Privacy Policy

Data Controller

• The data controller is the operator of besuko.info, located at Konstantego Ciołkowskiego 2/3, Białystok, Poland.
• Contact for data protection matters: [email protected]
• No Data Protection Officer is required for this operation given its scale and nature.

Data Collected and Legal Basis

• Contact form submissions: When you submit the contact form, your email address and message content are collected. The legal basis is Article 6(1)(b) GDPR (necessary to respond to your inquiry) or Article 6(1)(f) GDPR (legitimate interest in handling correspondence).
• Server logs: Standard server access logs may record your IP address, browser type, referring URL, and pages visited. This data is collected automatically and is necessary for the technical operation of the website under Article 6(1)(f) GDPR. Logs are retained for a maximum of 30 days.
• Cookies: Cookie data is processed based on your consent (Article 6(1)(a) GDPR) where required, or on legitimate interest for strictly necessary cookies. See the Cookie Policy for full details.
• No marketing data: No personal data is collected for marketing, profiling, or advertising purposes. No email lists are maintained.

Purpose of Processing

• Responding to contact inquiries submitted via the contact form or email.
• Ensuring the technical security and proper functioning of the website.
• Complying with legal obligations applicable under Polish and EU law.

Data Retention

• Contact correspondence is retained for the period necessary to handle the inquiry and for a reasonable period thereafter, not exceeding 2 years.
• Server logs are deleted automatically after 30 days.
• Cookie consent records are retained for 12 months or until consent is withdrawn.
• Data is deleted or anonymized once the purpose for which it was collected no longer exists.

Data Sharing and Transfers

• Personal data is not sold, rented, or shared with third parties for commercial purposes.
• Data may be shared with hosting providers and technical service providers acting as data processors under appropriate data processing agreements.
• Data may be disclosed to competent authorities when required by applicable law.
• No transfers of personal data to countries outside the European Economic Area occur without appropriate safeguards as required by Chapter V of GDPR.

Your Rights

• Right of access (Art. 15 GDPR): You may request confirmation of whether your personal data is being processed and obtain a copy of that data.
• Right to rectification (Art. 16 GDPR): You may request correction of inaccurate data.
• Right to erasure (Art. 17 GDPR): You may request deletion of your personal data where no legal obligation requires its retention.
• Right to restriction (Art. 18 GDPR): You may request that processing be restricted in certain circumstances.
• Right to object (Art. 21 GDPR): You may object to processing based on legitimate interest.
• Right to data portability (Art. 20 GDPR): Where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, machine-readable format.
• Right to withdraw consent (Art. 7(3) GDPR): Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: You have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warsaw, Poland.

To exercise any of these rights, contact: [email protected]. Requests will be addressed within 30 days as required by GDPR.

Security

• Appropriate technical and organizational measures are in place to protect personal data against unauthorized access, loss, or destruction, in accordance with Article 32 GDPR.
• The website uses HTTPS encryption for all data transmission.

Changes to This Policy

This policy may be updated to reflect changes in law or in the operation of this website. The date at the top of this page indicates when the policy was last revised. Continued use of the website after changes constitutes acceptance of the updated policy.