Privacy Policy

We collect personal data in the following categories, depending on how you interact with our website:

Contact enquiry data: When you submit a message through our contact form, we collect your full name, email address, the subject of your message, and the content of your message.

Technical and usage data: When you visit our website, we may collect data about your browser type, operating system, IP address, referring URL, pages visited, and the date and time of your visit. This data is collected through cookies and similar tracking technologies, subject to your consent preferences as set in our cookie consent panel.

We do not collect special categories of personal data (sensitive data) as defined in Article 9 of the GDPR, and we do not knowingly collect data from individuals under the age of 16.

We process your personal data for the following purposes, each supported by a distinct legal basis under Article 6 of the GDPR:

Responding to contact enquiries (Article 6(1)(b) GDPR - performance of a contract or pre-contractual steps): When you submit a contact form, we process your name, email address, and message content in order to respond to your enquiry. This processing is necessary to take steps at your request prior to entering into any arrangement with us.

Website analytics and functionality (Article 6(1)(a) GDPR - consent): Where you have provided consent via our cookie consent mechanism, we may process technical usage data for the purpose of understanding how visitors use our website and improving its content and structure. You may withdraw this consent at any time.

Compliance with legal obligations (Article 6(1)(c) GDPR): We may process your data where required to do so by applicable Polish or European Union law, including obligations under the Act of 18 July 2002 on the Provision of Electronic Services (Ustawa o świadczeniu usług drogą elektroniczną).

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by applicable law.

Contact enquiry data submitted via the contact form is retained for a period of up to 24 months from the date of receipt, after which it is securely deleted unless an ongoing matter requires longer retention. Technical usage data collected via analytics cookies is retained in accordance with the data retention settings of the relevant analytics platform, typically no longer than 26 months.

Once the applicable retention period has expired, personal data is either permanently deleted or anonymised so that it can no longer be linked to an identifiable individual. Records of consent given or withdrawn via our cookie consent system are retained for a period sufficient to demonstrate compliance, typically 36 months.

We do not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipient, strictly to the extent necessary:

Service providers (data processors): We may share data with trusted third-party service providers who process data on our behalf under written data processing agreements, including web hosting providers, email delivery services, and analytics platforms. These providers are bound by contractual obligations to protect your data and may not use it for their own purposes.

Legal and regulatory authorities: We may disclose personal data to Polish courts, law enforcement authorities, the Office for Personal Data Protection (Urząd Ochrony Danych Osobowych, UODO), or other competent authorities where required to do so by law or where we have a legitimate interest in protecting our legal rights.

Where any transfer of personal data takes place outside the European Economic Area, we ensure that appropriate safeguards are in place in accordance with Chapter V of the GDPR, including standard contractual clauses approved by the European Commission.

Under the GDPR and applicable Polish data protection law, you have the following rights with respect to your personal data:

Right of access (Article 15 GDPR): You have the right to obtain confirmation of whether we process personal data about you and, if so, to receive a copy of that data along with information about how it is processed.

Right to rectification (Article 16 GDPR): You have the right to request correction of inaccurate personal data we hold about you, and to have incomplete data completed.

Right to erasure (Article 17 GDPR): In certain circumstances, you have the right to request deletion of your personal data.

Right to restriction of processing (Article 18 GDPR): You may request that we restrict the processing of your data in certain circumstances, for example while a dispute about accuracy is being resolved.

Right to data portability (Article 20 GDPR): Where processing is based on consent or contract and carried out by automated means, you have the right to receive your data in a structured, commonly used, machine-readable format.

Right to object (Article 21 GDPR): You may object to processing based on our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds.

Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month as required by Article 12 of the GDPR.

Our website uses cookies and similar technologies. Cookies are small text files stored on your device when you visit a website. Some cookies are strictly necessary for the website to function; others are used for analytics or personalisation and require your consent under Article 5(3) of Directive 2002/58/EC (the ePrivacy Directive) as implemented in Poland through the Act of 16 July 2004 - Telecommunications Law (Prawo telekomunikacyjne).

You can manage your cookie preferences at any time using the cookie consent panel accessible on this website. For detailed information about the cookies we use, their purposes, and how to control them, please refer to our Cookie Policy.

We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access, in accordance with Article 32 of the GDPR. These measures include the use of encrypted data transmission (HTTPS/TLS), access controls limiting data access to authorised personnel only, and regular review of our security practices. While we take all reasonable steps to protect your data, no method of electronic transmission or storage is entirely secure, and we cannot guarantee absolute security.

If you consider that our processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority. In Poland, the supervisory authority is the President of the Office for Personal Data Protection (Prezes Urzędu Ochrony Danych Osobowych, PUODO), with its registered office at ul. Stawki 2, 00-193 Warsaw. Further information is available at uodo.gov.pl. You also have the right to seek an effective judicial remedy against a controller or processor before the courts of the member state where you have your habitual residence, place of work, or where the alleged infringement occurred.

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or the structure of our website. When we make material changes, we will update the "Last Updated" date at the top of this document. We encourage you to review this Privacy Policy periodically. Continued use of the website after any changes have been published constitutes your acknowledgement of the updated document. If you have questions about any changes, please contact us at [email protected].