Privacy Policy
Last updated: 23 July 2026
This privacy policy explains how we process the personal data of users of the kastin.pl website, in line with the GDPR (EU) 2016/679 and applicable law.
We respect your privacy and collect only the data needed to provide our services and answer your enquiries.
Data controller
The controller of your personal data is KASTIN INTERMEDIA Krzysztof Kabała, NIP 817-216-55-18, REGON 180736840, e-mail: kastin@kastin.pl.
For any matters concerning personal data you may contact the controller at the e-mail address above.
What data we collect
- Contact form data: full name, e-mail address, message content and the selected scope of work.
- Technical data stored in server logs: IP address, browser type, date and time of the request — for security and diagnostics.
- A record of your cookie consent choice (stored locally in your browser).
Purposes and legal bases
- Answering an enquiry sent via the form — based on your consent and our legitimate interest (Art. 6(1)(a) and (f) GDPR).
- Concluding and performing a contract, if the contact leads to one — Art. 6(1)(b) GDPR.
- Ensuring the security and correct operation of the site (logs) — the controller’s legitimate interest, Art. 6(1)(f) GDPR.
Retention period
- Form correspondence — for as long as needed to handle the enquiry, then until any related claims become time-barred.
- Server logs — usually up to several months, for security purposes.
- Contract-related data — for the period required by law (including tax and accounting rules).
Recipients
Data may be entrusted to providers that support the operation of the site, only to the extent necessary and under data-processing agreements:
- the hosting and mail-server provider (technical operation of the site and message delivery),
- the bot-protection (captcha) provider, if enabled.
We do not sell data and do not transfer it outside the European Economic Area, unless we use a provider that ensures an adequate level of protection compliant with the GDPR.
Your rights
You have the right to:
- access your data and receive a copy,
- rectify (correct) your data,
- erase your data,
- restrict processing,
- data portability,
- object to processing based on legitimate interest,
- withdraw consent at any time (without affecting the lawfulness of processing before withdrawal).
To exercise these rights, write to the controller’s e-mail address.
Right to complain
You have the right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.
Voluntariness and profiling
Providing data is voluntary but necessary to answer your enquiry. We do not make decisions solely by automated means and we do not use profiling.
Cookies
The rules for using cookies are described in a separate Cookie Policy.