Privacy policy
This is a translation; in case of discrepancies, the Polish version prevails. Polska wersja
This page explains what personal data we process when you visit craftprojects.pl or write to us through the contact form.
Data controller
The controller is Craftprojects sp. z o.o., al. Wiśniowa 43A, 53-137 Wrocław, Poland, tax ID (NIP) 8992994188, KRS 0001107195. For any personal data matters, write to biuro@craftprojects.pl.
Data protection officer and automated decisions
We have not appointed a data protection officer — for any data matters, write to biuro@craftprojects.pl. We do not make automated decisions about you and do not profile you.
Contact form and correspondence
When you send the form, write or call us, we process the data you provide (name, e-mail address, message and, for calls, your phone number) to answer your enquiry. The legal basis is our legitimate interest in handling correspondence (Art. 6(1)(f) GDPR) and, if the enquiry concerns a contract, steps taken before entering into it (Art. 6(1)(b) GDPR). Providing the data is voluntary, but we cannot reply without it.
Where form data goes
A message sent through the form passes through Microsoft Azure (a server in the United States) and is delivered to our Microsoft 365 mailbox. Microsoft processes the data on our behalf under a data processing agreement. The transfer to the USA is based on the European Commission adequacy decision for the EU-US Data Privacy Framework, in which Microsoft participates. We do not sell the data or share it with anyone else unless required by law.
Recipients
Data may only be received by entities that help us run the business: IT and e-mail service providers (Microsoft) and, if we start working together, our accounting office and legal advisers, under contracts and only as far as necessary. We disclose data to public authorities only when required by law.
How long we keep data
We keep correspondence for as long as needed to handle the enquiry and, if we start working together, for the duration of the contract, until claims become time-barred and as long as the law requires (e.g. tax law). Keeping documents required by law is based on a legal obligation (Art. 6(1)(c) GDPR).
Hosting and technical data
The website runs on Microsoft Azure. On every visit the server automatically processes technical data (such as IP address, browser type and time of visit) to display the page and protect it from abuse, based on our legitimate interest (Art. 6(1)(f) GDPR). Page content may be delivered from Microsoft servers in various countries, including outside the European Economic Area, on the terms described above.
Cookies
The website uses no cookies or analytics tools and loads nothing from other servers. Your chosen theme (light or dark) is stored only in your browser and never reaches us.
Security and links to other services
The website works only over an encrypted connection (HTTPS), and only authorised people at Craftprojects have access to messages. The site links to other services (e.g. GitHub) — once you go there, their privacy rules apply.
Your rights
You have the right to access, rectify, erase, restrict and port your data, and to object to processing based on legitimate interest. Write to biuro@craftprojects.pl. You may also lodge a complaint with the Polish supervisory authority (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa).
Changes to this policy
We update this policy when the way we process data changes (e.g. service provider or server location). The current version and the date of the last change are always on this page.