Privacy Policy

1. General provisions

The controller of personal data collected through the pklepacki.pl website (the “Service”) is Paweł Klepacki (the “Controller”). For all matters relating to personal data protection, you may contact the Controller at kontakt@pklepacki.pl.

Personal data are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”) and applicable Polish law.

2. Contact form

Using the contact form requires providing a name, email address, and message content. These data are processed in order to respond to the enquiry and, where applicable, to take steps prior to entering into a contract (Article 6(1)(b) GDPR) and, otherwise, on the basis of the Controller’s legitimate interest in conducting correspondence (Article 6(1)(f) GDPR).

Messages submitted via the form are delivered to the Controller’s mailbox through an external email service provider and are stored in that provider’s system; an automatic acknowledgement of receipt is also sent to the address provided. The Service does not maintain its own database of submissions.

Providing data is voluntary but necessary to receive a reply. Correspondence is retained for as long as needed to handle the enquiry and, where justified, until the limitation period for any related claims has expired.

3. Visit statistics

The Service uses a statistics tool that operates without cookies and without creating user profiles. Only aggregated traffic data are collected: pages visited, referral source, browser and device type, and country. IP addresses are used only transiently to distinguish visits and are not stored. The legal basis for processing is the Controller’s legitimate interest in analysing traffic on the Service (Article 6(1)(f) GDPR).

4. Error monitoring

To keep the Service running properly, technical errors occurring in the browser are reported automatically to an external monitoring tool. An error report may include the URL of the page visited, information about the browser and operating system, and a technical description of the error together with events that immediately preceded it. Reports do not include user IP addresses; the Service does not record sessions or activity recordings. The legal basis for processing is the Controller’s legitimate interest in maintaining the reliability and security of the Service (Article 6(1)(f) GDPR).

5. Hosting

The Service is hosted on the infrastructure of an external hosting provider. In providing that service, the provider processes network connection data, including IP addresses, to the extent necessary to deliver the Service’s content, ensure its security, and protect against abuse.

6. Recipients of data

Personal data may be entrusted to the following categories of recipients: hosting and IT infrastructure providers, email communication providers, statistics tool providers, and error-monitoring tool providers. These entities process data under data processing agreements and solely to the extent necessary to provide their services.

7. Location of processing and transfers outside the EEA

The server infrastructure used by the Service is located in the European Economic Area - application servers are in Frankfurt, the email service processes data on servers in Ireland, and statistics and error-monitoring tools are operated by providers that process data in the European Union.

Because some providers are established in the United States, data may to a limited extent be transferred outside the EEA - solely on the basis of a European Commission adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses (SCCs).

8. Cookies

The Service does not use cookies for marketing, advertising, or tracking purposes and therefore does not display a consent banner. The only information stored in the browser (localStorage) is the preference for the selected language version - a purely functional preference that is not transmitted anywhere.

9. Rights of data subjects

Every data subject has the right of access to their data, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interest. There is also a right to lodge a complaint with the President of the Personal Data Protection Office (uodo.gov.pl). Requests relating to the exercise of these rights may be sent to kontakt@pklepacki.pl.

10. Final provisions

Personal data are not used for automated decision-making, including profiling. This policy may be updated - the current version is published on this page together with the date of the last update.