Privacy Policy

Purpose of this document

This policy explains how we collect, use, share, and protect your personal data, as well as your rights regarding its processing.

Types of personal data we collect

By using our website, we may collect the following categories of personal data:

• Data you provide directly:
  name and surname, email address, reason for contact, and message content (contact form)
• Technical data about your device and browser:
  IP address, browser type, operating system, device information
• Website usage data:
  visited pages, duration of visit, usage patterns, and interaction with content
• Google Analytics data:
  aggregated statistical data that does not reveal user identity (geolocation, device type, session duration, traffic sources)

Google Analytics processes personal data only with your consent.

Purposes of processing personal data

We process your personal data for the following purposes:
• responding to your inquiries via the contact form
• analyzing website usage and optimizing user experience (with consent for analytical cookies)
• ensuring system security and preventing misuse
• fulfilling legal obligations (e.g., accounting)
• using Google Analytics to understand website usage and optimize content

Google Analytics and marketing technologies are used exclusively with your consent, in accordance with the Cookie Policy.

Legal basis for processing

We process personal data based on:

• User consent (Article 6(1)(a) GDPR)
  Applies to submitting inquiries via the contact form, as well as analytical, marketing, and functional cookies
• Legitimate interest (Article 6(1)(f) GDPR)
  Applies to ensuring website functionality, preventing misuse, and system security monitoring
• Legal obligation (Article 6(1)(c) GDPR)
  Applies to accounting and other mandatory records

Recipients of personal data

Your data may be shared with:

• web hosting providers
• Google LLC (Google Analytics – only with consent)
• IT support providers
• public authorities when required by law

All data processors are contractually obliged to comply with GDPR.

Transfer of personal data to third countries

When using Google Analytics and newsletter tools, personal data may be transferred to third countries, including the United States.

Transfers are carried out using:
• Standard Contractual Clauses (SCC)
• additional technical and organizational measures (e.g., IP anonymization, pseudonymization)

There may be a possibility of access to data by competent authorities of third countries.

Data retention period

• Contact form messages are stored for up to 12 months or until deletion upon user request
• Google Analytics data is retained according to GA settings (typically 2–26 months)
• Data retained based on legal obligations is stored for as long as required by law

Technical and organizational measures for data protection

We adhere to security procedures to reduce the risk of unauthorized access, disclosure, or other breaches of your data.
We use firewalls, strong passwords, antivirus software, and other measures to protect personal data (such as encryption and pseudonymization).
Our employees are bound by confidentiality obligations regarding all data they access in the course of their work.
We regularly provide training to our employees to ensure an adequate level of awareness regarding personal data protection.

Your rights under GDPR

You have the right to:

• access your personal data
•  correct inaccurate data
• erase data (“right to be forgotten”)
• restrict processing
• data portability
• object to processing based on legitimate interest
•  withdraw consent

To exercise your rights, contact us via email: info@lia-arhitektura.com.

Cookies and similar technologies

More information about cookies and how to manage consent can be found in our Cookie Policy.

Changes to the Privacy Policy

We reserve the right to amend this Privacy Policy.
All changes will be published on this page with an updated effective date.

Limitation of liability

Despite all implemented security measures, we cannot guarantee absolute data security. To the extent permitted by law, we exclude liability for damage caused by unauthorized disclosure of data.