Privacy Policy

The data controller for personal data processed through this website is Welosi Ciwuce, with its registered address at Wielicka 42/B3, Kraków, Poland. You may contact us regarding data protection matters at: [email protected] or by post to the address above.

We collect personal data only when you voluntarily provide it to us. The specific categories of data we may collect include:

• Contact information: your name and email address, submitted through the contact form on this website.
• Message content: the text of any message you submit through the contact form.
• Technical data: IP address, browser type, operating system, referring URLs, and pages visited, collected automatically through server logs and cookies when you access the website.
• Cookie preference data: your recorded consent or refusal regarding non-essential cookies.

We do not collect sensitive personal data (special categories under Article 9 GDPR), financial account information, or data from individuals under the age of 16.

We process personal data on the following legal bases as specified in Article 6 GDPR:

• Consent (Art. 6(1)(a) GDPR): for non-essential cookies and any optional communications you have agreed to receive.
• Legitimate interests (Art. 6(1)(f) GDPR): for processing contact form submissions in order to respond to your inquiry, and for analysing website traffic to maintain and improve site functionality.
• Legal obligation (Art. 6(1)(c) GDPR): where processing is required to comply with applicable Polish or EU law.

Personal data collected through this website is used for the following purposes:

• To respond to inquiries submitted through the contact form.
• To maintain the security and technical operation of the website.
• To understand how visitors use the website, in aggregate and anonymised form where possible.
• To comply with legal obligations applicable to our operations in Poland.

We do not use your personal data for automated decision-making or profiling as defined in Article 22 GDPR.

We do not sell, rent, or trade personal data. We may share data with the following categories of third parties only where necessary:

• Hosting and infrastructure providers who process data on our behalf under data processing agreements compliant with GDPR Chapter V.
• Email service providers used to receive and manage contact form submissions.
• Competent public authorities or law enforcement bodies where disclosure is required by applicable law.

Any third party receiving personal data is required to process it only as instructed and in accordance with GDPR obligations.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Contact form submissions are retained for a period of up to 12 months following the date of submission, unless an ongoing correspondence or legal basis requires longer retention. Technical log data is typically retained for up to 90 days. Cookie preference records are retained for the duration of the cookie's validity period as described in our Cookie Policy.

As a data subject under the GDPR and Polish data protection law, you have the following rights:

• Right of access (Art. 15 GDPR): to obtain confirmation of whether we process your data and to receive a copy.
• Right to rectification (Art. 16 GDPR): to request correction of inaccurate personal data.
• Right to erasure (Art. 17 GDPR): to request deletion of your data in certain circumstances.
• Right to restriction (Art. 18 GDPR): to request that we restrict processing in certain circumstances.
• Right to data portability (Art. 20 GDPR): to receive your data in a structured, commonly used format.
• Right to object (Art. 21 GDPR): to object to processing based on legitimate interests.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days as required by Article 12 GDPR.

We implement appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. These measures include HTTPS encryption for all data transmitted between your browser and our website, restricted access to personal data within our organisation, and regular review of our security practices. No transmission over the internet is entirely secure; however, we take reasonable steps to protect the data we collect.

Where any service provider or infrastructure partner is located outside the European Economic Area, we ensure that appropriate safeguards are in place in accordance with Chapter V of the GDPR. These may include Standard Contractual Clauses approved by the European Commission, adequacy decisions, or other lawful transfer mechanisms. Details of specific transfers and the applicable safeguards are available upon request.

This website uses cookies. Full details of the cookies we use, their purposes, and how to manage your preferences are set out in our Cookie Policy. Essential cookies required for the website to function are placed without consent. Non-essential cookies are placed only with your prior consent, which you may withdraw at any time by adjusting your browser settings or contacting us.

If you believe that your personal data has been processed in a manner inconsistent with applicable data protection law, you have the right to lodge a complaint with the Polish supervisory authority: the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warsaw, Poland, website: uodo.gov.pl. You may also contact us directly to resolve any concerns before escalating to the supervisory authority.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the structure of the website. The date at the top of this page indicates when the policy was last revised. Where changes are material, we will take reasonable steps to notify users. We encourage you to review this policy periodically.