This Privacy Policy explains how Generation3 (“we”, “us”, “our”) collects, uses, and protects personal data when you use website available at https://timberhouse.is.

We respect your privacy and process personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

1. Data Controller

The controller of your personal data is:

GENERATION3
Address: Klonowa 8, 05-540 Zalesie Górne, Poland
Email: office@timberhouse.is
Data Protection Officer: Norbert Nowocin

2. What Data We Collect

We collect personal data only in the following cases:

a) Contact form

When you send us a message through the contact form, we may collect:

• your name,
• your email address,
• your phone number, if you provide it,
• the content of your message,
• technical data necessary to send and secure the form submission, such as IP address, date, and time.

b) Website analytics

When you visit the website, we may collect limited technical and statistical data, such as:

• IP address or shortened/anonymised IP address,
• browser type and version,
• operating system,
• device type,
• pages visited,
• time spent on the website,
• referral source,
• date and time of visit.

We use this data only to understand how the website is used, improve performance, and maintain security.

3. Purposes and Legal Bases for Processing

We process your personal data for the following purposes:

a) Responding to contact form messages

We process the data you provide in the contact form in order to respond to your inquiry and communicate with you.

Legal basis:

• our legitimate interest in handling correspondence and responding to inquiries,
• and/or taking steps at your request before entering into a contract, if your message relates to a potential order or cooperation.

b) Website analytics and security

We process limited technical data to measure website traffic, improve the website, detect technical problems, and protect the website against abuse.

Legal basis:

• our legitimate interest in operating, securing, and improving the website,
• or your consent, where required by law, especially if analytics cookies are used.

4. Is Providing Data Mandatory?

Providing data through the contact form is voluntary, but if you do not provide the required information, we may not be able to respond to your message.

Providing data for analytics is generally automatic when you use the website, subject to your browser settings and any cookie consent choices where applicable.

5. Recipients of Data

Your personal data may be shared only with trusted service providers that help us operate the website, such as:

• hosting provider,
• email provider,
• IT support provider,
• analytics provider, if used.

We require such providers to process data only on our instructions and in compliance with applicable law.

6. Transfers Outside the EEA

As a rule, we do not transfer your personal data outside the European Economic Area (EEA).

If we use tools or providers that transfer data outside the EEA, we will ensure that appropriate safeguards are in place, as required by law.

7. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected:

• contact form data — for the time needed to handle correspondence and, where relevant, for the period necessary to establish, exercise, or defend legal claims,
• analytics data — for the period necessary to prepare statistics, improve the website, and ensure security, or for the retention period configured in the analytics tool.

After that, data is deleted or anonymised, unless we are required by law to keep it longer.

8. Your Rights

You have the right to:

• request access to your personal data,
• request rectification of incorrect data,
• request erasure of your data,
• request restriction of processing,
• object to processing based on legitimate interest,
• request data portability, where applicable,
• withdraw your consent at any time, where processing is based on consent.

To exercise your rights, contact us at: office@timberhouse.is

You also have the right to lodge a complaint with the competent supervisory authority. If you are in Poland, this is the President of the Personal Data Protection Office (UODO).

9. Automated Decision-Making

We do not use your personal data for automated decision-making, including profiling, that produces legal effects or similarly significantly affects you.

10. Cookies

If the website uses cookies or similar technologies for analytics, additional information may be provided in a separate Cookie Policy or cookie banner.

11. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, loss, destruction, or unlawful processing.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The current version will always be available on this website, with the date of the latest update shown at the top.