Skip to content

Office:Mon–Fri 7:00–18:00 · Sat 7:00–12:00

Plant: Jakubowice 76, 32-100 Proszowice

Betoniarnia Jakubowice
+48 663 651 167Quote and order
Menu

+48 663 651 167

Office: Mon–Fri 7:00–18:00 · Sat 7:00–12:00

PolskiУкраїнська

Quote and order

Privacy policy

This policy explains what personal data we process in connection with the betoniarka.eu website, the quote form and contact by phone and e-mail, for what purposes and for how long we keep it, and what rights you have.

Who is the controller of your data?

The controller of your personal data is Zbigniew Kubik „Firma Kubik”, address as entered in CEIDG (the Polish business register): Mniszów 5, 32-120 Mniszów, Poland, tax ID (NIP) 682-100-76-44, REGON 350913761. Betoniarnia Jakubowice is the controller’s brand; the production plant operates at Jakubowice 76, 32-100 Proszowice. The same controller is responsible for data relating to the sale of concrete, the sale of aggregates and earthworks.

For matters relating to personal data, write to biuro@betoniarka.eu, call +48 663 651 167 or send a letter to our office address: Mniszów 5, 32-120 Nowe Brzesko.

The controller has not appointed a data protection officer.

Quote form

The quote and order form is used to send an enquiry about concrete and delivery. Your phone number and the town or municipality of the site are required — without them we cannot contact you about your enquiry or check the delivery conditions. The other fields are optional: name, e-mail address, planned date, quantity of concrete in m³, application or concrete class, information about a pump and notes on access. We add the date and time of sending and an enquiry number to each enquiry.

We use the data from the form to respond to your enquiry, prepare a quote and agree the delivery conditions and, if you place an order, to fulfil it. The legal basis for the processing is taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR).

We store the enquiry in a database on the server that runs the website and send its content by e-mail to the company’s main mailbox, biuro@firmakubik.pl. The notification contains the form fields and the enquiry number. If you give your e-mail address, a reply to the notification will go directly to you.

The form has a hidden field that people cannot see — we treat enquiries with this field filled in as automated spam and do not store them. On the server, we limit the number of enquiries that can be sent from a single IP address. We do not store the IP address in the enquiry.

The form is also protected against spam by the Cloudflare Turnstile service. On the page with the form, your browser downloads the Turnstile script from Cloudflare’s servers, and Cloudflare checks whether the form is being filled in by a human — on the basis of the IP address, browser and connection data (e.g. the User-Agent header) and the results of short tests run in the browser. We send the result of the check (a one-time code) together with the form and verify it with Cloudflare before saving the enquiry, also passing on your IP address. The form cannot be sent without JavaScript — in that case, please call our office. The legal basis is our legitimate interest in protecting the form against spam and abuse (Article 6(1)(f) GDPR).

Phone and e-mail

When you call our office or production, or write to biuro@betoniarka.eu, we process the data you give us: your phone number, first name and surname, e-mail address, the content of your message and information about the site and the order. We use this data to reply, prepare a quote and fulfil the order (Article 6(1)(b) GDPR) and, when you contact us on behalf of a company, on the basis of our legitimate interest, which is handling enquiries and working with customers (Article 6(1)(f) GDPR).

Messages sent to addresses in the betoniarka.eu domain are forwarded automatically to the company’s main mailbox, biuro@firmakubik.pl, and we reply from there.

If you enter into a contract with us, we keep the data needed to settle it, e.g. on the invoice, for the period required by tax and accounting law (Article 6(1)(c) GDPR).

Visitor statistics (Umami)

We count visits to the website with Umami, a tool installed on our server — the data is not passed to any external analytics company. Umami does not use cookies. It collects the host name, the address of the page visited (including parameters) and its title, the address of the page you came from, the type of browser, operating system and device, screen resolution, language, and the country, region and city determined from the IP address. It does not store the IP address; it recognises a session by a hash of the IP address, browser data (User-Agent) and the website identifier, with a cryptographic salt that changes every month. We also count clicks on the phone number on the website and views of the thank-you page after a form is sent — without any data from the form. Page addresses do not contain personal data; the calculator result passed to the form is only the quantity of concrete and the type of element.

The Umami script reads the umami.disabled setting in the browser storage, which allows the measurement to be switched off. The statistics help us assess which information visitors use and whether the website works properly — this is our legitimate interest (Article 6(1)(f) GDPR).

Server logs and security

Each time the website is visited, the server receives technical data: the IP address, the address of the requested page and information about the browser. The server uses this data to display the page and to protect it against abuse — in our legitimate interest (Article 6(1)(f) GDPR). The website application records only technical events in its logs, e.g. a failed attempt to save an enquiry, without personal data. The intermediary server (proxy) on our server does not keep access logs, so it does not record visitors’ IP addresses.

Traffic to the website passes through the Cloudflare network, which delivers the website to visitors and protects it against attacks, e.g. overload and floods of requests to the form. Cloudflare receives the technical data of each request — the IP address, the address of the requested page and information about the browser — and processes it on our behalf. The legal basis is our legitimate interest in the secure and efficient operation of the website (Article 6(1)(f) GDPR).

Cookies and external services

The website does not set cookies. The only resource it loads from servers of external companies is the Cloudflare Turnstile script on pages with the quote form (described in the section on the form) — it does not load any other scripts, fonts or resources from outside. We do not embed maps, videos or social media plug-ins — the website contains only ordinary links, e.g. to Google Maps, to our Google Business Profile and to our social media profiles. An external service receives your data only when you click such a link, and processes it in accordance with its own rules.

When the website is under attack, Cloudflare may check your browser before displaying the page and store a technical cookie, cf_clearance, in it to confirm that the check was passed. This cookie is necessary to protect the website, is not used for tracking or advertising and expires after 30 minutes.

If you choose a language version of the website or close the suggestion of another language version, we save this choice in your browser’s storage (localStorage) so that the suggestion is not shown again. This information is not sent to us or to anyone else; you can delete it by clearing the website data in your browser.

Who do we share data with?

We share data only with entities that process it on our behalf under a data processing agreement (Article 28 GDPR):

  • the provider of the server that runs the website, the enquiry database and the Umami statistics: OVH Sp. z o.o., ul. Swobodna 1, 50-088 Wrocław, Poland — server in a data centre in Poland;
  • Resend (Plus Five Five, Inc., USA) — sending e-mail notifications about enquiries from the form;
  • Cloudflare (Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA) — the network through which traffic to the website passes (delivery and protection of the website), protection of the form against spam (Turnstile) and forwarding of e-mail sent to addresses in the betoniarka.eu domain to the office mailbox (Email Routing);
  • MyDevil — former mailboxes in the betoniarka.eu domain, used until 5 October 2026, with earlier correspondence kept until it is deleted: ADMIN.NET.PL Tomasz Rzepka Arkadiusz Nowara S.C., ul. Bitwy pod Monte Cassino 5/198, 33-100 Tarnów, Poland;
  • Microsoft (Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland) — the office mailbox in Microsoft 365 (biuro@firmakubik.pl), which receives enquiry notifications and e-mail sent to addresses in the betoniarka.eu domain;
  • the provider of storage for backups kept off the server: OVH Sp. z o.o. — data storage (Object Storage) in a data centre in Poland;
  • an external IT administrator — technical support for the server and the mailboxes.

Authorised persons who handle enquiries and orders have access to the data, as does an external IT administrator who looks after the server and the mailboxes under a data processing agreement.

Cloudflare also uses the data collected by Turnstile as an independent controller — to improve bot detection — in accordance with the rules described in the Turnstile privacy policy.

Transfers of data outside the European Economic Area

Resend sends messages from servers in Ireland (region eu-west-1), but stores account data, logs and message metadata in the USA; it also stores the content of sent messages. This is why the notification contains only the data our office needs. Data is transferred to the USA under the data processing agreement (DPA) concluded with Resend, which contains standard contractual clauses and refers to the EU-U.S. Data Privacy Framework. You can obtain a copy of these safeguards by contacting us.

Cloudflare processes data in data centres around the world, including outside the European Economic Area, among others in the USA. The transfer takes place under the data processing agreement (DPA) with Cloudflare, which contains standard contractual clauses, and under the EU-U.S. Data Privacy Framework, in which Cloudflare, Inc. participates. You can also obtain a copy of these safeguards by contacting us.

Microsoft stores and processes the office mailbox data within the EU Data Boundary, i.e. in data centres in the European Union. In limited cases, e.g. for technical support or to protect the security of the service, data may be transferred to the USA — under the data processing agreement (DPA) with Microsoft, which contains standard contractual clauses, and under the EU-U.S. Data Privacy Framework, in which Microsoft Corporation participates.

How long do we keep data?

  • Enquiries from the form — 3 years from the date they were sent; after that we delete them automatically.
  • Backups of the enquiry database — we make them every day and keep them on the server and off the server for 3 years from the date each backup was made, and then delete them. An enquiry deleted from the database remains in backups made earlier until those backups are deleted.
  • Enquiry notifications and other correspondence in the office mailbox (including the former mailboxes at MyDevil) — 1 year from receipt of the message, after which we delete them.
  • Data held by Resend — 30 days from sending the message (content, metadata and logs); Resend then deletes it.
  • Technical data at Cloudflare — for the short time needed to deliver the website, forward e-mail and protect against abuse, in accordance with Cloudflare’s rules (log of forwarded messages — up to 30 days); we do not store it on our server.
  • Umami statistics — 13 months, after which we delete them.
  • Data from sales documents — for the period required by tax and accounting law.

Your rights

You have the right to:

  • access your data and obtain a copy of it (Article 15 GDPR);
  • rectification of your data (Article 16 GDPR);
  • erasure of your data (Article 17 GDPR);
  • restriction of processing (Article 18 GDPR);
  • portability of the data we process in order to enter into or perform a contract (Article 20 GDPR);
  • object to processing based on our legitimate interest, e.g. visitor statistics (Article 21 GDPR).

To exercise these rights, contact us — our contact details are given at the beginning of this policy. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa, Poland, if you believe that we process your data unlawfully.

Do we make automated decisions?

No. We do not make decisions based solely on automated processing, including profiling, that would produce legal effects concerning you or similarly significantly affect you (Article 22 GDPR).

Changes to this policy

If we change the way we process data, we will update this policy. This policy is effective from 5 October 2026.

Call: +48 663 651 167Quote