Privacy policy

Who controls your data

The controller of your personal data is Contentation sp. z o.o., ul. Jerzego Janosika 17, 71-424 Szczecin, entered in the Polish National Court Register (KRS) under number 0000871922, tax number (NIP) 8522668617, statistical number (REGON) 387628543.

For any matter concerning personal data you can write to E-mail address or by post to the registered office.

We have not appointed a data protection officer. Requests are handled directly by the controller.

What data we collect

The scope depends on how you use the site. You do not need an account or to provide any data in order to read the content.

• Technical data - IP address, browser type and version, operating system, referring page, date and time of visit. The server records these in its logs.
• Cookie data - session identifiers and preferences, described in a separate cookie document.
• Form data - if you write to us, we process your e-mail address and the content of the correspondence.

Legal bases and purposes

We process data only where we have a basis under Article 6(1) GDPR.

• Article 6(1)(f) GDPR (legitimate interest) - operating and securing the site, visit statistics, defence against abuse.
• Article 6(1)(a) GDPR (consent) - cookies other than strictly necessary, including analytics and marketing. You may withdraw consent at any time.
• Article 6(1)(b) GDPR (performance of a contract) - if you enter into an agreement with us or request a quotation.
• Article 6(1)(c) GDPR (legal obligation) - retention of accounting records and tax settlements.

How long we keep data

Server logs are kept for as long as needed for security and diagnostics, and no longer than 12 months.

Correspondence is kept while the matter is handled and afterwards until claims become time-barred.

Data processed on the basis of consent is kept until that consent is withdrawn.

Accounting records are kept for 5 years from the end of the tax year, as required by tax law.

Who we share data with

We do not sell personal data. We entrust it only to providers of services to us, under data processing agreements.

• Hosting provider - storage of site files and server logs.
• Analytics providers - if you consent to analytics cookies.
• Accountants and advisers - to the extent needed for settlements and legal support.
• Authorised public authorities - solely on a statutory basis.

Transfers outside the European Economic Area

Some providers may process data outside the EEA. Such transfers take place on the basis of a European Commission adequacy decision or the standard contractual clauses referred to in Article 46(2) GDPR.

Your rights

In connection with the processing you have the following rights:

• right of access and to obtain a copy of the data (Article 15 GDPR),
• right to rectification (Article 16 GDPR),
• right to erasure (Article 17 GDPR),
• right to restriction of processing (Article 18 GDPR),
• right to data portability (Article 20 GDPR),
• right to object to processing based on legitimate interest (Article 21 GDPR),
• right to withdraw consent at any time, without affecting the lawfulness of processing before withdrawal,
• right to lodge a complaint with a supervisory authority (Article 77 GDPR). The authority competent for the controller is the Polish President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw. You may also contact the authority in your country of residence.

Automated decisions and profiling

We do not take decisions in relation to you based solely on automated processing, including profiling, that would produce legal effects or similarly significantly affect you.

Changes to this policy

We update this policy when the way the site works or the law changes. The date of the last update is given at the top of the document.