1. Data Controller
The controller of personal data is KUBANT Sp. z o.o., with its registered office in Warsaw (00-102), ul. Marszalkowska 115/338, Poland, VAT ID: 5252994238 (hereinafter: the “Controller”). For matters related to data protection, please contact: info@kubant.pl
2. Scope of this document
This Privacy Policy explains the principles of processing personal data of individuals visiting the website and persons contacting the Controller (e.g. via contact form, email or telephone).
3. What data we process
Depending on how you use the website, we may process:
• contact and identification data (e.g. first name, last name, email address, telephone number),
• company data (e.g. company name) – if provided,
• content of enquiries and correspondence,
• technical data related to website usage (e.g. IP address, browser/device information, server logs, security event data).
Please do not provide sensitive data (special categories of data) in your messages.egorii danych).
4. Purposes and legal basis of processing
4.1. Contact and handling of enquiries
We process personal data in order to respond to enquiries, conduct correspondence and determine the scope of potential cooperation.
Legal basis:
Article 6(1)(f) GDPR (legitimate interest of the Controller consisting in communication and handling enquiries) and, where applicable, Article 6(1)(b) GDPR (actions taken prior to entering into a contract).
4.2. Security and proper functioning of the website
We process technical data (including logs) to ensure security, detect abuse, prevent attacks, diagnose errors and maintain website stability.
Legal basis: Article 6(1)(f) GDPR.
4.3. Legal obligations
If cooperation is established, personal data may also be processed for the purpose of fulfilling legal obligations (e.g. accounting or tax obligations).
Legal basis: Article 6(1)(c) GDPR.
5. Is providing data mandatory?
Providing personal data is voluntary; however, when contacting us (e.g. via contact form or email), certain data is necessary in order to respond and conduct correspondence. Failure to provide such data may make it impossible to respond.
6. Data retention period
- correspondence and enquiry data – for the duration of communication and subsequently for the period required by limitation rules under applicable law,
- technical data and logs – for the period resulting from server configuration and security tools,
- data processed on the basis of legal obligations – for the period required by applicable law.
7. Data recipients
Personal data may be transferred to entities supporting the Controller in the operation of the website and IT infrastructure, in particular:
- hosting providers and server service providers,
- email and IT service providers,
- entities providing security, maintenance and backup services.
Such entities process data on the basis of data processing agreements or as independent controllers, depending on the nature of the service provided.
8. Transfers outside the EEA
As a rule, personal data is processed within the European Economic Area. If, in connection with the use of IT service providers, data is transferred outside the EEA, such transfer shall take place in compliance with applicable legal safeguards (e.g. standard contractual clauses).
9. Rights of data subjects
You have the right to:
- access your personal data,
- rectify your data,
- erase your data,
- restrict processing,
- data portability (where provided by law),
- object to processing based on Article 6(1)(f) GDPR,
- lodge a complaint with a supervisory authority.
In Poland, the supervisory authority is the President of the Personal Data Protection Office.
Complaints may be lodged if you believe that the processing of personal data violates GDPR provisions.
For matters related to personal data, please contact:
info@kubant.pl
10. Cookies
The website uses cookies and similar technologies to ensure proper functioning and security. Detailed information, including types of cookies and consent management, can be found in the Cookie Policy and in the consent banner displayed on the website.
11. Automated decision-making
The Controller does not make decisions in an automated manner, including profiling that would produce legal effects.
12. Changes to the Privacy Policy
This Privacy Policy may be updated, in particular in the event of changes to website functionality or legal requirements. The current version is published on this page.