Privacy Policy

Effective from: 16 September 2026

Data Controller

Your Rights (GDPR)

• Right of access – you may obtain a copy of your data
• Right to rectification – you may correct inaccurate data
• Right to erasure – you may request deletion of your data
• Right to restriction of processing
• Right to data portability
• Right to object to processing for marketing purposes
• Right to lodge a complaint with the President of the Polish Data Protection Authority (uodo.gov.pl)

Personal Data and Privacy

1. Contact form

Purpose: Handling your enquiry and establishing contact

Legal basis: Consent (Art. 6(1)(a) GDPR) and steps prior to entering into a contract (Art. 6(1)(b) GDPR)

Scope: E-mail address, first name, phone number (optional)

Retention: Until the correspondence ends, then up to 3 years (limitation of claims)

2. Website analytics (Google Analytics / GTM)

Purpose: Traffic analysis and content optimisation

Legal basis: Consent given via the cookie banner (Art. 6(1)(a) GDPR)

Scope: Anonymised IP address, browser, visit duration

Retention: Until cookies expire (up to 24 months)

3. Advertising and remarketing (Google Ads)

Purpose: Displaying personalised advertising

Legal basis: Consent (Art. 6(1)(a) GDPR)

Scope: Cookies, browsing history

Retention: Up to 540 days

4. E-mail correspondence and business contacts

Purpose: Conducting correspondence, handling commercial enquiries, and concluding and settling contracts

Legal basis: Performance of a contract or steps prior to entering into it (Art. 6(1)(b) GDPR), legal obligations including tax and accounting duties (Art. 6(1)(c) GDPR), and the legitimate interest of the controller in business contact and the possible pursuit of claims (Art. 6(1)(f) GDPR)

Scope: Full name, e-mail address, phone number, job title, company details, content of the correspondence

Retention: For the duration of the correspondence and thereafter until claims become time-barred; accounting records are kept for 5 years from the end of the tax year

Cookies

Type	Purpose	Retention
Essential	Core website functionality	Session
Analytics	Google Analytics — traffic analysis	24 months
Marketing	Google Ads — remarketing	540 days
Consent	Storing your consent choices	365 days

Data Recipients

Service	Provider	Transfer outside the EU
Hosting	cyber-folks.pl	No
Analytics	Google Analytics (Google LLC)	Yes (GDPR safeguards in place)
Advertising	Google Ads (Google LLC)	Yes (GDPR safeguards in place)

Security

• SSL/TLS encryption
• Secure hosting (cyber-folks.pl)
• Restricted access to data
• Regular backups

Contact

Changes to this Policy

This policy may be updated. Last updated: 16 September 2026.