Last updated: 6 November 2026. This is a translation; in case of any discrepancy, the Polish version prevails.
1. Controller
The controller of personal data processed in connection with the use of bluntrenders.eu is Blunt Renders 3D Studio spółka z ograniczoną odpowiedzialnością (a Polish limited liability company), registered office: Al. Jerozolimskie 81 lok. 7.10, 02-001 Warsaw, Poland, entered in the Register of Entrepreneurs of the National Court Register under KRS number 0001261378, NIP (tax ID) 7011328104, REGON 545513111 (the “Controller”).
For any matter relating to personal data, the Controller can be contacted at biuro@bluntrenders.eu or in writing at the registered office address.
2. Data we process
- data provided in the enquiry form: name or company name, e-mail address, telephone number (if provided), project description and uploaded files (3D models, photographs, archives);
- data contained in e-mail correspondence and telephone conversations;
- data necessary to conclude and perform a contract, including invoicing details and the delivery address;
- technical data: the IP address recorded in the server logs of the hosting provider, and a one-way hash of the IP address used solely to limit the number of enquiries sent from a single address.
3. Purposes and legal bases
- replying to an enquiry and preparing a quotation — Article 6(1)(b) GDPR (steps taken at the request of the data subject prior to entering into a contract) and, for persons acting on behalf of businesses or institutions, Article 6(1)(f) GDPR (the Controller’s legitimate interest in conducting business correspondence);
- concluding and performing a contract — Article 6(1)(b) GDPR;
- compliance with legal obligations, in particular tax and accounting obligations — Article 6(1)(c) GDPR;
- ensuring the security of the website and protecting it against abuse, including mass submission of enquiries — Article 6(1)(f) GDPR;
- establishing, exercising or defending legal claims — Article 6(1)(f) GDPR.
GDPR means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
4. Voluntary provision of data
Providing data is voluntary. A name or company name, an e-mail address and a project description are necessary for us to reply to an enquiry. Invoicing details are necessary to conclude a contract.
5. Retention
- enquiries submitted through the form, together with uploaded files — 180 days from receipt or, where a contract is concluded, for the duration of its performance and thereafter until the limitation period for claims expires;
- accounting documents — for the period required by tax and accounting law, as a rule 5 years from the end of the calendar year in which the tax payment deadline passed;
- the IP address hash used to limit enquiries — no longer than 24 hours;
- server logs — for the period set by the hosting provider.
Enquiries and files older than 180 days that are not related to a concluded contract are deleted automatically.
6. Recipients
Data may be disclosed only to entities that support the Controller in running its business, under agreements concluded with them and only to the extent necessary, in particular:
- the hosting and e-mail service provider (LH.pl), on whose servers the website, uploaded files and correspondence are stored;
- providers of accounting services;
- courier companies — to the extent necessary to deliver an order.
Data may be disclosed to public authorities where required by law.
7. Transfers outside the European Economic Area
The Controller does not transfer personal data to countries outside the European Economic Area or to international organisations.
8. Your rights
- access to your data and a copy of it (Article 15 GDPR);
- rectification (Article 16 GDPR);
- erasure (Article 17 GDPR);
- restriction of processing (Article 18 GDPR);
- data portability (Article 20 GDPR);
- objection to processing based on the Controller’s legitimate interest (Article 21 GDPR).
To exercise these rights, contact the Controller at biuro@bluntrenders.eu. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland).
9. Automated decision-making
The Controller does not make decisions by automated means and does not use profiling.
10. Cookies and browser storage
The website does not use cookies or any analytics, advertising or tracking tools. It does not load resources from third parties — all files, including fonts, are served from the Controller’s server.
If you switch the display mode (light or dark), your choice is saved in your browser’s local storage (localStorage) solely to keep the setting on later visits. It contains no personal data, is not sent to the Controller and can be deleted in your browser settings.
11. Changes
The Controller may update this privacy policy, in particular following changes in the law or in how the website works. The current version is always available on this page.