Privacy Policy

Purpose of collecting personal data

Personal data is used for the following purposes:

• execution of the contract for the provided services,
• communication with the user,
• online marketing,
• personalization of the Website for users,
• analytical and statistical activities,
• establishing and pursuing claims or defense against them.

Providing data is voluntary but necessary to conclude a contract for the performance of certain pre-agreed services.

Type of processed personal data

The Administrator may process the following personal data:

• first and last name,
• full company name,
• home address / company address,
• email address,
• VAT ID.

Personal data processing period

User personal data will be processed for the period:

• when the basis for data processing is the performance of a contract – until the limitation period for claims after its performance,
• when the basis for data processing is consent – until it is withdrawn, and after withdrawal until the limitation period for claims.

In both cases, the limitation period is 6 years, and for claims for periodic benefits and claims related to business activity – 3 years (unless a specific provision provides otherwise).

Sharing personal data

User personal data may be transferred to: entities related to the Administrator, its subcontractors, entities cooperating with the Administrator, e.g. accounting firms, law firms.

User personal data will not / will be transferred outside the European Economic Area (EEA).

User rights

The user has the following rights:

• the right to access their personal data, rectify, delete, limit processing, transfer, object to processing, withdraw consent at any time,
• requests related to the above rights should be sent to hello@kubanawrot.com,
• the Administrator fulfills or refuses to fulfill the request immediately – no later than within a month of receiving it,
• the right to lodge a complaint with the President of the Personal Data Protection Office if they believe their rights and freedoms have been violated (GDPR).

Cookies policy

The Website uses a single functional cookie named lang to store your language preference (Polish or English). This is a first-party, necessary cookie with a 1-year expiry. It does not track you and does not require your consent under GDPR or the ePrivacy Directive.

No tracking cookies, no session cookies, and no third-party cookies are used on this Website.

Automated decision-making and profiling

User data is not processed in an automated way that could result in any decisions being made about them.

User data may be profiled in order to tailor content and personalize the offer after their consent.

Third-party services

The Website uses privacy-focused third-party services for statistical analysis and ensuring reliable operation of the website. These services are configured to protect your privacy:

• Vercel Web Analytics – used to monitor website traffic and usage patterns in a privacy-friendly way. This service does not use cookies, does not collect personally identifiable information (PII), and processes all data anonymously.
• Vercel Hosting – our infrastructure provider that collects essential server-side data (such as request logs) necessary for the security, stability, and proper functioning of the Website.
• Resend – used to deliver contact form submissions and configurator requests to the site owner via email. When you submit a form, your name, email address, and message are transmitted through Resend's servers for delivery purposes only. Resend acts as a data processor (GDPR Art. 28) and does not retain your data beyond email delivery.

All data is processed in compliance with the GDPR. Since we do not use tracking cookies or collect personal data via these analytics, explicit user consent (a cookie banner) is not required for your visit to this Website.

Final provisions

The Administrator has the right to make changes to the Privacy Policy, provided that the rights of the Users are not limited.

Information about the introduced changes will appear in the form of a notice available on the Website.

In matters not covered by this Privacy Policy, the provisions of the GDPR and Polish law apply.