PL

Privacy Policy

This Privacy Policy sets out the rules for the processing and protection of personal data of users of the skedo.pl website (hereinafter: the "Website").

1. Data controller

The controller of personal data is:

Skedo Katarzyna Dębczak
ul. Głogowska 31/33, 60-702 Poznań, Poland
NIP: 5372594493, REGON: 385417285
Email: kontakt@skedo.pl

hereinafter referred to as the "Controller".

2. Scope of collected data

The Website collects personal data only to the extent necessary to handle enquiries submitted via the contact form. The collected data includes:

  • first name,
  • email address,
  • message content.

Providing the above data is voluntary but necessary to submit an enquiry and receive a response.

3. Purposes and legal bases for processing

Personal data is processed for the following purposes:

  • Handling contact form enquiries — based on Art. 6(1)(f) GDPR (the Controller's legitimate interest in responding to enquiries received). Submitting the contact form constitutes an expression of intent to establish contact.
  • Establishing, pursuing or defending against claims — based on Art. 6(1)(f) GDPR (the Controller's legitimate interest).

4. Data retention period

Personal data is stored for the period necessary to fulfil the purpose for which it was collected, i.e.:

  • contact form data — for the duration of the correspondence and subsequently for the limitation period for any claims (up to 3 years after the end of the correspondence),
  • server logs — in accordance with the retention policy of the hosting provider (Cloudflare).

5. Data recipients

Personal data may be disclosed to the following categories of recipients:

  • Cloudflare, Inc. (USA) — website hosting and bot verification (Cloudflare Turnstile),
  • Resend, Inc. (USA) — delivery of emails sent from the contact form,
  • Google LLC (USA) — loading fonts (Google Fonts), which involves the transfer of the user's IP address.

The above providers may process data as independent controllers or processors, in accordance with their own privacy policies.

6. Transfer of data to third countries

In connection with the use of services provided by the entities listed in section 5, personal data may be transferred to the United States of America. The transfer is carried out on the basis of:

  • standard contractual clauses (SCCs) approved by the European Commission,
  • an adequacy decision of the European Commission (EU-U.S. Data Privacy Framework) — to the extent applicable to the entities covered by that decision,
  • or other appropriate safeguards required by Art. 46 GDPR.

7. Cookies and local technologies

The Website does not use cookies for analytical or marketing purposes.

The Website uses:

  • Cloudflare Turnstile — a bot verification mechanism that may set technical cookies necessary for its operation. This is a strictly functional solution required to secure the contact form.
  • localStorage — the Website may store language preference in the browser's localStorage. This does not constitute a cookie and does not contain personal data.

8. Server logs

The Website is hosted on the Cloudflare platform, which automatically collects standard server logs including, among others, IP address, date and time of the request, browser type and the requested URL. These logs are processed for technical and security purposes by Cloudflare in accordance with its privacy policy.

9. Rights of data subjects

In connection with the processing of personal data, you have the following rights:

  • right of access to data (Art. 15 GDPR),
  • right to rectification of data (Art. 16 GDPR),
  • right to erasure of data (Art. 17 GDPR),
  • right to restriction of processing (Art. 18 GDPR),
  • right to data portability (Art. 20 GDPR),
  • right to object to processing (Art. 21 GDPR),
  • right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (UODO) (ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl).

To exercise the above rights, please contact us at: kontakt@skedo.pl.

10. Profiling and automated decision-making

The Controller does not carry out profiling or automated decision-making within the meaning of Art. 22 GDPR.

11. Analytics and tracking

The Website does not use analytics tools (such as Google Analytics), tracking pixels or advertising tools.

12. Changes to the Privacy Policy

The Controller reserves the right to amend this Privacy Policy. Significant changes will be communicated via the Website. The current version of the Privacy Policy is always available at: /en/privacy-policy/.

13. Effective date

This Privacy Policy is effective as of 23 February 2026.