Privacy Policy
1. Controller Identity and Contact Details
The controller of your personal data within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the General Data Protection Regulation, hereinafter "GDPR") and the Polish Act of 10 May 2018 on the Protection of Personal Data (Dz.U. 2018 poz. 1000, as amended) is:
Wawazu
Jana Heweliusza 11/811
80-890 Gdansk
Poland
Email: [email protected]
Phone: +48 58 352 0645
For all matters relating to the processing of your personal data and the exercise of your rights under GDPR, you may contact us using the details above.
2. Scope and Purpose of This Policy
This Privacy Policy describes the types of personal data we collect through the website wawazu.info, the purposes for which we process it, the legal bases for processing, how long we retain it, and the rights available to you. It applies to all visitors to the website and to any individuals who contact us via the contact form, email, or telephone.
This policy does not apply to external websites linked from our site. We encourage you to review the privacy policies of any third-party websites you visit.
3. Categories of Personal Data Collected
We may collect and process the following categories of personal data:
Contact and identification data: name, email address, telephone number, and any other information you voluntarily provide through the contact form or direct communication.
Technical data: IP address, browser type and version, operating system, referring URL, pages visited, time and date of access, and session duration. This data is collected automatically when you visit the website and may be processed through cookies or similar technologies.
Communication data: the content of any messages, enquiries, or correspondence you send to us, including the subject matter and any attachments.
We do not intentionally collect special categories of personal data (sensitive data) as defined under Article 9 GDPR. Please do not include such information in your communications with us.
4. Legal Bases for Processing
We process your personal data on one or more of the following legal bases as set out in Article 6 GDPR:
Article 6(1)(a) - Consent: Where you have given clear consent for us to process your personal data for a specific purpose, such as the use of non-essential cookies or subscribing to communications.
Article 6(1)(b) - Contractual necessity: Where processing is necessary for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract.
Article 6(1)(c) - Legal obligation: Where processing is necessary for compliance with a legal obligation to which we are subject under applicable Polish or European Union law.
Article 6(1)(f) - Legitimate interests: Where processing is necessary for the purposes of our legitimate interests, provided those interests are not overridden by your interests, fundamental rights, or freedoms. Our legitimate interests include the security and proper functioning of the website, responding to enquiries, and improving our services.
5. Purposes of Processing
Your personal data is processed for the following purposes:
Responding to enquiries: When you contact us through the contact form or by email, we process the information you provide in order to respond to your enquiry and, where applicable, to arrange a consultation or meeting.
Website operation and security: Technical data is processed to ensure the website functions correctly, to detect and prevent fraudulent or malicious activity, and to maintain the security of our systems.
Analytics: Where you have consented to analytics cookies, we may process anonymised or pseudonymised data about how you interact with the website in order to understand usage patterns and improve the site.
Legal compliance: We may process personal data where required to comply with applicable laws, regulations, or court orders.
6. Data Retention
We retain personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law.
Enquiry and contact data is retained for a period of up to three years from the date of last contact, unless a longer retention period is required by law or is necessary to establish, exercise, or defend legal claims.
Technical and log data is typically retained for a period of up to twelve months.
Cookie consent records are retained for a period corresponding to the validity of the consent, which does not exceed twelve months, after which we will request fresh consent where applicable.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.
7. Disclosure of Personal Data
We do not sell, rent, or trade your personal data to third parties. We may share your data in the following limited circumstances:
Service providers: We may engage trusted third-party service providers to assist in operating the website or conducting our business, where those providers are bound by appropriate data processing agreements and provide sufficient guarantees of compliance with GDPR.
Legal requirements: We may disclose personal data where required to do so by law, regulation, legal process, or governmental request, including to the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych) or other competent supervisory authority.
Business transfers: In the event of a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction, subject to the same protections described in this policy.
8. International Transfers
Where personal data is transferred to a country outside the European Economic Area, we ensure that appropriate safeguards are in place in accordance with Chapter V of GDPR. This may include the use of Standard Contractual Clauses approved by the European Commission, adequacy decisions, or other appropriate transfer mechanisms.
We will inform you of the specific safeguards in place upon request.
9. Your Rights Under GDPR
Subject to applicable law and the conditions set out in GDPR, you have the following rights in relation to your personal data:
Right of access (Article 15 GDPR): You have the right to obtain confirmation of whether we process personal data about you and, if so, to receive a copy of that data.
Right to rectification (Article 16 GDPR): You have the right to have inaccurate personal data corrected and incomplete data completed.
Right to erasure (Article 17 GDPR): You have the right to request the deletion of your personal data in certain circumstances, including where the data is no longer necessary for the purposes for which it was collected.
Right to restriction of processing (Article 18 GDPR): You have the right to request that we restrict the processing of your personal data in certain circumstances.
Right to data portability (Article 20 GDPR): Where processing is based on consent or on a contract, and processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
Right to object (Article 21 GDPR): You have the right to object to processing based on legitimate interests or carried out for direct marketing purposes.
Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month, which may be extended by a further two months where necessary.
10. Right to Lodge a Complaint
You have the right to lodge a complaint with the competent supervisory authority if you consider that the processing of your personal data infringes GDPR or applicable national data protection law. In Poland, the competent supervisory authority is:
President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych)
ul. Stawki 2
00-193 Warsaw
Poland
Website: uodo.gov.pl
11. Cookies
Our website uses cookies and similar technologies. For detailed information about the cookies we use, the purposes for which they are used, and how to manage your cookie preferences, please refer to our Cookie Policy.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or for other operational reasons. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of the website following any changes constitutes acceptance of the revised policy.