Privacy Policy

1. Data Controller

The data controller responsible for personal data processed through this website is Jiduwe Nisaja, with its registered address at Aleja Zwycięstwa 241/11, Gdynia, Poland. You may contact us regarding data protection matters at [email protected] or by telephone at +48531331666.

As the data controller, we determine the purposes and means of processing personal data collected through this website and through any communications you initiate with us.

2. Personal Data We Collect

We collect personal data only when you actively provide it to us. The categories of data we may collect include:

• Contact information: name and email address, provided when you use the contact form or email us directly.
• Message content: the subject and body of messages you send us through the contact form.
• Technical data: IP address, browser type, device type, operating system, pages visited, and time spent on pages, collected automatically through server logs and, where consented to, through analytics cookies.
• Cookie preference data: a record of your cookie consent decision, stored locally in your browser.

We do not collect sensitive personal data as defined under Article 9 of the GDPR, nor do we collect financial account information, payment card details, or data relating to minors under the age of 16.

3. Legal Basis for Processing

We process personal data only where a lawful basis under Article 6 of the GDPR applies. The legal bases we rely on are as follows:

• Consent (Article 6(1)(a)): where you have given explicit consent, such as when accepting analytics cookies or ticking the privacy checkbox on our contact form.
• Legitimate interests (Article 6(1)(f)): for processing necessary to operate and improve our website, respond to enquiries, and maintain the security of our systems, provided these interests are not overridden by your rights and freedoms.
• Legal obligation (Article 6(1)(c)): where processing is necessary to comply with applicable Polish or EU law.

4. Purposes of Processing

Personal data collected through this website is used for the following purposes:

• Responding to enquiries submitted through the contact form or by email.
• Operating and maintaining the technical functionality of the website.
• Analysing website usage to improve content and user experience (only where analytics cookies have been consented to).
• Complying with legal obligations under Polish and EU law.
• Protecting the security and integrity of our systems.

We do not use personal data for automated decision-making or profiling as described in Article 22 of the GDPR.

5. Data Retention

We retain personal data for no longer than is necessary for the purposes for which it was collected. Our retention periods are as follows:

• Contact form submissions and email correspondence: retained for up to 24 months from the date of last contact, after which they are securely deleted.
• Server log data: retained for up to 90 days for security and operational purposes.
• Analytics data (where consented): retained in accordance with the retention periods of the relevant analytics service, typically up to 26 months.

Where you request deletion of your data under your rights described in Section 6, we will action that request within 30 days, subject to any overriding legal obligations.

6. Your Rights

Under the GDPR and Polish data protection law, you have the following rights with respect to your personal data:

• Right of access (Article 15): you may request confirmation of whether we process your personal data and, if so, a copy of that data.
• Right to rectification (Article 16): you may request correction of inaccurate or incomplete personal data.
• Right to erasure (Article 17): you may request deletion of your personal data where there is no compelling reason for continued processing.
• Right to restriction of processing (Article 18): you may request that we limit processing of your data in certain circumstances.
• Right to data portability (Article 20): you may request a copy of data you have provided to us in a structured, commonly used, machine-readable format.
• Right to object (Article 21): you may object to processing based on legitimate interests at any time.
• Right to withdraw consent: where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at [email protected]. You also have the right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), at ul. Stawki 2, 00-193 Warsaw, or via uodo.gov.pl.

7. Data Transfers

We do not routinely transfer personal data outside the European Economic Area (EEA). Where any transfer to a third country is necessary, we ensure that appropriate safeguards are in place in accordance with Chapter V of the GDPR, such as Standard Contractual Clauses approved by the European Commission or reliance on an adequacy decision.

8. Third-Party Services

This website may use third-party services for hosting, analytics, and mapping functionality. Each such service processes data in accordance with its own privacy policy. We select third-party providers who offer adequate data protection standards and, where required, we enter into data processing agreements with them as required by Article 28 of the GDPR.

We do not sell or share personal data with third parties for their own marketing purposes.

9. Security Measures

We implement technical and organisational measures appropriate to the risk of processing, in accordance with Article 32 of the GDPR. These include the use of encrypted connections (HTTPS), access controls, and regular review of our data handling practices. No method of transmission over the internet is entirely secure, and we cannot guarantee absolute security, but we take reasonable precautions to protect personal data against unauthorised access, disclosure, or destruction.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The date at the top of this document indicates when it was last revised. We encourage you to review this policy periodically. Continued use of the website following any changes constitutes acceptance of the revised policy.

11. Contact the Data Controller

If you have questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data, please contact us: