Privacy policy

This privacy policy explains how we process the personal data of people who visit insideweb.pl and contact us, and which cookies we use. We process personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) and the Polish Electronic Communications Law of 12 July 2024.

1. Data controller

The controller of your personal data is insideWeb Kuba Kuczyński, Tax ID (NIP): PL7181743718, REGON: 20028036400000 (the “Controller”, “we”).

2. Data protection contact

For any matter relating to the processing of your personal data and the exercise of your rights, please contact us at: bod@insideweb.pl.

3. Purposes and legal bases of processing

Contact form and free consultation

We process the data you provide in the form: full name and email address, and optionally your phone number, company name, industry, estimated budget, planned project start, preferred consultation time and format, and the content of your message. We also record your IP address and the date the form was sent.

• responding to your enquiry and arranging and conducting a free consultation – based on your consent (Art. 6(1)(a) GDPR) and to take steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR),
• protecting the form against spam and abuse and establishing, exercising or defending legal claims – based on our legitimate interest (Art. 6(1)(f) GDPR).

Email correspondence

If you contact us by email, we process your email address and the data contained in your message in order to correspond with you – based on our legitimate interest (Art. 6(1)(f) GDPR).

Visit statistics (Google Analytics)

Only if you give your consent do we use Google Analytics to analyse website traffic and improve the website – based on your consent (Art. 6(1)(a) GDPR and Art. 399(1) of the Polish Electronic Communications Law).

Website security

To keep the website secure and working properly, we process technical data (such as IP address, browser type, date and time of the request) stored in server logs and used by Google reCAPTCHA – based on our legitimate interest (Art. 6(1)(f) GDPR).

4. Data retention

• contact form and correspondence data – for as long as needed to respond and continue the conversation, but no longer than 12 months from our last contact; if we enter into a contract – for the term of the contract and until the limitation period for claims expires,
• data processed on the basis of consent – until consent is withdrawn,
• data processed on the basis of legitimate interest – until you successfully object or the interest ceases,
• Google Analytics data – no longer than 14 months.

5. Recipients of data

Your data may only be shared with entities that help us run the website and communicate with you, under data processing agreements:

• hosting and email service providers,
• Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) – for Google reCAPTCHA and, with your consent, Google Analytics,
• providers of IT and accounting services to us – to the extent necessary.

Data may also be disclosed to public authorities where required by law.

6. Transfers outside the EEA

When using Google services, data may be transferred to the United States. Google LLC participates in the EU-U.S. Data Privacy Framework, for which the European Commission has issued an adequacy decision. Standard contractual clauses approved by the European Commission provide additional safeguards.

7. Your rights

In connection with the processing of your personal data, you have the right to:

• access your data and receive a copy,
• rectify (correct) your data,
• erasure of your data,
• restrict processing,
• data portability,
• object to processing based on legitimate interest,
• withdraw your consent at any time – without affecting the lawfulness of processing carried out before withdrawal,
• lodge a complaint with the President of the Personal Data Protection Office in Poland (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl) or with the supervisory authority in your country of residence.

To exercise your rights, write to: bod@insideweb.pl.

8. Providing data

Providing your data is voluntary but necessary for us to respond to your enquiry or arrange a consultation. Fields marked as optional in the form may be left blank.

9. Automated decision-making

We do not make decisions about you based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you. Google reCAPTCHA automatically assesses the risk that the form is being sent by a program (bot), solely to protect against spam.

10. Cookies

Cookies are small text files stored on your device. We only use cookies that are essential for the website to work and – with your consent – Google Analytics cookies. We do not use advertising cookies.

Google Consent Mode

We use Google Consent Mode v2. By default, all consents for analytics and advertising storage are set to “denied”, and the Google Analytics script is only loaded after you consent to analytics cookies.

Managing your consent

On your first visit we show a banner where you can accept or reject analytics cookies or choose detailed settings. You can change or withdraw your choice at any time using the “Cookie settings” link in the website footer or the button below. You can also delete or block cookies in your browser settings.

11. Data security

We apply technical and organisational measures appropriate to the risk, including encrypted HTTPS connections, protection of the form against abuse and access to data limited to authorised persons.

12. Changes to this policy

This privacy policy may be updated, for example due to changes in the law or in the services we use. The current version, with its effective date, is always available on this page.