Privacy Policy – Wosibe Zamiku

You are the controller of your data choices. We are the controller of how we process it.

1. Identity of the Data Controller

The data controller responsible for personal data processed through this website is:

Wosibe Zamiku
Bitwy Białostockiej 9
Białystok, Poland
Email: [email protected]
Phone: +48 500 064 300

As the data controller, Wosibe Zamiku determines the purposes and means of processing personal data collected through this website and through direct communications initiated by users.

We only collect what you give us directly and what your browser sends automatically.

2. Categories of Personal Data Collected

We may collect the following categories of personal data:

Data you provide directly: When you use our contact form or send us an email, you may provide your name, email address, and any personal information included in your message. This data is provided voluntarily.

Technical data collected automatically: When you visit this website, our hosting infrastructure may automatically collect your IP address, browser type and version, operating system, referring URL, pages visited, and timestamps of access. This data is collected for security and operational purposes.

Cookie data: If you consent to cookies, certain data may be collected through cookies and similar technologies as described in our Cookie Policy.

We do not collect special categories of personal data (sensitive data) as defined under Article 9 of the GDPR, and we do not make automated decisions or engage in profiling that produces legal or similarly significant effects.

We use your data to respond to you and keep the website running. Nothing else.

3. Purposes and Legal Bases for Processing

We process personal data for the following purposes, each resting on a specified legal basis under Article 6 of the GDPR:

Responding to inquiries (Article 6(1)(b) GDPR — performance of a contract or pre-contractual steps): When you contact us through the contact form or by email, we process your name and email address to respond to your inquiry. This processing is necessary to take steps at your request prior to potentially entering into a service agreement.

Website security and operation (Article 6(1)(f) GDPR — legitimate interests): Technical data including IP addresses may be processed to maintain website security, detect unauthorized access, and ensure the proper functioning of our systems. Our legitimate interest is the secure and stable operation of our online presence.

Cookie-based analytics (Article 6(1)(a) GDPR — consent): If you have provided consent through our cookie consent mechanism, we may process data collected via analytics cookies for the purpose of understanding how visitors use our website. You may withdraw this consent at any time without affecting the lawfulness of processing prior to withdrawal.

Legal compliance (Article 6(1)(c) GDPR — legal obligation): We may process personal data where required to comply with applicable Polish or EU law, including tax and accounting obligations.

We don't sell your data. We share it only when legally required or operationally necessary.

4. Data Sharing and Recipients

Wosibe Zamiku does not sell, rent, or trade personal data to third parties for marketing or commercial purposes.

Personal data may be shared with the following categories of recipients only to the extent necessary:

Hosting and infrastructure providers: Our website is hosted on servers operated by service providers. These providers process technical data as data processors acting on our behalf under data processing agreements compliant with Article 28 of the GDPR.

Email service providers: If you contact us by email, your message is processed through our email infrastructure. Email service providers act as processors under appropriate contractual arrangements.

Legal and regulatory authorities: We may disclose personal data to Polish or EU authorities, law enforcement agencies, or courts when required by applicable law, including obligations arising under Polish administrative, civil, or criminal law.

All third-party processors engaged by Wosibe Zamiku are required to process personal data in accordance with GDPR and to implement appropriate technical and organizational security measures.

Your data stays in the EU unless you're told otherwise.

5. International Transfers

We process personal data primarily within the European Economic Area (EEA). If any service provider we use transfers personal data to countries outside the EEA, we ensure that appropriate safeguards are in place as required by Chapter V of the GDPR. These safeguards may include adequacy decisions by the European Commission, Standard Contractual Clauses adopted pursuant to Article 46(2)(c) GDPR, or other approved transfer mechanisms.

If you wish to obtain information about the specific safeguards applicable to any international transfer, please contact us at [email protected].

We keep your data only as long as needed, then delete it.

6. Data Retention

We apply the data minimization and storage limitation principles of the GDPR (Articles 5(1)(c) and 5(1)(e)) to all personal data we hold.

Contact inquiry data (name, email, message content) is retained for a period of 24 months from the date of last contact, after which it is securely deleted. This period reflects the reasonable timeframe within which a business relationship might develop from an initial inquiry.

Technical and server log data is retained for a maximum of 12 months for security and operational purposes, then deleted or anonymized.

Cookie consent records are retained for as long as the consent is valid or until withdrawn, and for a period sufficient to demonstrate compliance.

Where retention is required by Polish law for tax, accounting, or other statutory purposes, data will be retained for the period prescribed by applicable law, after which it will be deleted.

GDPR gives you significant rights over your data. Here's what they are.

7. Your Rights Under GDPR

As a data subject under the GDPR, you have the following rights with respect to your personal data processed by Wosibe Zamiku:

Right of access (Article 15 GDPR): You have the right to obtain confirmation of whether we process your personal data and, if so, to receive a copy of that data along with information about its processing.

Right to rectification (Article 16 GDPR): You have the right to request correction of inaccurate or incomplete personal data we hold about you.

Right to erasure (Article 17 GDPR): You have the right to request deletion of your personal data in certain circumstances, including where the data is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where the data has been unlawfully processed.

Right to restriction of processing (Article 18 GDPR): You have the right to request that we restrict the processing of your personal data in certain circumstances.

Right to data portability (Article 20 GDPR): Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.

Right to object (Article 21 GDPR): You have the right to object to processing based on legitimate interests, including direct marketing.

Right to withdraw consent (Article 7(3) GDPR): Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month as required by Article 12 of the GDPR. This period may be extended by a further two months where necessary, in which case we will inform you of the extension and the reasons for it.

You can complain to the Polish data protection authority if you're unhappy with how we handle your data.

8. Right to Lodge a Complaint

If you believe that the processing of your personal data by Wosibe Zamiku infringes the GDPR or applicable Polish data protection law, you have the right to lodge a complaint with a supervisory authority. In Poland, the competent supervisory authority is:

Urząd Ochrony Danych Osobowych (UODO)
ul. Stawki 2
00-193 Warsaw, Poland
Website: uodo.gov.pl
Email: [email protected]

You may also lodge a complaint with the supervisory authority of your habitual residence, place of work, or place of the alleged infringement if different from Poland.

We use technical and organizational measures to keep your data safe.

9. Security Measures

Wosibe Zamiku implements appropriate technical and organizational measures in accordance with Article 32 of the GDPR to protect personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures are reviewed and updated regularly to reflect the current state of technology and the nature of the data processed.

While we take reasonable steps to protect personal data, no method of electronic transmission or storage is completely secure. In the unlikely event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, and will inform affected data subjects where required by Article 34 of the GDPR.

We may update this policy. The date at the top tells you when.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or regulatory requirements. When we make material changes, we will update the "Last Updated" date at the top of this document. We encourage you to review this Privacy Policy periodically.

For questions about this Privacy Policy or our data processing practices, please contact us at [email protected].