Your data, briefly

1. Who is responsible for your data

The controller of personal data (GDPR, Regulation (EU) 2016/679) is the business named above. For anything about your data, write to the email address above. No data protection officer has been appointed.

2. The contact form

What is collected: your name, email address, optionally your company, your message and the page language. A hidden anti-spam field should stay empty and is not stored.

Why: to reply to your message, prepare a quote and, if we work together, to enter into and perform the contract.

Legal basis: Art. 6(1)(b) GDPR (steps at your request before a contract) and Art. 6(1)(f) GDPR (our legitimate interest in replying to messages and defending legal claims).

How long: messages that do not lead to a project are deleted no later than 12 months after the last contact. Project records are kept as long as Polish tax and accounting law requires (5 years from the end of the year in which the tax obligation arose).

Providing data is voluntary, but without an email address we cannot reply.

3. YouTube videos

Video thumbnails are stored on our own server, so browsing the page does not connect you to YouTube. Only when you click a film does the player load from youtube-nocookie.com (privacy-enhanced mode). From then on YouTube, i.e. Google Ireland Ltd., receives your IP address and browser information and processes them as a separate controller under Google’s privacy policy (policies.google.com/privacy). Data may be transferred to the USA; Google participates in the EU-US Data Privacy Framework.

The basis is your own action of clicking a film (Art. 6(1)(a) and (f) GDPR). If you do not want to connect to YouTube, do not start the videos.

4. Server logs

The server automatically records technical data for each request: IP address, date and time, requested address, referring page and browser. This is needed to run and secure the site (Art. 6(1)(f) GDPR). The hosting provider keeps the logs for a limited period. We do not combine them with other data.

5. What this site does not do

• –No cookies of any kind, so there is no cookie banner.
• –No analytics, advertising or tracking pixels.
• –Fonts, thumbnails and the background video are served from our own server.
• –No profiling and no automated decision-making.

6. Who else sees your data

The hosting provider, WEBD.pl (Globtel Internet Szymon Hersztek, ul. Matecznikowa 2/1, 80-126 Gdańsk, NIP 9570804786), stores the website, logs and mailbox as a processor on our behalf. Accounting records may go to an accountant and to tax authorities where the law requires it. Nobody else receives your data.

The servers are in the Netherlands, in a data centre operated by OVHcloud (OVH), which acts as the hosting provider’s sub-processor, so your data stays in the European Union. The only exception is the YouTube player described in section 3, and only after you click a film.

7. Your rights

• –Access your data and get a copy (Art. 15).
• –Have it corrected (Art. 16) or deleted (Art. 17).
• –Restrict processing (Art. 18).
• –Receive it in a portable format (Art. 20).
• –Object to processing based on legitimate interest (Art. 21).

To use any of these rights, email ewa@visilab.net. We reply within one month. You may also complain to the Polish supervisory authority, the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl), or to the authority in your own EU country.

8. Changes

If the way this site handles data changes, this page will be updated before the change, together with the date above.