Legal

Privacy policy

Last updated: [DATE] · Review this document with your legal adviser before publishing.

This policy explains how kulanek.net handles personal data collected through this website, in line with Regulation (EU) 2016/679 (GDPR).

Controller

The controller of your personal data is Kulanek.net, Poland. For any question about this policy or your data, contact contact@kulanek.net.

What we collect and why

• Enquiries. When you use the contact form we collect your name, email address, organisation (optional), the topic you select and the content of your message. We use this only to respond to your enquiry and to any follow-up correspondence about it. The legal basis is Article 6(1)(b) GDPR (steps prior to entering into a contract) and, where you are not a prospective client, Article 6(1)(f) — our legitimate interest in answering enquiries addressed to us.
• Server logs. Our hosting provider records standard technical data such as IP address, request time, requested URL and user agent, for the purpose of operating and securing the service. The legal basis is Article 6(1)(f) — our legitimate interest in the security and availability of the site.

What we do not do

This site sets no analytics or advertising cookies, embeds no social media trackers, and loads no fonts, scripts or images from third-party content delivery networks. Nothing you do here is profiled, and we do not carry out automated decision-making.

Cookies

The site uses only strictly necessary cookies. A short-lived cookie may be set if a contact form submission fails, so that what you typed is not lost when the page reloads; it expires within five minutes. If you log in to the site as an administrator, WordPress sets session cookies necessary for authentication. No consent banner is required for cookies of this kind, and none is shown.

Retention

Enquiries are retained for 12 months from the last correspondence, then deleted, unless a contractual or statutory obligation requires us to keep them longer. Server logs are retained according to our hosting provider’s standard schedule.

Recipients and transfers

Your data is processed by our hosting provider and our email provider, acting as processors under Article 28 GDPR: Amazon Web Services. We do not sell or share personal data for marketing purposes. Where a processor operates outside the European Economic Area, transfers are covered by an adequacy decision or by standard contractual clauses.

Your rights

You have the right to access your data, to have it rectified or erased, to restrict or object to its processing, and to data portability where applicable. To exercise any of these, write to contact@kulanek.net. You also have the right to lodge a complaint with a supervisory authority — in Poland, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa).

Changes

If this policy changes materially we will update the date at the top of this page. Substantive changes affecting existing enquiries will be communicated directly.