Privacy policy

1. Data controller

The controller of your personal data is Oskar Mieszała, trading as Web-Net (unregistered business activity under Polish law), correspondence address: Tarninowa 17, 62-002 Złotniki, Poland. For anything related to how your data is processed, contact us at webnet.pl@gmail.com or +48 509 638 578. We have not appointed a data protection officer — please write to the address above.

2. What data we collect and why

Through the contact form and the quote form we collect: your name, email address, the enquiry topic you pick from the list, optionally a phone number, and the content of your message. We use this data solely to reply to your enquiry, prepare a quote, and continue any resulting correspondence about a possible collaboration. You write the message yourself — please do not include data in it that we do not need in order to reply. With your consent we also collect statistics about visits to the site (Google Analytics) — see section 10 and the Cookie Policy.

3. Legal basis for processing

We process this data under Art. 6(1)(b) GDPR — taking steps at your request before entering into a contract, that is preparing a reply and a quote — and Art. 6(1)(f) GDPR, our legitimate interest in conducting business correspondence and defending against potential claims. We have assessed that these interests do not override your rights and freedoms: we process only the data you give us yourself, and for the purpose you yourself expect. We do not process form data on the basis of consent: the checkbox in the form confirms you have read this notice, it is not consent within the meaning of the GDPR. Only web analytics requires consent (section 10).

4. How long we keep your data

Enquiries that do not lead to a collaboration are deleted 12 months after the last contact. If a contract is concluded, we keep the related data for the period required by Polish tax and accounting law (as a rule, 5 years from the end of the tax year), and data needed to defend against claims until those claims become time-barred. You may object at any time to processing based on our legitimate interest. In Google Analytics, event data is kept for 2 months and data tied to the user identifier for 14 months; aggregated statistical reports that cannot identify you may be kept longer. The record of your cookie decision stays in your browser for 12 months.

5. Who we share data with

We use processors acting on our behalf: SEOHOST — the hosting and domain provider whose servers in Poland run this site; Google (Google Apps Script and Google Sheets), the tool that receives form submissions; and — only if you consent to analytics — Google Analytics (Google Ireland Limited). Google LLC may process data on servers outside the European Economic Area; the transfer relies on the standard contractual clauses approved by the European Commission or on the adequacy decision for certified US companies (EU-U.S. Data Privacy Framework). Beyond that, your data may only reach bodies entitled to it by law. We never sell your data or pass it to anyone for marketing.

6. Your rights

In connection with this processing, you have the right to:

• access your data and receive a copy of it,
• rectify (correct) your data,
• erase your data ("the right to be forgotten"),
• restrict processing,
• data portability — to the extent we process the data on the basis of consent or a contract and by automated means,
• object to processing based on our legitimate interest,
• withdraw your consent to analytics at any time (without affecting the lawfulness of processing before withdrawal) — via “Cookie settings” at the bottom of the page,
• lodge a complaint with the President of the Personal Data Protection Office (or your local supervisory authority) if you believe processing breaches the GDPR.

7. Is providing data mandatory?

Providing your data in the form is voluntary, but necessary for us to reply to your enquiry. This site is not directed at children and we do not knowingly collect data about anyone under 16 — if we find that such data has reached us, we delete it.

8. Automated decisions and profiling

We do not make automated decisions about you, including profiling.

9. Server logs

The server running this site automatically records standard access logs: IP address, date and time of the request, the page requested, and the browser type. These are necessary to keep the server running, diagnose faults and maintain security (Art. 6(1)(f) GDPR). We do not combine them with form data and do not use them for traffic analysis or tracking. We do not make our own copies or compilations of them. The logs are held on our behalf by our hosting provider SEOHOST — no longer than is needed for security and diagnostics, and for 12 months at most.

10. Cookies and web analytics

The site stores in your browser only your cookie decision — necessary data that does not need consent. With your consent we also use Google Analytics 4 to measure traffic and improve the site; it sets the cookies _ga and _ga_B5W27ZTF94. The basis for this processing is your consent (Art. 6(1)(a) GDPR and Art. 399(1) of the Polish Electronic Communications Law), which you can withdraw at any time via “Cookie settings” at the bottom of the page. Until you consent, your browser does not connect to Google Analytics. Details: Cookie Policy.

11. Changes to this policy

This policy may be updated from time to time, for example following changes in law or to the site itself. The current version is always available at this address. We will announce material changes in a visible place on the site, and if a change concerns analytics we will ask for your consent again.