Last updated: 9 July 2026
This Privacy Policy sets out the rules for the processing and protection of the personal data of users of the website available at qgesto.com (the “Website”). It is informational in nature and fulfils the obligation arising from Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the “GDPR”).
1. Data Controller
The controller of your personal data is QGesto Sp. z o.o., with its registered office in Luboń, ul. Armii Poznań 93A, 62-030 Luboń, Poland, entered in the Register of Entrepreneurs of the National Court Register under KRS number 0000946638, whose registration files are kept by the District Court Poznań – Nowe Miasto i Wilda in Poznań, 9th Commercial Division of the National Court Register; tax identification number (NIP) 783 185 03 83, statistical number (REGON) 521061811, share capital PLN 300,000.00.
2. Contact regarding personal data
For all matters relating to the processing of personal data and the exercise of your rights, you may contact the Controller:
- by post: QGesto Sp. z o.o., ul. Armii Poznań 93A, 62-030 Luboń, Poland,
- by e-mail: biuro@qgesto.com.
3. Scope and source of the data collected
The Controller processes personal data provided voluntarily by the User through the forms available on the Website, including:
- the “Quick quote” forms,
- the contact form,
- the quote request form in the kitchen configurator.
Depending on the form, the following data is collected: name, e-mail address, telephone number, town/city, postal code, message content and information about the selected product configuration. While using the Website, technical data (including IP address, browser type and activity data) is also collected automatically to the extent described in the section on cookies.
4. Purposes and legal bases of processing
- responding to an enquiry and preparing and presenting an offer (quote) – on the basis of Article 6(1)(b) GDPR (steps taken to conclude a contract) and Article 6(1)(f) GDPR (the Controller’s legitimate interest in handling correspondence and business contact),
- the possible establishment, exercise or defence of legal claims – on the basis of Article 6(1)(f) GDPR,
- analytics and statistics of the use of the Website and ensuring its security and proper operation – on the basis of Article 6(1)(f) GDPR, and with regard to cookies requiring consent – on the basis of Article 6(1)(a) GDPR (consent).
5. Data retention period
Personal data is stored for the period necessary to achieve the purpose for which it was collected, i.e. for the duration of the correspondence and handling of the enquiry, and subsequently until the limitation period for any claims expires. Data processed on the basis of consent is stored until that consent is withdrawn.
6. Data recipients
Personal data may be disclosed to entities supporting the Controller in conducting its business, in particular providers of hosting and e-mail services, providers of analytics and marketing tools, as well as entities authorised under the law. These entities process data solely on the basis of data processing agreements and in accordance with the Controller’s instructions.
7. Transfer of data outside the European Economic Area
In connection with the use of tools provided by entities such as Google and Meta (Facebook), data may be transferred to countries outside the European Economic Area, including the United States. Such transfers take place with appropriate safeguards in place, in particular on the basis of standard contractual clauses approved by the European Commission or on the basis of adequacy decisions.
8. Cookies and tracking technologies
The Website uses cookies and similar technologies to ensure the proper functioning of the site and for analytical and marketing purposes. Cookie consent is managed via a consent banner displayed on the first visit; settings can be changed at any time. Cookies requiring consent are installed only after such consent has been given.
9. Rights of data subjects
You have the right to:
- access your data and obtain a copy of it,
- rectify (correct) your data,
- erase your data,
- restrict processing,
- data portability,
- object to processing,
- withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.
10. Right to lodge a complaint
The data subject has the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office (Urząd Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland) – if they consider that the processing of their data infringes the GDPR.
11. Voluntary provision of data
Providing personal data is voluntary but necessary in order to respond to an enquiry and prepare an offer. Failure to provide the data marked as required makes it impossible to submit the form.
12. Automated decision-making
Personal data is not used for automated decision-making, including profiling that produces legal effects or similarly significantly affects the User.
13. Changes to the Privacy Policy
The Controller reserves the right to make changes to this Privacy Policy. The current version of the document is always published on the Website together with the date of the last update.