SAUNARI · finnishsauna.co.uk
Privacy and cookie policy
Effective from 18 October 2026
1. Who is the controller of your data
The controller of the personal data collected on finnishsauna.co.uk is BIELECKI GROUP BRUKMONTAŻ DOMY SZKIELETOWE Sp. z o.o., registered office: Al. Tysiąclecia 6, 21-500 Biała Podlaska, Poland, entered in the Polish National Court Register (KRS) under no. 0001195419, tax ID (NIP) 5372691397, REGON 542766389. SAUNARI is a Bielecki Group brand.
For anything concerning your personal data, email contact@bieleckigroup.com, call +48 728 001 100 or write to our registered office. We have not appointed a data protection officer — we are not required to.
2. What data we process, why, and for how long
Replying to your enquiry (form, e-mail, phone)
- Data: name, e-mail address, phone number, the content of your message and any details you choose to give (e.g. location, floor area, chosen model).
- Legal basis: Art. 6(1)(b) GDPR (steps taken at your request before entering into a contract) and Art. 6(1)(f) GDPR (our legitimate interest in answering correspondence).
- Retention: up to 12 months after our last contact. If we sign a contract — for its duration and then until the limitation periods for claims and our tax and accounting obligations expire.
Visitor statistics — Google Analytics 4 (only with consent)
- Data: cookie identifiers, device and browser type, approximate location (country, region), pages visited, traffic source and on-page events (e.g. submitting a form, tapping a phone number or e-mail address). Google Analytics 4 does not store full IP addresses.
- Legal basis: your consent — Art. 6(1)(a) GDPR and Art. 5(3) of the ePrivacy Directive as implemented in national law (in Poland: Art. 399 of the Electronic Communications Law).
- Retention: we keep data in Google Analytics for no longer than 14 months.
Security and operation of the site
- Data: IP address, date and time, page address, browser type — in server logs.
- Legal basis: Art. 6(1)(f) GDPR (site security, abuse detection).
- Retention: for the log retention period set by our hosting provider.
Establishing, pursuing and defending legal claims
- Data: data listed above, to the extent necessary.
- Legal basis: Art. 6(1)(f) GDPR.
- Retention: until the limitation periods expire.
Providing data is voluntary, but without contact details we cannot reply to your enquiry. We do not make decisions about you based solely on automated processing.
3. Cookies and the consent banner (Consent Mode v2)
On your first visit we ask for consent in a banner. Until you give it, Google Analytics neither store nor read any cookies. Google tags then run in Consent Mode v2: they may send Google signals without identifiers (cookieless pings), which Google uses to estimate statistics in aggregate.
| Type | What is stored | Provider | Duration | Consent |
|---|---|---|---|---|
| Strictly necessary | bg_consent_v1 (localStorage) — your choice in the banner | us | 12 months | not required |
| Analytics | _ga, _ga_<ID> | Google Analytics | up to 2 years | yes |
Changing your mind: use the “Cookie settings” link in the footer or the round icon in the bottom-left corner. Withdrawing consent does not affect the lawfulness of processing before the withdrawal. You can also delete cookies in your browser settings.
Fonts on this site are loaded from Google Fonts servers (fonts.googleapis.com, fonts.gstatic.com). Your browser then sends its IP address to Google; Google Fonts does not set cookies. Legal basis: Art. 6(1)(f) GDPR (consistent appearance of the site).
4. Who receives your data
We share data only with providers who help us run the site, under data processing agreements or their terms of service:
- Hosting and e-mail: ADMIN.NET.PL Tomasz Rzepka, Arkadiusz Nowara S.C. (MyDevil.net), ul. Bitwy pod Monte Cassino 5/198, 33-100 Tarnów, Poland.
- Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland — Google Analytics (as a processor) and Google Fonts.
- Shopify International Limited, Dublin, Ireland — the trade enquiry form is delivered to the saunari.eu shop, which runs on Shopify; images on this site are served from Shopify servers (cdn.shopify.com).
- Public authorities — only where the law requires it.
Transfers outside the EEA: some providers (incl. Google LLC, Vimeo, FormSubmit) may process data in the USA or other countries outside the European Economic Area. Such transfers rely on a European Commission adequacy decision (EU–US Data Privacy Framework — for certified companies) or on standard contractual clauses approved by the Commission.
5. Your rights
You have the right to access your data, to rectification, erasure, restriction of processing and data portability, to object to processing based on our legitimate interest, and to withdraw consent at any time. Email contact@bieleckigroup.com — we will reply within one month.
You may also lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (UODO) (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl), or with the supervisory authority in the country where you live or work.
Users in the United Kingdom may complain to the Information Commissioner’s Office (ICO), ico.org.uk.
6. Changes
If we change how we process data (for example by adding a new tool), we will update this page and the date at the top.