Privacy policy of Hombee sp. z o.o.

Who is the controller of your data?

Hombee spółka z ograniczoną odpowiedzialnością with its registered office in Długołęka, ul. Modrzewiowa 4, 55-095 Długołęka, entered in the Register of Entrepreneurs of the National Court Register kept by the District Court for Wrocław-Fabryczna in Wrocław, 9th Commercial Division of the National Court Register under KRS number 0001113273, NIP: 8961640851, REGON: 529020800, with share capital of PLN 15,000.00, fully paid up.

What data do we collect?

We collect the minimum amount of personal data necessary to contact you, prepare an offer and, when you consent, send marketing emails, including:

1. First and last name
2. Email address
3. Phone number
4. Investment data (e.g. location, type of building)
5. The content and basic metadata of files that you voluntarily attach to an enquiry, such as designs, drawings, BIM/CAD files, documents, photographs or archives
6. Marketing consent evidence, including its scope, time, source, displayed notice version and Pipedrive synchronisation status
7. Google Ads click and campaign identifiers and the related session consent state, when applicable

For what purpose do we process your data?

The collected personal data is processed solely for the purpose of:

1. Contacting you to prepare an individual offer.
2. Sending the requested Hombee Home offer and, when selected, its limited 12-message follow-up series.
3. Sending the Hombee newsletter when you separately subscribe.
4. Measuring Google Ads conversions and, with your Google Ads consent, creating Customer Match audiences, remarketing and personalizing ads.
5. Performance of the contract.
6. Archiving correspondence related to the performance of the contract.

Legal basis for data processing

Processing necessary to answer an enquiry, prepare an offer or perform a contract is based on Article 6(1)(b) of the GDPR. Sending the 12-message Hombee Home series or the Hombee newsletter, using Google Ads advertising storage and submitted contact details for enhanced conversions, Customer Match, remarketing and ad personalization, and recording the related evidence is based on your consent under Article 6(1)(a) of the GDPR and the applicable electronic communications rules. You may withdraw consent at any time without affecting the lawfulness of earlier processing.

How long do we keep your data?

Files attached to a contact enquiry are stored in private cloud storage for up to 180 days and are then deleted automatically. Contract and enquiry data is stored for the period necessary to handle the request or perform the contract and afterwards for the period required by law, but no longer than 5 years. Google Ads click attribution stored in the browser is retained for up to 90 days after consent is granted. Customer Match membership is configured for up to 540 days and is refreshed while the related Pipedrive consent remains granted. Marketing contact data is used until consent is withdrawn or the limited Hombee Home series ends. Evidence of consent or withdrawal is then retained only for as long as necessary to demonstrate compliance or establish, pursue or defend legal claims.

With whom do we share your data?

Your data may be shared with carefully selected service providers that help us operate the Website, handle enquiries, protect against abuse, send consented marketing communications, and measure or personalize advertising. This includes Cloudflare as our website and infrastructure provider, Pipedrive as our customer relationship and email marketing system, and Google for consented Google Ads conversion measurement, Customer Match, remarketing and ad personalization, but only to the extent necessary for those purposes or when required by law.

Your rights

You have the right to:

1. access your data,
2. rectify incorrect data,
3. delete data,
4. restrict data processing,
5. object to data processing,
6. withdraw marketing consent or change the Google Ads consent for the current browser session at any time; requests concerning previously submitted contact data can be sent to the data protection contact below.

Cookies

Our website uses only the cookies needed for website and contact features by default. When the embedded third-party chat widget is loaded, an essential third-party cookie (`__cf_bm`) may be set for bot protection. This cookie cannot be disabled while chat is enabled. If you arrive from a Google Ads click identifier, we may show a consent banner for Google Ads measurement, remarketing, Customer Match audiences and ad personalization. Your approval or decline is stored in a first-party browser-session cookie (`hb_ads_consent`) that contains only `granted` or `denied`.

Embedded YouTube videos

The Website may embed videos from Hombee’s official channels on YouTube. We use the privacy-enhanced mode of the YouTube player (`youtube-nocookie.com`) to limit personalisation by YouTube. According to YouTube, viewing a video in this mode is not used to personalise the user’s YouTube experience or advertising shown outside our Website.

1. the external YouTube player is loaded only on pages where we have embedded a video,
2. after playing a video, going to YouTube, or interacting with the player, data may be processed by Google/YouTube in accordance with the rules of those services,
3. videos are embedded to present Hombee product and technical content without requiring users to leave the Website.

Google Ads consent mode and tag gateway

Website pages initialise a local Google consent queue with advertising storage, advertising user data and ad personalization denied by default and without making a Google Ads network request. To limit performance impact, the external tag is loaded only after a relevant signal, such as a recognised Google Ads visit, the first interaction with a lead form or chat, or an accepted enquiry. If advertising consent is declined or has not been resolved, Google Consent Mode may send cookieless, redacted measurement requests that do not use advertising cookies or include the email address or phone number submitted in a form. After approval, advertising storage, advertising user data and ad personalization are enabled for the session. An accepted form conversion may include the submitted email address and phone number as user-provided data for Google Ads enhanced conversions for web, and normalized, hashed contact details may be used to create Customer Match audiences for remarketing and personalized ads. Tag and measurement requests are routed through Hombee’s Cloudflare Google Tag Gateway endpoint (`/metrics`). Offline conversion measurement is a separate server-side process and uses only attribution data collected with advertising consent. Review or change your Google Ads consent.

1. ordinary page views without a recognised Google Ads visit, lead-form or chat interaction, accepted enquiry, or earlier approval do not load the external Google Ads tag,
2. declining stores a session-only decline cookie, prevents advertising storage, advertising user data and ad personalization from being used, and may still allow cookieless, redacted measurement requests,
3. Google Ads tag and measurement requests are sent to Hombee’s domain first and are processed by Cloudflare Google Tag Gateway before being forwarded to Google.

Data security

We apply appropriate technical and organisational measures to protect your data against loss, destruction, disclosure to unauthorised persons and other forms of unlawful processing.

Changes to the privacy policy

We reserve the right to change this Privacy Policy. We will inform you of any changes through a notice on the website.