1. Data Controller
The controller of your personal data within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council (the General Data Protection Regulation, hereinafter "GDPR") and the Polish Act of 10 May 2018 on the Protection of Personal Data (Dz.U. 2018 poz. 1000) is Kumuwe, with its registered address at Juliusza Słowackiego 1, Bydgoszcz, Poland. You may contact us at [email protected] or by telephone at +48 505 507 051.
As data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing is carried out in accordance with applicable data protection law.
2. What Data We Collect
We collect personal data only when you voluntarily provide it through interaction with our website. The categories of data we may collect include:
Contact form data: When you submit our contact form, we collect your name, email address, telephone number, and the content of your message.
Technical data: When you visit our website, certain technical data is automatically collected by our server or analytics tools, including your IP address (in anonymised form where possible), browser type and version, operating system, referring URL, pages visited, and time and date of access.
Cookie data: We collect data through cookies and similar technologies as described in our Cookie Policy. The categories and purposes of cookies used are set out in that separate document.
We do not collect special categories of personal data (sensitive data) as defined under Article 9 GDPR, and we do not knowingly collect data from persons under the age of 16.
3. Legal Basis for Processing
We process your personal data only where we have a lawful basis to do so under Article 6 GDPR. The applicable legal bases are as follows:
Consent (Article 6(1)(a) GDPR): Where you have given us clear consent to process your data for a specific purpose, such as the placement of non-essential cookies. You may withdraw consent at any time.
Legitimate interests (Article 6(1)(f) GDPR): Where processing is necessary for the purposes of our legitimate interests, such as ensuring the security of our website, improving our content, and responding to general inquiries, provided these interests are not overridden by your rights and interests.
Legal obligation (Article 6(1)(c) GDPR): Where we are required to process data to comply with a legal obligation under European Union or Polish law.
4. How We Use Your Data
Personal data collected through the contact form is used solely to respond to your inquiry. We do not use contact form submissions for marketing purposes without your explicit consent.
Technical data collected during website visits is used to maintain the functionality and security of the website, to analyse how visitors interact with our content, and to improve the educational resources we provide.
We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.
5. Data Retention
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law.
Contact form data is retained for a period of up to 24 months from the date of the last correspondence, after which it is securely deleted unless a longer retention period is required by law or legitimate interest.
Technical and analytical data may be retained in anonymised or aggregated form for longer periods, as such data no longer constitutes personal data once adequately anonymised.
6. Your Rights
Under GDPR and applicable Polish law, you have the following rights with respect to your personal data:
Right of access (Article 15 GDPR): You have the right to obtain confirmation of whether we process your personal data and, if so, to receive a copy of that data.
Right to rectification (Article 16 GDPR): You have the right to request correction of inaccurate or incomplete personal data we hold about you.
Right to erasure (Article 17 GDPR): You have the right to request deletion of your personal data in certain circumstances, including where the data is no longer necessary for the purpose for which it was collected.
Right to restriction of processing (Article 18 GDPR): You have the right to request that we restrict the processing of your data in certain circumstances.
Right to data portability (Article 20 GDPR): Where processing is based on consent or contract and carried out by automated means, you have the right to receive your data in a structured, machine-readable format.
Right to object (Article 21 GDPR): You have the right to object to processing based on legitimate interests.
Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.
To exercise any of these rights, please contact us at [email protected]. We will respond within one month in accordance with Article 12 GDPR. You also have the right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzedu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warsaw.
7. Third-Party Processors
We may engage third-party service providers to assist with website hosting, analytics, or technical maintenance. These providers act as data processors on our behalf and are contractually bound to process personal data only on our instructions and in accordance with GDPR.
We do not share personal data with any third party for their own independent purposes without your explicit consent.
8. International Data Transfers
Where personal data is transferred to a country outside the European Economic Area, we ensure that appropriate safeguards are in place in accordance with Chapter V of the GDPR. This may include the use of Standard Contractual Clauses approved by the European Commission, or reliance on an adequacy decision.
9. Security Measures
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction, in accordance with Article 32 GDPR. These measures are reviewed and updated regularly.
However, no method of electronic transmission or storage is entirely secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.
10. Contact and Updates
If you have any questions or concerns regarding this Privacy Policy or our data processing practices, please contact us at:
Kumuwe
Juliusza Słowackiego 1, Bydgoszcz, Poland
Email: [email protected]
Phone: +48 505 507 051
This Privacy Policy may be updated from time to time to reflect changes in our practices or applicable law. The date at the top of this document indicates when it was last revised. Continued use of our website following any updates constitutes your acknowledgment of the revised policy.