This is an English translation provided for convenience. In case of any discrepancy, the Polish version prevails.
Below we explain who processes your personal data when you use this website, write to us, call us or book a meeting — for what purpose, on what legal basis and what rights you have. We provide this information in accordance with Article 13 of Regulation (EU) 2016/679 (GDPR).
1. Data controller
The controller of your personal data is GRAFANNA spółka z ograniczoną odpowiedzialnością, with its registered office in Grodzisk Mazowiecki, ul. Ułańska 33, 05-825 Grodzisk Mazowiecki, Poland, entered in the register of entrepreneurs of the National Court Register kept by the District Court for the Capital City of Warsaw in Warsaw, 14th Commercial Division of the National Court Register, under KRS number 0000388529, NIP: 5291795282, REGON: 142964877, share capital: PLN 5,000.00, electronic delivery address: AE:PL-65578-71112-GGVFJ-22 (“we”).
Contact for data protection matters: info@grafanna.eu, phone +48 661 125 052. We have not appointed a data protection officer.
2. What data we process and why
Contact form, email and phone. When you send the form, write to us or call us about a project, we process the data you provide: name, email address, phone number, company name, project type and timing, and the content of your message. We do this to respond to your enquiry, prepare a proposal and discuss a possible collaboration.
Meeting booking (Cal.com). The booking calendar is provided by Cal.com, Inc. It loads only when you click a meeting booking button and agree to connect to Cal.com. From that moment, Cal.com receives your IP address and may store its own cookies in your browser. If you book a meeting, the data entered in the booking form (name, email, answers to questions) is also processed by Cal.com, Inc. in accordance with its own privacy policy.
Collaboration. If we enter into an agreement, we process the data of the client’s contact persons in order to perform it, settle accounts and meet our tax and accounting obligations.
Server logs. Our hosting provider automatically records standard technical data (IP address, time of request, browser) to ensure the security and proper functioning of the website.
Visitor statistics (Cloudflare Web Analytics). We use Cloudflare Web Analytics to measure website traffic — a tool that works without cookies and without tracking users. Only aggregated statistical data is collected (e.g. number of visits, country, pages visited, browser type), which cannot be linked to a specific person.
3. Legal basis
- Art. 6(1)(b) GDPR — taking steps at your request prior to entering into a contract (responding to an enquiry, preparing a proposal) and performing a concluded contract;
- Art. 6(1)(f) GDPR — our legitimate interest: corresponding with clients and people interested in working with us, ensuring website security, keeping statistics, and establishing, pursuing or defending claims;
- Art. 6(1)(a) GDPR — your consent to open the Cal.com booking calendar;
- Art. 6(1)(c) GDPR — compliance with legal obligations, in particular tax and accounting obligations, if we enter into a collaboration.
Sending the form does not require ticking a consent box — we process your data in order to reply to your message. We do not send newsletters or marketing messages without your separate consent.
4. Recipients of data
Your data may be disclosed only to entities that support us in running the website and our business: the hosting and email service provider, Cal.com, Inc. (meeting booking), Cloudflare, Inc. (visitor statistics) and — if we enter into a collaboration — providers of accounting and legal services. They process data on our behalf or on the basis of legal provisions. The fonts used on the website are stored on our own server — we do not connect to Google Fonts.
5. Transfers outside the European Economic Area
Using the services of Cal.com, Inc. and Cloudflare, Inc. may involve transferring data to the USA. Such transfers are based on mechanisms provided for in the GDPR, including the European Commission’s adequacy decision (EU–US Data Privacy Framework) or standard contractual clauses.
6. How long we keep data
- correspondence and form data — for the duration of our discussions and then until the limitation period for any claims expires;
- data related to a concluded contract — for the duration of the contract, then for the period required by tax and accounting regulations and until the limitation period for claims expires;
- data processed on the basis of consent — until consent is withdrawn;
- server logs — for the period resulting from the hosting configuration.
7. Your rights
You have the right to access your data and obtain a copy, to rectification, erasure, restriction of processing and data portability. You also have the right to object to processing based on our legitimate interest. Where processing is based on consent, you may withdraw it at any time — this does not affect the lawfulness of processing before withdrawal.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland). To exercise your rights, write to info@grafanna.eu.
8. Automated decision-making and profiling
We do not make automated decisions and do not profile website users.
9. Voluntary provision of data
Providing data is voluntary. In the contact form we only require your name, email address and message — without them we cannot reply. All other fields are optional.
10. Cookies and browser storage
Our website does not use cookies — no analytics, advertising or tracking cookies. Our visitor statistics (Cloudflare Web Analytics) also work without cookies. When you agree to open the booking calendar, we remember your consent in your browser’s storage (localStorage), and Cal.com may set its own cookies. You can withdraw your consent at any time by clearing the website data in your browser settings.
11. Security
The website uses an encrypted connection (HTTPS), and only people who need the data to respond to an enquiry or deliver a project have access to it.
12. Changes to this policy
This policy may be updated as the website develops. The current version is always available at this address.