Privacy policy
This is a translation. If there is any discrepancy, the Polish version prevails.
The controller of your personal data is GSP Sp. z o.o., registered office: ul. Janiszowska 25 lok. 9, 02-264 Warszawa, Poland, KRS 0000668268. Contact for data protection matters: biuro@hmodular.com.
1. Purposes and legal bases
We process data from the contact form to reply to your enquiry, arrange a visit or prepare an offer (Art. 6(1)(b) and (f) GDPR). If we work together, we process data to conclude and perform the contract (Art. 6(1)(b) GDPR) and to meet legal obligations, for example tax obligations (Art. 6(1)(c) GDPR). Analytics and marketing tools are activated only with your consent (Art. 6(1)(a) GDPR).
2. Recipients
Your data may be received by the IT service providers we use: Replit (hosting), Resend (sending form messages), Proton Mail (email), Cloudflare (abuse protection) and Google, if you consent to analytics tools. When data is transferred outside the EEA, we rely on standard contractual clauses or the adequacy decision under the EU-US Data Privacy Framework.
3. Recruitment
If you apply through the “Careers” form, we process the data from the form and your CV to run the recruitment process. Data within the scope of Art. 22¹ of the Polish Labour Code is processed under Art. 6(1)(c) GDPR, and any other data you provide voluntarily is processed on the basis of your consent (Art. 6(1)(a) GDPR), which you give by sending the application. If you agree to take part in future recruitment, we keep your data for 12 months. Otherwise we delete it once the recruitment is completed. Your CV file goes only to our email inbox and is not stored on the website server.
4. Retention
We keep enquiry data for as long as we correspond with you, and then until any possible claims become time-barred. Contract-related data is kept for the period required by tax and accounting law. Data processed on the basis of consent is kept until you withdraw it; your cookie choice is stored for 12 months.
5. Your rights
You have the right to access, rectify and erase your data, to restrict processing, to data portability and to object. You can withdraw consent at any time without affecting the lawfulness of earlier processing. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland or with the supervisory authority in your country of residence. Providing data in the forms is voluntary but necessary for us to reply. We do not make decisions based solely on automated processing.
Last updated: 2026.