Legal

Privacy policy.

In short: there are no accounts, no newsletter and no shop. We collect data only when you send the quotation form yourself, and we use it only to answer you. Beyond that we measure site traffic with Google Analytics. Details below. Last updated: 8 October 2026.

1. Who the data controller is

The controller of your personal data is PIOTR SULIGA Domino Meble, Rudka 39, 33-122 Rudka, Poland, VAT ID (NIP) 7722127802, business register number (REGON) 361731132.

Veranto Studio is the brand under which this company makes bespoke furniture. The verantostudio.pl website belongs to it.

For anything concerning personal data, write to dominomeble@op.pl. We have not appointed a data protection officer, so please contact the controller directly.

2. What we collect

From the quotation form: your email address, phone number, the location of the project, a description of it, and optionally a preferred timeframe and approximate budget. We also record that you ticked the required consent box, and which language version you wrote in.

Attachments, if you add them: photographs, floor plans, drawings, visualisations or PDF files, including their contents. We do not ask for sensitive data - please do not put information about health, beliefs or other special categories into the description or the files.

Automatically, on every visit: IP address, browser type and language, device and operating system, pages visited, time on page, referring address, and an approximate location derived from the IP address. This goes into server logs and into the tools described in section 5.

There are no user accounts, no sign-in, no newsletter and no comments. We store no passwords. We do not sell your data and we do not profile you for automated decision-making.

3. Why, and on what legal basis

Handling your enquiry: preparing an answer, contacting you and any follow-up. The basis is taking steps at your request before entering into a contract, together with your consent (Art. 6(1)(b) and (a) GDPR). Providing the data is voluntary, but without an email address or phone number we have no way to reply.

Protecting the site against abuse and spam, and keeping it running securely: our legitimate interest (Art. 6(1)(f) GDPR).

Visit statistics and measuring how the site performs: your consent as expressed through your browser settings, together with our legitimate interest in understanding site traffic (Art. 6(1)(a) and (f) GDPR). Section 5 explains how to switch this off.

Defending against claims and meeting tax obligations, should the enquiry become a commission: Art. 6(1)(c) and (f) GDPR.

4. Who receives the data

Netlify, Inc. (USA) - our hosting provider. It serves every request to the site, keeps server logs, and stores a copy of each form submission in its dashboard (the form fields and the names of any attached files, not their contents). We keep that copy so an enquiry is not lost if email delivery fails.

Google Ireland Limited - Google Analytics and Google Tag Manager, used only for visit statistics. Google may also process data outside the European Economic Area.

Google (Gmail) - the provider of the mailbox that receives your enquiry and its attachments.

If an external counter limiting the number of submissions (Upstash) is enabled in production, it receives only a short-lived key containing the IP address - no form contents and no attachments.

Beyond this, data may be disclosed to bodies we are legally obliged to disclose it to. We pass it to no one for marketing purposes and we do not resell it.

5. Cookies and traffic measurement

preferredLocale - our own cookie, written only after you choose a language or dismiss the language suggestion. It holds nothing but the code pl or en, lasts a year, and only remembers which language version you prefer.

Google Analytics - the _ga and _ga_* cookies set through Google Tag Manager. They recognise a returning browser so that visits can be counted and we can see which pages are read. We do not connect this to the contents of your enquiry. Google's terms: policies.google.com/privacy.

Netlify Real User Metrics - measures how fast pages load. It stores no cookies and nothing in your browser.

Our code uses neither localStorage nor sessionStorage. There is no advertising, no remarketing, no social pixels and no third-party CAPTCHA.

You control cookies in your browser: you can block them, delete them, or browse privately. Chrome, Firefox, Safari and Edge all document how. Blocking the analytics cookies does not limit the site; blocking all of them only means we will not remember your chosen language. You can also switch off Google statistics with the Google Analytics Opt-out add-on.

6. How long we keep it

Correspondence and the materials from the form are kept while we are handling your enquiry. If it does not lead to a commission, we delete them at the latest 12 months after the last contact.

If it does lead to a commission, we keep the documentation for as long as tax law requires and for as long as claims could still be brought.

Server logs and statistics are retained according to the providers' settings and used only in aggregate.

7. Transfers outside the European Economic Area

Netlify and Google are established in, or run infrastructure in, the United States, so your data may be processed there. This happens on the basis of Standard Contractual Clauses approved by the European Commission and of the adequacy decision for the EU-US Data Privacy Framework.

8. Your rights

You have the right to access your data, to have it corrected or erased, to restrict processing, to data portability, and to object to processing based on our legitimate interest.

You may withdraw any consent you gave us at any time. That does not affect the lawfulness of what we did before.

To exercise these rights, write to dominomeble@op.pl. We reply without undue delay and within one month at the latest.

You also have the right to lodge a complaint with the Polish supervisory authority: Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland.

9. Security

The site is served only over encrypted HTTPS, with HSTS enforced and a content security policy limiting what the browser is allowed to load.

The form is protected by a hidden honeypot field, a check on how quickly it was filled in, and a limit on submissions from one IP address. None of this involves a third-party CAPTCHA, so nothing about your behaviour on the page is sent to anyone.

Only the people running the company have access to the enquiry mailbox and to the hosting dashboard.

10. Changes to this policy

If what we do with data changes, we will update this document and change the last-updated date shown at the top of the page. The current version is always available at this address.

Veranto Studio · Across Europe