat
Only authorised OTB24 staff handling the enquiry receive it. The message and contact details are transferred from our server to Google Chat within Google Workspace. Other recipients may include hosting, IT maintenance, communication and legal service providers and competent authorities where required by law. We do not send your IP address, session identifier or the secret integration URL to Chat. Google infrastructure may process data outside the EEA. Such transfers require a suitable Chapter V GDPR mechanism, such as an adequacy decision or standard contractual clauses. Ask the controller for details of the mechanism used and a copy of the relevant safeguards.
4. Retention periods
Enquiries that do not lead to cooperation are deleted no later than 6 months after the last contact about that matter. If a contract is concluded, necessary correspondence is retained during performance and afterwards only to the extent and for the period required by law or necessary to establish, exercise or defend legal claims, until the applicable limitation periods expire. This does not mean keeping all enquiries indefinitely. Routine technical logs are retained for up to 30 days; records of a specific incident are kept longer only where necessary to investigate it or protect legal claims. Technical abuse-limiting records are cleaned on subsequent submissions after 24 hours; they contain neither messages nor raw IP addresses.
5. Your rights
Subject to the GDPR, you may request access, rectification, erasure or restriction of processing. Data portability applies in the circumstances specified by the GDPR. You may object to legitimate-interest processing on grounds relating to your particular situation. If any processing relies on consent, you can withdraw it without affecting the lawfulness of earlier processing. You may complain to the President of the Polish Personal Data Protection Office (uodo.gov.pl). Requests are normally handled within one month; any extension follows GDPR conditions and we will explain the reason.
6. Voluntary provision and security
Providing data is voluntary, but the form cannot be processed without the required fields. The phone number is optional. Do not submit excessive data or special-category data such as health information. We do not profile you or make decisions with legal effects solely through automated processing. Technical anti-spam checks may reject submissions; telephone contact remains available. We use encrypted connections, access restrictions and form protection. Form data is not stored in this website database or application logs; it remains in the communication tool and any necessary case documentation.
7. Cookies and external links
Fonts, photos and the logo are delivered locally. The website does not embed Google Maps, advertising or analytics tools. It does not set a consent cookie or use localStorage or sessionStorage. Google Chat operates on the server only and does not set cookies in visitors browsers. External links, if followed, lead to services with their own privacy policies. The cookie policy describes the necessary form cookie.
8. Technical server data
To deliver pages and protect the website, server logs may record your IP address, request time, requested page, response status and technical browser information. The basis is Article 6(1)(f) GDPR: website security and reliable operation. Form protection also uses random session identifiers and pseudonymous abuse counters. Access is limited to authorised staff and infrastructure providers.
Electronic contact for privacy enquiries and complaints: biuro@dknet.com.pl