Privacy policy
Last updated: 16 August 2026
This Privacy policy sets out how the personal data of Users of the kontaktio.pl website is processed and protected. Data is processed in accordance with the GDPR and applicable law.
This is a translation provided for convenience. In the event of any discrepancy, the Polish version of this Privacy policy prevails.
Data controller
The controller of personal data is Kontaktio Bartosz Fiks, registered at ul. Brzezińska 84, 95-020 Bedoń-Wieś, Poland, tax identification number (NIP) 7282909882, business register number (REGON) 544475638. For matters concerning personal data, contact: kontakt@kontaktio.pl.
Purposes and legal bases of processing
Personal data is processed for the following purposes:
- answering enquiries sent through the contact form or by e-mail and handling correspondence, based on the legitimate interest of the controller (Article 6(1)(f) GDPR),
- running a project and operating the client panel, based on performance of a contract (Article 6(1)(b) GDPR),
- fulfilling legal obligations imposed on the controller (Article 6(1)(c) GDPR),
- establishing, pursuing or defending against claims, based on the legitimate interest of the controller (Article 6(1)(f) GDPR),
- keeping the website secure, diagnostics and anonymous statistical traffic analysis (cookie-free analytics), based on the legitimate interest of the controller (Article 6(1)(f) GDPR).
Scope of data processed
Depending on how the website is used, the following data may be processed:
- data provided in the contact form: first name, e-mail address, optionally company name and the content of the message,
- data provided in the client panel: company details given in the brief, files uploaded by the User, the content of messages, and the full name of the person accepting the contract,
- technical data from server logs: IP address, browser type, operating system.
Recipients of data
Data may be entrusted to entities supporting the operation of the website:
- the website hosting provider (Vercel Inc.),
- hosting providers for the server side of the client panel and the assistant (Render Services, Inc.) and for the database and file storage (Supabase, EU region),
- the provider of the e-mail delivery service used by the contact form (Resend),
- the provider of the business mailbox in which correspondence and messages received from the contact form are stored (Google Ireland Limited, Google Workspace),
- the provider of the language model powering the assistant on the website (OpenAI, L.L.C.), which receives the content of messages typed into the assistant window solely in order to generate a reply,
- entities authorised under provisions of law.
Transfers outside the EEA
Some technical service providers are established outside the European Economic Area, in the United States: Vercel Inc., Render Services, Inc., Resend and OpenAI, L.L.C. The database and files are stored in the European Union region (Supabase). Transfers outside the EEA take place with appropriate safeguards in place, in particular the standard contractual clauses approved by the European Commission. A copy of the safeguards is available on request sent to kontakt@kontaktio.pl.
Assistant on the website (chatbot)
The website features an assistant that answers questions about our offer. The content of messages typed into the assistant window is passed to the language model provider (OpenAI) solely in order to generate a reply, and the course of the conversation is stored on our server so that the conversation stays coherent, usage limits are respected and answer quality can be reviewed.
The basis for processing is the legitimate interest of the controller in handling enquiries and presenting the offer (Article 6(1)(f) GDPR). If an e-mail address or other contact details are left in the assistant window, they are used solely to answer that enquiry.
Please do not provide sensitive data or any information you would rather not share in a conversation with the assistant. Conversation transcripts are deleted after 90 days.
Retention periods
- correspondence and data from the contact form: up to 3 years from the last contact,
- transcripts of conversations with the assistant on the website: up to 90 days,
- technical server logs (including IP address and browser type): up to 12 months, for security and diagnostic purposes,
- data and files in the client panel: for the duration of the project and the limitation period for claims,
- data related to contracts: for the period required by law, for example 5 years for tax purposes.
Your rights
In connection with the processing of your data, you have the right to:
- access your data and obtain a copy of it,
- rectify your data,
- erase your data,
- restrict processing,
- data portability,
- object to processing,
- withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal,
- lodge a complaint with the President of the Polish Personal Data Protection Office.
Cookies and browser storage
The website does not use marketing or advertising cookies and does not profile Users. We use anonymous visit analytics (Vercel Web Analytics), which counts traffic in aggregate, without cookies and without identifying individuals. In the client panel we use browser storage (localStorage) solely to hold the session token, so that refreshing the page does not require logging in again. The assistant on the website stores a conversation identifier in browser session storage (sessionStorage) to keep the conversation coherent. You can remove this data in your browser settings or by using the log out button.
Providing data is voluntary
Providing data is voluntary, but without it you may be unable to contact us or to use some functions of the website.
Automated decision-making
We do not take decisions producing legal effects by automated means, including profiling.
Data security
We apply appropriate technical and organisational measures to protect data, including TLS encryption of connections and restricted access to systems.
Changes to the Privacy policy
We reserve the right to amend this Policy. Users will be informed of material changes in an appropriate manner. Matters not covered by this Policy are governed by the GDPR and Polish law.
Kontaktio Bartosz Fiks, ul. Brzezińska 84, 95-020 Bedoń-Wieś, Poland, NIP 7282909882, REGON 544475638