Privacy Policy

1. Controller

The personal data controller for this website is Exorretal Sp. z o.o., ul. Złota 59, 00-120 Warszawa, Poland (NIP: 527-264-10-77, KRS: 0000888421). Contact for data protection matters: redakcja@exorretal.eu.

2. Data Collected

This website collects personal data in two situations:

• Contact form submissions: name, phone number, and email address provided voluntarily. This data is used exclusively to respond to the submitted inquiry. Legal basis: Art. 6(1)(b) GDPR — processing necessary for taking steps prior to entering into a contract, or Art. 6(1)(f) — legitimate interest in responding to inquiries.
• Server logs: IP address, browser type, operating system, referring URL, and timestamps are recorded in server access logs for a maximum of 30 days. Legal basis: Art. 6(1)(f) GDPR — legitimate interest in operating a secure and functional website.

3. Cookies

This website uses one first-party cookie to store your cookie consent preference. The cookie name is exorretal_cookie_consent and stores a value of "accepted" or "rejected". It expires after 365 days (if accepted) or 30 days (if rejected).

No third-party tracking cookies, advertising cookies, or analytics cookies are currently used on this site. If analytics are introduced in future, this policy will be updated before their activation, and fresh consent will be requested.

4. Retention

Contact form data is retained for a maximum of 12 months from receipt, after which it is deleted unless a continuing correspondence or contract requires longer retention. Server log data is retained for 30 days. Cookie consent records are retained for the duration of the cookie's validity period.

5. Your Rights Under GDPR

As a data subject under GDPR (Regulation EU 2016/679), you have the following rights:

• Right of access (Art. 15): You may request a copy of personal data held about you.
• Right to rectification (Art. 16): You may request correction of inaccurate data.
• Right to erasure (Art. 17): You may request deletion of your data subject to applicable retention obligations.
• Right to restriction of processing (Art. 18): You may request that processing be restricted in certain circumstances.
• Right to data portability (Art. 20): Where processing is based on consent or contract, you may request data in a machine-readable format.
• Right to object (Art. 21): You may object to processing based on legitimate interests.
• Right to lodge a complaint (Art. 77): You may file a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa, Poland — uodo.gov.pl.

6. Data Transfers

Personal data submitted through the contact form is processed within the European Economic Area. Server infrastructure is hosted in the EU. No personal data is transferred to third countries or international organisations.

7. Security Measures

Technical and organisational measures to protect personal data include HTTPS encryption for all data in transit, access controls limiting who can view submitted form data, and regular review of retained data to apply deletion schedules.

8. Changes to This Policy

Material changes to this privacy policy will be indicated by an updated "last updated" date at the top of this page. Visitors who have previously accepted cookies will be informed of material changes on their next visit.

9. Contact

Data protection inquiries can be submitted by email to redakcja@exorretal.eu or by post to the registered address: ul. Złota 59, 00-120 Warszawa, Poland. Responses are provided within 30 days of receipt as required by Art. 12 GDPR.