Privacy Policy
1. Data Controller
The data controller for personal data collected through the website waxule-rugatu.info is Waxule Rugatu, located at prez. Gabriela Narutowicza 59, Łódź, Poland. You may contact us regarding data protection matters at: [email protected] or by telephone at +48 660 944 491.
This Privacy Policy is issued in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR), as well as the Polish Act of 10 May 2018 on the Protection of Personal Data (Dz.U. 2018 poz. 1000) and the Act of 18 July 2002 on the Provision of Electronic Services (Dz.U. 2002 nr 144 poz. 1204).
2. What Data We Collect
We collect personal data only when you voluntarily provide it to us. The categories of data we may process include:
- Contact information: full name and email address, submitted via the contact form on this website.
- Message content: the subject and body of any message you send us through the contact form.
- Technical data: IP address, browser type, device type, referring URL, and pages visited, collected automatically through server logs and, where consented to, analytics cookies.
- Cookie preference data: your choices regarding cookie categories, stored locally in your browser.
We do not collect sensitive categories of personal data as defined in Article 9 GDPR. We do not collect financial data, payment information, or government identification numbers.
3. Legal Basis for Processing
We process your personal data on the following legal bases, as set out in Article 6 GDPR:
- Article 6(1)(a) - Consent: Where you have given explicit consent, for example by ticking the privacy checkbox on our contact form or by accepting optional cookie categories through our cookie consent mechanism.
- Article 6(1)(b) - Contractual necessity: Where processing is necessary to respond to your enquiry or to provide information you have requested, in the context of a pre-contractual relationship.
- Article 6(1)(c) - Legal obligation: Where processing is required to comply with applicable Polish or EU law.
- Article 6(1)(f) - Legitimate interests: For the purposes of website security, fraud prevention, and improving the functionality and content of our educational resources, provided these interests are not overridden by your fundamental rights and freedoms.
4. How We Use Your Data
Personal data you submit through the contact form is used exclusively to respond to your enquiry and to communicate with you about the subject matter of your message. We do not use contact form data for marketing, profiling, or automated decision-making.
Technical data collected automatically is used to maintain the security and functionality of the website, to understand how visitors interact with our educational content, and to diagnose technical issues. Where analytics cookies are used with your consent, this data may be processed to improve the quality and relevance of our content.
We do not sell, rent, or trade your personal data to third parties. We do not use your data to create profiles for advertising purposes.
5. Data Retention
Contact form enquiries and related correspondence are retained for a period of up to 24 months from the date of the last communication, unless a longer retention period is required by applicable law or is necessary to resolve any ongoing matter.
Technical log data is retained for up to 12 months and then deleted or anonymised. Cookie preference data is stored in your browser for up to 12 months, after which you will be prompted to renew your preferences.
You may request deletion of your personal data at any time, subject to any overriding legal obligation we may have to retain it.
6. Data Sharing and Third Parties
We may share your personal data with the following categories of recipients, only to the extent necessary:
- Hosting and infrastructure providers who operate the servers on which this website and its data are stored. These providers are contractually bound to process data only on our instruction and to maintain appropriate security measures.
- Email service providers used to receive and respond to contact form submissions.
- Analytics service providers, where you have consented to analytics cookies, who process aggregated and pseudonymised data about site usage.
Any third parties with whom we share data are required to implement appropriate technical and organisational measures to protect personal data in accordance with GDPR. Where data is transferred outside the European Economic Area, we ensure adequate safeguards are in place as required by Chapter V GDPR.
7. Your Rights Under GDPR
As a data subject under GDPR, you have the following rights, which you may exercise by contacting us at [email protected]:
- Right of access (Article 15 GDPR): You may request a copy of the personal data we hold about you.
- Right to rectification (Article 16 GDPR): You may request correction of inaccurate or incomplete data.
- Right to erasure (Article 17 GDPR): You may request deletion of your personal data where the conditions of Article 17 are met.
- Right to restriction of processing (Article 18 GDPR): You may request that we restrict processing of your data in certain circumstances.
- Right to data portability (Article 20 GDPR): Where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, machine-readable format.
- Right to object (Article 21 GDPR): You may object to processing based on legitimate interests.
- Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
You also have the right to lodge a complaint with the supervisory authority in Poland: Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warsaw, www.uodo.gov.pl.
8. Cookies and Tracking Technologies
This website uses cookies and similar tracking technologies. Full details of the cookies we use, their purposes, and how to manage your preferences are set out in our Cookie Policy. Your cookie preferences can be adjusted at any time using the consent tool on this website.
We do not use cookies for behavioural advertising. Where analytics cookies are used, they are activated only with your prior consent in accordance with Article 5(3) of the ePrivacy Directive (2002/58/EC) and Polish telecommunications law.
9. Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures are reviewed and updated on an ongoing basis. However, no method of electronic transmission or storage is entirely secure, and we cannot provide an absolute guarantee of security.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, in accordance with Article 33 GDPR. Where required, we will also notify affected individuals directly.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or the services we provide. When we make material changes, we will update the "Last Updated" date at the top of this document. We encourage you to review this policy periodically. Continued use of this website following any update constitutes acknowledgement of the revised policy.
If you have any questions about this Privacy Policy or about how we handle your personal data, please contact us at [email protected].