Privacy Policy

Who is the Data Controller?

The data controller responsible for personal data processed through this website is Rejica Coreti, with its registered address at Grodzka 52A, 31-044 Kraków, Poland. You may contact the data controller at any time by email at [email protected] or by telephone at +48 12 421 66 88.

What information do we collect?

We collect personal data only when you actively provide it to us. The categories of data we may collect include:

Contact enquiry data: When you use the contact form on this website, we collect the email address you provide and the content of your message. Providing a name is optional. This data is transmitted directly to our email address via your email client and is not stored on any server operated by this website.

Technical data: When you visit the website, standard server log files may record your IP address, browser type, operating system, referring URL, and the date and time of your visit. This data is collected automatically and is not linked to any identifiable individual unless required for security or legal purposes.

Cookie data: We may collect data through cookies and similar technologies. The types of cookies used and the data they collect are described in our Cookie Policy, available at cookies.html.

For what purposes do we use your data?

We use the personal data we collect for the following purposes, each grounded in a specific legal basis under Article 6 GDPR:

Responding to enquiries (Article 6(1)(b) GDPR — performance of a pre-contractual step or Article 6(1)(f) — legitimate interest): When you contact us through the contact form or by email, we use your email address and message content to respond to your enquiry. We retain this correspondence for a reasonable period to maintain a record of communications.

Website operation and security (Article 6(1)(f) GDPR — legitimate interest): Technical log data is processed to maintain the security and proper functioning of the website. This includes detecting and preventing unauthorized access or other technical issues.

Compliance with legal obligations (Article 6(1)(c) GDPR): In certain circumstances we may be required to process or retain data to comply with applicable Polish or EU law.

How long do we retain your data?

We do not retain personal data longer than necessary for the purposes for which it was collected. Contact enquiry data is retained for a period of up to 24 months from the date of the last communication, after which it is deleted. Technical log data is retained for a period of up to 12 months. Where data must be retained to comply with a legal obligation, it is retained for the period required by the applicable law.

Do we share your data with third parties?

We do not sell, rent, or trade personal data. We may share data with the following categories of recipients in limited circumstances:

Service providers: We may use third-party service providers (such as hosting providers) who process data on our behalf under a data processing agreement that ensures GDPR compliance. These providers are not permitted to use your data for their own purposes.

Legal authorities: We may disclose data to Polish law enforcement or regulatory authorities where required by law, court order, or where we believe disclosure is necessary to protect the rights, property, or safety of individuals.

We do not transfer personal data outside the European Economic Area (EEA) unless appropriate safeguards are in place in accordance with Chapter V of the GDPR.

What are your rights under GDPR?

As a data subject under GDPR, you have the following rights with respect to your personal data:

Right of access (Article 15): You have the right to request a copy of the personal data we hold about you and information about how it is processed.

Right to rectification (Article 16): You have the right to request correction of inaccurate or incomplete personal data.

Right to erasure (Article 17): You have the right to request deletion of your personal data where there is no longer a lawful basis for its processing.

Right to restriction of processing (Article 18): You have the right to request that we restrict the processing of your data in certain circumstances.

Right to data portability (Article 20): Where processing is based on consent or contract and carried out by automated means, you have the right to receive your data in a structured, commonly used, machine-readable format.

Right to object (Article 21): You have the right to object to processing based on legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us at [email protected]. We will respond within one month of receiving your request, as required by Article 12 GDPR. If you believe your rights have been violated, you have the right to lodge a complaint with the Polish supervisory authority, the Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, www.uodo.gov.pl.

How do we protect your data?

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include the use of encrypted connections (HTTPS) for data transmission and access controls limiting who within our organization can access personal data. However, no method of electronic transmission or storage is entirely secure, and we cannot guarantee absolute security.

Does this website use cookies?

Yes. This website uses cookies and similar technologies to function properly and to analyze site usage. Full details of the cookies used, their purposes, and how to manage your preferences are set out in our Cookie Policy at cookies.html. You can manage your cookie preferences at any time using the cookie consent tool accessible via the icon in the bottom-right corner of the website.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of the website after any changes constitutes acceptance of the updated policy.

Contact for Data Protection Matters

For any questions, requests, or concerns relating to this Privacy Policy or our data processing practices, please contact us at:

Rejica Coreti
Grodzka 52A, 31-044 Kraków, Poland
Email: [email protected]
Phone: +48 12 421 66 88