Documents

Privacy policy

Last updated: 4 October 2026

1. § 1Data controller

   The controller of personal data is Kontaktio Bartosz Fiks, registered at ul. Brzezińska 84, 95-020 Bedoń-Wieś, Poland, tax identification number (NIP) 7282909882, business register number (REGON) 544475638. For matters concerning personal data, contact: kontakt@kontaktio.pl.

2. § 2Purposes and legal bases of processing

   Personal data is processed for the following purposes:

   • answering enquiries sent through the contact form or by e-mail and handling correspondence, based on the legitimate interest of the controller (Article 6(1)(f) GDPR),
   • running a project and operating the client panel, based on performance of a contract (Article 6(1)(b) GDPR),
   • fulfilling legal obligations imposed on the controller (Article 6(1)(c) GDPR),
   • establishing, pursuing or defending against claims, based on the legitimate interest of the controller (Article 6(1)(f) GDPR),
   • keeping the website secure, diagnostics and anonymous statistical traffic analysis (cookie-free analytics), based on the legitimate interest of the controller (Article 6(1)(f) GDPR).

3. § 3Scope of data processed

   Depending on how the website is used, the following data may be processed:

   • data provided in the contact form: first name, e-mail address, optionally phone number, company name and city, the content of the message, and the information about the source of the visit attached to the enquiry (described in the Visit statistics section),
   • data provided in the client panel: company details given in the brief, files uploaded by the User, the content of messages, and the full name of the person accepting the contract,
   • technical data from server logs: IP address, browser type, operating system.

4. § 4Recipients of data

   Data may be entrusted to entities supporting the operation of the website:

   • the provider of website hosting and visit statistics (Vercel Inc.),
   • hosting providers for the server side of the client panel and the assistant (Render Services, Inc.) and for the database and file storage (Supabase, EU region),
   • the provider of the e-mail delivery service used by the contact form (Resend),
   • the provider of the business mailbox in which correspondence and messages received from the contact form are stored (Google Ireland Limited, Google Workspace),
   • the provider of the language model powering the assistant on the website (OpenAI, L.L.C.), which receives the content of messages typed into the assistant window solely in order to generate a reply,
   • entities authorised under provisions of law.

5. § 5Transfers outside the EEA

   Some technical service providers are established outside the European Economic Area, in the United States: Vercel Inc., Render Services, Inc., Resend and OpenAI, L.L.C. The database and files are stored in the European Union region (Supabase). Transfers outside the EEA take place with appropriate safeguards in place, in particular the standard contractual clauses approved by the European Commission. A copy of the safeguards is available on request sent to kontakt@kontaktio.pl.

6. § 6Assistant on the website (chatbot)

   The website features an assistant that answers questions about our offer. The content of messages typed into the assistant window is passed to the language model provider (OpenAI) solely in order to generate a reply, and the course of the conversation is stored on our server so that the conversation stays coherent, usage limits are respected and answer quality can be reviewed.

   The basis for processing is the legitimate interest of the controller in handling enquiries and presenting the offer (Article 6(1)(f) GDPR). If an e-mail address or other contact details are left in the assistant window, they are used solely to answer that enquiry.

   Please do not provide sensitive data or any information you would rather not share in a conversation with the assistant. Conversation transcripts are deleted after 90 days.

7. § 7Visit statistics

   We measure traffic on the website with Vercel Web Analytics, without cookies and without profiling. For each page view the following is recorded: the address of the page visited, the address of the page the visitor came from, an approximate location derived from the IP address (country, region, city), device type, operating system and browser. We also count actions on the website, such as moving to the next step of the form and sending it, clicking the phone number or e-mail address, downloading the contact card, opening the assistant and sending it the first message, always together with the address of the page where they took place. Text typed into the form or the assistant window is not included in the statistics.

   The tool does not recognise visitors across websites or across days: visits are told apart by a hash computed from the request, which is discarded after 24 hours. We only look at the results as aggregate statistics, to learn which pages and traffic sources lead to contact. The basis for processing is the legitimate interest of the controller (Article 6(1)(f) GDPR), and the tool is provided by Vercel Inc.

   An enquiry sent through the contact form includes information about where the visit came from: the first page of the website opened in that browser tab, the address of the referring page (without parameters) and the utm campaign parameters, if they were present in the address. This information is saved in browser session storage (sessionStorage) on the first visit and disappears when the tab is closed; once attached to an enquiry, it is kept for the same purpose and for the same period as the rest of the enquiry.

8. § 8Retention periods

   • correspondence and data from the contact form: up to 3 years from the last contact,
   • transcripts of conversations with the assistant on the website: up to 90 days,
   • technical server logs (including IP address and browser type): up to 12 months, for security and diagnostic purposes,
   • data and files in the client panel: for the duration of the project and the limitation period for claims,
   • data related to contracts: for the period required by law, for example 5 years for tax purposes.

9. § 9Your rights

   In connection with the processing of your data, you have the right to:

   • access your data and obtain a copy of it,
   • rectify your data,
   • erase your data,
   • restrict processing,
   • data portability,
   • object to processing,
   • withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal,
   • lodge a complaint with the President of the Polish Personal Data Protection Office.

10. § 10Cookies and browser storage

    The website does not use marketing or advertising cookies and does not profile Users. We use anonymous visit analytics (Vercel Web Analytics), which counts traffic in aggregate, without cookies and without identifying individuals. In the client panel we use browser storage (localStorage) solely to hold the session token, so that refreshing the page does not require logging in again. The assistant on the website stores a conversation identifier in browser session storage (sessionStorage) to keep the conversation coherent, and the website stores there the information about the source of the visit described in the Visit statistics section. You can remove this data in your browser settings or by using the log out button.

11. § 11Providing data is voluntary

    Providing data is voluntary, but without it you may be unable to contact us or to use some functions of the website.

12. § 12Automated decision-making

    We do not take decisions producing legal effects by automated means, including profiling.

13. § 13Data security

    We apply appropriate technical and organisational measures to protect data, including TLS encryption of connections and restricted access to systems.

14. § 14Changes to the Privacy policy

    We reserve the right to amend this Policy. Users will be informed of material changes in an appropriate manner. Matters not covered by this Policy are governed by the GDPR and Polish law.

Kontaktio Bartosz Fiks, ul. Brzezińska 84, 95-020 Bedoń-Wieś, Poland, NIP 7282909882, REGON 544475638