Privacy Policy

This Privacy Policy describes how Kipaku (operating at kipaku.info, with registered address at Boczna 12, Wrocław, Poland) collects, processes, stores, and protects personal data. It applies to all visitors of the website and all individuals who interact with Kipaku's services. This policy is prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation, hereinafter "GDPR") and the Polish Act of 10 May 2018 on the Protection of Personal Data (Dz. U. 2018 poz. 1000, as amended).

1. Data Controller

The data controller responsible for your personal data is:

Name	Kipaku
Address	Boczna 12, Wrocław, Poland
Email	[email protected]
Phone	+48 71 333 93 50
Website	kipaku.info

2. Categories of Personal Data Collected

Depending on how you interact with this website, the following categories of personal data may be collected:

Data Category	Examples	Purpose	Legal Basis
Contact data	Name, email address	Responding to inquiries submitted via contact form	Art. 6(1)(b) GDPR (pre-contractual steps) / Art. 6(1)(f) GDPR (legitimate interest)
Communication data	Content of messages sent through contact form	Handling and responding to the inquiry	Art. 6(1)(b) GDPR
Technical data	IP address, browser type, device type, pages visited, time of visit	Website security, analytics, and performance monitoring	Art. 6(1)(f) GDPR (legitimate interest)
Cookie data	Cookie identifiers, consent preferences	Storing user preferences, analytics (where consented)	Art. 6(1)(a) GDPR (consent) for non-essential cookies

3. Purposes and Legal Bases for Processing

Kipaku processes personal data only where a lawful basis exists under Article 6 of the GDPR:

• Responding to inquiries (Art. 6(1)(b)): When you submit the contact form, your name, email, and message content are processed to respond to your inquiry.
• Legitimate interests (Art. 6(1)(f)): Technical data is processed to maintain website security and improve service quality. This interest does not override your fundamental rights.
• Consent (Art. 6(1)(a)): Where you have given explicit consent, for example to the use of analytics cookies, data is processed on that basis. You may withdraw consent at any time.
• Legal obligation (Art. 6(1)(c)): Where required by applicable Polish or EU law, data may be retained or disclosed.

4. Data Retention Periods

Data Type	Retention Period	Reason
Contact form submissions	24 months from last contact	Legitimate interest in follow-up and service continuity
Technical / server logs	90 days	Security monitoring
Cookie consent records	12 months	Demonstrating compliance with consent obligations
Accounting and contractual records	5 years	Polish tax law (Ustawa o rachunkowości)

5. Data Recipients and Transfers

Kipaku does not sell personal data to third parties. Data may be shared with the following categories of recipients:

• Hosting and infrastructure providers (operating within the EEA or under standard contractual clauses where outside the EEA)
• Email service providers (for managing correspondence)
• Analytics service providers (only where consent has been given)
• Competent public authorities, where required by applicable law

Any transfer of personal data outside the European Economic Area is conducted only with appropriate safeguards in place, such as Standard Contractual Clauses approved by the European Commission under Article 46 GDPR.

6. Your Rights as a Data Subject

Under the GDPR and Polish data protection law, you have the following rights with respect to your personal data:

Right	Description
Right of access (Art. 15)	You may request a copy of the personal data we hold about you.
Right to rectification (Art. 16)	You may request correction of inaccurate or incomplete data.
Right to erasure (Art. 17)	You may request deletion of your data where no longer necessary for the purpose it was collected.
Right to restriction (Art. 18)	You may request that processing be restricted in certain circumstances.
Right to data portability (Art. 20)	Where processing is based on consent or contract, you may request your data in a structured, machine-readable format.
Right to object (Art. 21)	You may object to processing based on legitimate interests.
Right to withdraw consent (Art. 7(3))	Where processing is based on consent, you may withdraw at any time without affecting prior lawful processing.

To exercise any of these rights, contact us at: [email protected]. We will respond within 30 days as required by GDPR.

7. Right to Lodge a Complaint

If you believe your personal data has been processed in violation of applicable law, you have the right to lodge a complaint with the Polish supervisory authority:

Urząd Ochrony Danych Osobowych (UODO)
ul. Stawki 2, 00-193 Warsaw, Poland
Website: uodo.gov.pl

8. Cookies

This website uses cookies. For detailed information about the types of cookies used, their purposes, and how to manage them, please refer to our Cookie Policy.

9. Security Measures

Kipaku implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, or alteration. These measures include encrypted data transmission (HTTPS), access controls, and regular security reviews.

10. Changes to This Policy

This Privacy Policy may be updated periodically to reflect changes in legal requirements or our data practices. The date at the top of this document indicates when it was last revised. We encourage you to review this policy periodically.

11. Contact

For any questions, requests, or concerns relating to this Privacy Policy or the processing of your personal data, please contact us at:

Kipaku
Boczna 12, Wrocław, Poland
Email: [email protected]
Phone: +48 71 333 93 50