Data controller
The controller of personal data is Robert Grzegorczyk. You can contact the controller through the contact form. We do not publish a registered office address because one has not yet been established.
Data we process
The contact form processes your name, email address, selected topic, message, language and submission time. The first-drop form processes your email, language, signup page, time and consent version. The site also stores necessary cookie preferences. With consent, first-party analytics records page paths and referring domains as aggregated daily statistics. Infrastructure providers may process technical information such as IP address, browser type, request time and diagnostics.
Purposes and legal bases
We process contact messages to reply and continue the conversation on the basis of our legitimate interest (Article 6(1)(f) GDPR). If an inquiry concerns a potential contract, Article 6(1)(b) GDPR may apply. We process a first-drop email address on the basis of consent (Article 6(1)(a) GDPR) to send electronic information about the WEST OF NOW launch and products. Aggregated visit statistics are also collected with consent. Data may be processed to meet legal obligations and establish, exercise or defend claims.
Recipients
Hosting, database, IT infrastructure, email and technical support providers may receive data only to the extent required to provide their services. Where required by law, data may be disclosed to authorized public authorities. We do not sell personal data.
Transfers outside the EEA
Some technology providers may process data outside the European Economic Area. Where this happens, transfers rely on mechanisms permitted by the GDPR, including adequacy decisions or Standard Contractual Clauses.
Retention
Messages are kept for the time needed to handle the matter and then until potential claims expire. A first-drop email is kept until consent is withdrawn or launch communications end; records showing that consent was granted or withdrawn may be retained as needed to demonstrate compliant handling. Aggregated analytics has no user identifier. Technical data follows infrastructure providers' retention cycles.
Your rights
Depending on the circumstances, you may request access, correction, erasure, restriction and portability, and object to processing based on legitimate interest. You may withdraw consent for first-drop communication or analytics at any time without affecting earlier lawful processing. To leave the list, use the contact form. You may also lodge a complaint with the President of the Polish Personal Data Protection Office.
Voluntary data and automation
Providing data is voluntary. We cannot reply without contact details or send first-drop information without an email address and consent. We do not make decisions about you solely by automated means and do not create advertising profiles from site data.
Security and changes
We use access controls for submissions and basic anti-spam measures. This policy may be updated when site features, providers or legal requirements change. The current version is always available at this address.