Privacy policy.
This is a translation. If there is any discrepancy, the Polish version prevails.
Data controller
The controller of your personal data is GSP Sp. z o.o., registered office: ul. Janiszowska 25 lok. 9, 02-264 Warszawa, Poland, KRS 0000668268. For any data protection matter, write to biuro@hmodular.com.
What data we process and why
When you send the contact form, we process your name, phone number, email address and any information you choose to include in your enquiry, in order to answer your question, discuss your project or arrange a visit. The legal basis is Art. 6(1)(b) GDPR (steps taken before entering into a contract). Technical data needed to keep the site secure is processed under Art. 6(1)(f) GDPR (our legitimate interest). Optional analytics and marketing tools are activated only with your consent (Art. 6(1)(a) GDPR). You can withdraw consent in the cookie settings.
How long we keep data
We keep enquiry data for as long as needed to correspond with you and agree on any further cooperation, and then until any possible claims become time-barred. Data processed on the basis of consent is kept until you withdraw it; your cookie choice expires after 12 months. Security logs are kept for as long as necessary to protect the site.
Recipients and transfers
Your data may be accessed by providers of services needed to run the site and handle messages: Replit (hosting), Resend (sending form messages), the email provider for biuro@hmodular.com, and Cloudflare (abuse protection). Google may receive data only if we activate Google tools and you give the relevant consent. Where data is transferred outside the EEA, we use appropriate safeguards, in particular the adequacy decision under the EU-US Data Privacy Framework or standard contractual clauses.
Recruitment
If you apply through the “Careers” form, we process the data from the form and your CV to run the recruitment process. Data within the scope of Art. 22¹ of the Polish Labour Code is processed under Art. 6(1)(c) GDPR, and any other data you provide voluntarily is processed on the basis of your consent (Art. 6(1)(a) GDPR), which you give by sending the application. If you agree to take part in future recruitment, we keep your data for 12 months. Otherwise we delete it once the recruitment is completed. Your CV file goes only to our email inbox and is not stored on the website server.
Your rights
You have the right to access, rectify and erase your data, to restrict processing, to data portability, and to object to processing based on legitimate interest. You can withdraw consent at any time without affecting the lawfulness of earlier processing. To exercise your rights, write to biuro@hmodular.com. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland or with the supervisory authority in your country of residence.
Voluntary provision and security
Providing data in the form is voluntary, but your name, phone number and email address are needed to send an enquiry. We do not make decisions about you based solely on automated processing. We use appropriate technical and organisational measures to protect your data.
Last updated: 2026.