Privacy policy

§ 1. Data controller

The controller of personal data is Lilia Elżbieta Kruk, Marcin Kruk spółka jawna, registered office in Kraków, ul. Grzegórzecka 14 lok. LU1, 31-530 Kraków, KRS 0000108544, NIP 676-003-11-33 (“Lilia”). Contact on personal data matters: [email protected], tel. +48 12 421 24 80.

This policy covers the lilia-krakow.pl website, the contact form, contact forms in Google Ads adverts and correspondence sent to addresses in the @liliakrakow.pl domain.

§ 2. What data we process and why

• Contact form: name, telephone number and, optionally, e-mail address and message, preferred way of contact and timing. Purpose: to call you back and prepare the funeral service.
• E-mail and telephone conversations: the data you give us. Purpose: to reply and provide the service.
• Cookies and similar technologies: information about your device, browser, the pages you visit and how you reached the site. Purpose: traffic statistics and measuring the effectiveness of adverts, only to the extent of the consent given in the banner.

§ 3. Legal basis

• steps taken at your request before entering into a contract, and performance of the contract (Article 6(1)(b) GDPR);
• legal obligations, for example tax and accounting (Article 6(1)(c) GDPR);
• Lilia’s legitimate interest, that is replying to your message and pursuing any claims (Article 6(1)(f) GDPR);
• consent to analytics and advertising cookies (Article 6(1)(a) GDPR), which you may withdraw at any time.

§ 4. How long we keep data

We keep data from the form and correspondence for as long as needed to reply and deal with the matter. If a contract is concluded, data needed for accounting are kept for the period required by tax and accounting law, and other data until any claims become time-barred. Data from cookies are kept for the period set in the tools described in § 6.

§ 5. Recipients of data

Data may be received by providers who, on Lilia’s behalf, supply services needed to run the website and handle enquiries:

• Cloudflare, Inc. (website hosting and handling of the form);
• Resend (sending messages from the form to Lilia’s mailbox);
• Google Ireland Limited (Google Analytics and Google Ads);
• Microsoft Ireland Operations Limited (Microsoft Clarity);
• the provider of the contact widget and consent banner;
• providers of e-mail, IT and accounting services, and the advertising agency working for Lilia.

Some of these providers also process data in the United States. Such transfers are based on the European Commission’s adequacy decision (EU-US Data Privacy Framework) or on standard contractual clauses approved by the Commission.

§ 6. Cookies and measurement

On your first visit the site shows a banner in which you can accept all categories of cookies, reject them or choose only some. Without consent the site does not set analytics or advertising cookies.

• Necessary: remembering your choice in the banner and running the form.
• Analytics: Google Analytics 4 (statistics on visits and use of the site), statistics from the contact widget (page, source of the visit, type of device, time, use of the contact buttons) and Microsoft Clarity (a record of mouse movements, scrolling and clicks on the site).
• Advertising: Google Ads, that is conversion measurement (for example clicks on the telephone number and form submissions), remarketing and enhanced conversions. With enhanced conversions Google receives a hash (SHA-256) of the e-mail address or telephone number entered in the form.

§ 7. Security

The website and the form use an encrypted connection (HTTPS). Only people authorised by Lilia and providers processing data on its behalf have access to the data.

§ 8. Your rights

Everyone has the right to:

• access their data and receive a copy;
• rectification, erasure or restriction of processing;
• data portability;
• object to processing based on legitimate interest;
• withdraw consent at any time;
• lodge a complaint with the President of the Personal Data Protection Office (UODO).

Please send requests to [email protected]. Giving your data in the form is voluntary, but without a telephone number we cannot call you back.