Privacy policy and GDPR

Data controller

The data controller is Viktoriia Kolomiiets, operating under the business name OpenPolandY&V.

For matters relating to personal data, contact:

openpoland.pl@gmail.com

What data may be processed

There is no contact form on the website.

When you visit the website, the hosting infrastructure may automatically process technical data, for example:

• IP address
• browser and device type
• time of the request
• technical logs needed for the operation and security of the website

If you get in touch via:

• e-mail
• Telegram
• Instagram
• Facebook

the following may be processed:

• a name or username
• contact details
• the content of the message
• documents you send
• other information you provide voluntarily

Please send only the data and documents that are genuinely necessary to assess your situation.

Do not send sensitive data, including information about health, biometric data or information about criminal convictions, unless they are necessary for a specific case.

If such data need to be processed, this will only take place where an appropriate legal basis exists.

Purposes and legal bases

• operation and security of the website: the controller’s legitimate interest, Article 6(1)(f) GDPR
• responding to an enquiry, steps prior to entering into a contract, and performance of the requested service: Article 6(1)(b) GDPR
• accounting, tax and other legal obligations: Article 6(1)(c) GDPR
• establishing, pursuing or defending legal claims: Article 6(1)(f) GDPR
• where consent is the legal basis in a specific situation: Article 6(1)(a) GDPR

Providing data is voluntary. However, without the data needed to respond or provide the requested service, it may not be possible to assist you.

Recipients and external services

Access to data may be granted, to the extent necessary, to:

• the hosting provider
• the email provider
• IT and technical support providers
• accounting service providers
• public authorities, where disclosure is required by law

Personal data is not sold.

Telegram, Instagram and Facebook are external services.

If you use these services or contact us through them, your data will also be processed in accordance with their own privacy policies.

Retention period

• technical logs: for as long as necessary to ensure the stability and security of the website, in accordance with the provider’s rules
• enquiry data: for the period necessary to respond to the enquiry and handle the matter, and thereafter until any applicable limitation periods expire
• contract, payment and accounting data: in accordance with statutory time limits
• data processed on the basis of consent: until consent is withdrawn or the purpose of processing ceases

Data subject rights

Depending on the legal basis for processing, you may have the following rights:

• access to data
• rectification of data
• erasure
• restriction of processing
• data portability
• objection to processing based on legitimate interest
• withdrawal of consent, where processing is based on consent

To exercise your rights, contact:

openpoland.pl@gmail.com

You may lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).

Cookies and technical mechanisms

OpenPolandY&V does not use its own analytics or advertising cookies.

Only technical mechanisms needed for the proper operation and protection of the website may be used.

Automated decision-making

OpenPolandY&V does not make decisions about users based solely on automated processing and does not conduct profiling through this website.

Changes to the policy

This policy may be updated if the website’s functionality, data-processing practices or applicable law change.

The current version is published on this page.