1. Data Controller
The controller of personal data collected through this website is Kortektr Media Sp. z o.o., with registered office at ul. Marszałkowska 84/92, 00-514 Warszawa, Poland (NIP: 525-000-12-34). Contact for data protection matters: kontakt@kortektr.eu.
2. Scope of Data Collected
When using this website, the following categories of data may be processed:
- Technical data: IP address, browser type, operating system, referral URL, pages visited, and session duration — collected automatically via server logs and analytics.
- Contact form data: Name, phone number, and email address submitted through the inquiry form on the About page.
- Cookies: Session and preference cookies stored in the browser as described in Section 5.
3. Legal Basis for Processing
Data is processed under the following legal bases as defined in Article 6 of Regulation (EU) 2016/679 (GDPR):
- Art. 6(1)(a) — Consent: for analytics cookies where the user has accepted via the cookie banner.
- Art. 6(1)(b) — Contract performance: for processing contact form submissions to respond to inquiries.
- Art. 6(1)(f) — Legitimate interest: for server-side logging required for security and technical operation of the website.
4. Purposes of Data Processing
- Responding to inquiry submissions received through the contact form
- Maintaining the technical security and performance of the website
- Analysing aggregate website traffic patterns for content improvement (analytics, only with consent)
- Compliance with legal obligations applicable to the data controller under Polish and EU law
5. Cookies
This website uses the following types of cookies:
- Strictly necessary cookies: Required for basic website function (session state, cookie consent preference). These cannot be disabled.
- Analytics cookies: Used to collect anonymised data on page visits and user interactions. Set only with explicit consent via the cookie banner.
Cookie preferences can be modified at any time by clearing browser storage or adjusting browser settings. Withdrawing consent does not affect the lawfulness of processing prior to withdrawal.
6. Data Retention
- Contact form submissions: retained for a maximum of 24 months from the date of receipt, then securely deleted.
- Server access logs: retained for 90 days for security purposes.
- Analytics data: retained in aggregated form for up to 26 months.
7. Data Recipients
Personal data is not sold or shared with third parties for commercial purposes. Data may be shared with:
- Hosting and infrastructure providers operating within the EU under GDPR-compliant data processing agreements.
- Competent authorities where disclosure is required by Polish or EU law.
8. Rights of Data Subjects
Under GDPR, individuals whose data is processed by Kortektr Media Sp. z o.o. have the right to:
- Access their personal data (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure of data in applicable circumstances (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing based on legitimate interest (Art. 21 GDPR)
- Withdrawal of consent at any time, without affecting prior lawful processing
Requests related to data subject rights should be directed to kontakt@kortektr.eu. Responses are provided within 30 days.
9. Right to Lodge a Complaint
If you believe that personal data has been processed in a manner inconsistent with applicable law, you may lodge a complaint with the Polish data protection supervisory authority — the Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, Poland (uodo.gov.pl).
10. Changes to This Policy
This privacy policy may be updated periodically to reflect changes in legal requirements or processing practices. The current version is always available at this URL. The date at the top of this document indicates when it was last revised.