Privacy Policy

Who is the data controller

The data controller responsible for your personal data is Retepe, operating at Trakt Świętego Wojciecha 29, Gdańsk, Poland. You can reach us at [email protected] or by phone at +48 511 877 367.

As controller, we determine the purposes and means of processing your personal data and are accountable for ensuring that processing is lawful and fair.

What data we collect and why

We only collect personal data that is necessary for the purposes described here. The categories of data and their purposes are:

Contact form submissions

When you complete the contact form on our website, we collect your name, email address, phone number, the subject you selected, and the content of your message. We use this data to respond to your inquiry. The legal basis for this processing is our legitimate interest in communicating with people who reach out to us (Article 6(1)(f) GDPR), or, where you provide consent explicitly, Article 6(1)(a) GDPR.

Website analytics

If you consent to analytics cookies, we collect anonymized data about how you navigate the site, which pages you visit, and how long you spend on each. This helps us understand how the site is used and where we can improve it. The legal basis is your consent (Article 6(1)(a) GDPR). You can withdraw this consent at any time through our cookie settings.

Technical data

When you visit the site, our server automatically logs basic technical information including your IP address, browser type, operating system, and the page you requested. This data is used to maintain site security and diagnose technical problems. The legal basis is our legitimate interest in operating a secure and functional website (Article 6(1)(f) GDPR). This data is not linked to any identifiable individual in normal operation.

How long we keep your data

We don't keep data longer than necessary. Contact form data is retained for up to 24 months from the date of your inquiry, after which it is deleted. Server log data is retained for 30 days and then automatically purged. Analytics data, if consented to, is retained according to the settings of the analytics service in use, typically no longer than 26 months.

If you request deletion of your data, we will process that request within 30 days unless we are required by law to retain it.

Who we share your data with

We do not sell your personal data. We do not share it with third parties for their own marketing purposes. We may use third-party service providers to operate the website, such as hosting providers and analytics platforms. These providers act as data processors under written agreements that require them to protect your data and use it only as instructed by us.

If required by law, court order, or competent public authority, we may disclose data to the extent legally required. In such cases, we will inform you unless prohibited from doing so.

International data transfers

Where any service provider operates outside the European Economic Area, we ensure that appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission under Article 46 GDPR. We do not transfer data to countries without adequate protection unless those safeguards are in place.

Your rights under GDPR

You have the following rights regarding your personal data:

Access: You can request a copy of the personal data we hold about you.

Rectification: You can ask us to correct inaccurate or incomplete data.

Erasure: You can ask us to delete your data where there is no longer a lawful basis for us to hold it.

Restriction: You can ask us to pause processing of your data in certain circumstances.

Portability: Where processing is based on consent or contract and carried out by automated means, you can ask us to provide your data in a machine-readable format.

Objection: You can object to processing based on legitimate interests. We will stop unless we have compelling legitimate grounds that override your interests.

Withdraw consent: Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at [email protected]. We will respond within one month. You also have the right to lodge a complaint with the Polish data protection supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), at ul. Stawki 2, 00-193 Warsaw.

Cookies

We use cookies on this website. Some are strictly necessary for the site to function. Others, used for analytics and marketing, require your consent. You can manage your cookie preferences at any time through the cookie settings banner or by reading our Cookie Policy.

Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or disclosure. These include encrypted connections (HTTPS), access controls, and regular security reviews. No system is completely immune to risk, but we take reasonable and proportionate measures to reduce it.

Changes to this policy

We may update this policy from time to time to reflect changes in our practices or applicable law. When we make significant changes, we will update the date at the top of this page. We encourage you to review this policy periodically.

Contact

For any questions about this policy or how we handle your data, contact us at:

Retepe
Trakt Świętego Wojciecha 29, Gdańsk
Email: [email protected]
Phone: +48 511 877 367