Privacy
policy

We believe in full transparency. In this privacy policy you’ll find everything you need to know about how DeviHouse collects and uses your data, who we share it with, how long we keep it, and what rights you have as a user of our service

1. Data Controller

The controller of your personal data is MG Fotografia sp. z o.o., with its registered office at ul. Spacerowa 52, 43-445 Dzięgielów, Poland, VAT number: 5482767109, e-mail: info@devihouse.com.

2. What Personal Data We Collect

We may process the following categories of personal data:

  • identification data: first name, last name, company name;
  • contact data: e-mail address, phone number;
  • business data: VAT number, registered address;
  • technical data: IP address, browser type, device information, cookies;
  • correspondence data: content of messages sent via contact forms.

3.1 Performance of a contract

Legal basis: Article 6(1)(b) GDPR. We process data to fulfil orders, configure the DeviHouse system, provide technical support, and communicate with clients regarding the services provided.

Legal basis: Article 6(1)(c) GDPR. This includes issuing invoices, maintaining accounting records, and reporting to public authorities (e.g. dane.gov.pl) in accordance with Polish real estate developer regulations.

3.3 Legitimate interests of the controller

Legal basis: Article 6(1)(f) GDPR. We process data for handling enquiries, direct marketing of our own services, analysing and improving the quality of our website, and establishing or defending legal claims.

Legal basis: Article 6(1)(a) GDPR. Where processing is based on your consent (e.g. newsletter, analytical cookies), you have the right to withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

4. Recipients of Personal Data

Your data may be shared with the following categories of recipients:

  • hosting and IT infrastructure providers (including LH.pl, Gnome Cloud);
  • automation and CRM tool providers (including Airtable, n8n);
  • payment and accounting service providers;
  • public authorities — only to the extent required by law (including dane.gov.pl);
  • legal, tax, and advisory service providers.

We do not sell your personal data to third parties.

5. International Data Transfers

Some of our service providers (e.g. Airtable) may process data outside the European Economic Area. In such cases, we ensure an adequate level of data protection through standard contractual clauses approved by the European Commission or other mechanisms provided for under the GDPR.

6. Data Retention

We retain personal data for the period:

  • necessary to perform the contract, and thereafter for the period required by law (e.g. 5 years for accounting records);
  • until consent is withdrawn — where processing is based on consent;
  • until a valid objection is raised — where processing is based on legitimate interests;
  • for the duration of the limitation period for claims — for the purpose of establishing or defending legal claims.

7. Your Rights

In connection with the processing of your personal data, you have the following rights:

  • right of access to your data (Article 15 GDPR);
  • right to rectification of your data (Article 16 GDPR);
  • right to erasure (“right to be forgotten”) (Article 17 GDPR);
  • right to restriction of processing (Article 18 GDPR);
  • right to data portability (Article 20 GDPR);
  • right to object to processing (Article 21 GDPR);
  • right to withdraw consent at any time (without affecting the lawfulness of prior processing);
  • right to lodge a complaint with a supervisory authority — in Poland: Prezes Urzędu Ochrony Danych Osobowych (PUODO), ul. Stawki 2, 00-193 Warsaw.

To exercise any of the above rights, please contact us at: info@devihouse.com.

8. Cookies

The website devihouse.com uses cookies — small text files stored on your device. We use the following categories of cookies:

  • necessary — required for the website to function correctly, no consent needed;
  • analytical — allow us to analyse website traffic (e.g. Google Analytics) — require consent;
  • marketing — used to display personalised advertisements — require consent.

You can manage your cookie preferences via the cookie banner on our website or through your browser settings.

9. Data Security

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include SSL/TLS encryption, access controls, and regular data backups.

10. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy. Any changes will be published on this page with a new update date. In the case of significant changes, we will notify you by e-mail or through a prominent notice on the website.

11. Contact

For any questions regarding the protection of your personal data, please contact us:

  • e-mail: info@devihouse.com
  • address: MG Fotografia sp. z o.o., ul. Spacerowa 52, 43-445 Dzięgielów, Poland
  • VAT number: 5482767109
  • Polski
  • English