Privacy Policy

Data Controller

• Name: Wofuhu Nihuro
• Address: Wiślna 9/5, 31-015 Kraków, Poland
• Email: [email protected]
• Phone: +48 787 499 696

Personal Data We Collect

We collect personal data only when you voluntarily provide it. The categories of data we may process are:

• Contact data: name, email address, telephone number, message content — collected when you submit the contact form.
• Technical data: IP address, browser type, device type, pages visited, time of visit — collected automatically through server logs and, where consented, analytics cookies.
• Cookie preference data: your choices regarding cookie categories, stored locally in your browser.

We do not collect sensitive categories of personal data (special categories under Art. 9 GDPR).

Legal Bases for Processing

• Contract performance / pre-contractual steps (Art. 6(1)(b) GDPR): processing contact form submissions to respond to enquiries.
• Legitimate interests (Art. 6(1)(f) GDPR): server log analysis for security and technical maintenance; fraud prevention.
• Consent (Art. 6(1)(a) GDPR): optional analytics and preference cookies, where you have given explicit consent via the cookie banner.
• Legal obligation (Art. 6(1)(c) GDPR): retention of records where required by Polish law.

How We Use Your Data

• To respond to your contact form enquiries
• To maintain and improve website security and functionality
• To analyse aggregated traffic patterns (only with your consent)
• To fulfil legal obligations under Polish and EU law

We do not use your personal data for automated decision-making or profiling as defined in Art. 22 GDPR.

Data Retention

• Contact form data is retained for a period of 12 months from the date of submission, unless a longer retention period is required by law or by the nature of an ongoing correspondence.
• Server log data is retained for up to 90 days.
• Cookie consent records are retained for 12 months.

Data Sharing and Transfers

We do not sell, rent, or trade personal data. We may share data with:

• Hosting and infrastructure providers who process data on our behalf as data processors under Art. 28 GDPR agreements.
• Public authorities when required by law, court order, or regulatory obligation.

Where data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place as required by Chapter V of GDPR, including Standard Contractual Clauses where applicable.

Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15) — to obtain a copy of data we hold about you
• Right to rectification (Art. 16) — to correct inaccurate data
• Right to erasure (Art. 17) — to request deletion where no legal basis for retention exists
• Right to restriction of processing (Art. 18)
• Right to data portability (Art. 20) — where processing is based on consent or contract
• Right to object (Art. 21) — to processing based on legitimate interests
• Right to withdraw consent at any time, without affecting lawfulness of prior processing

To exercise any of these rights, contact us at [email protected]. We will respond within one month as required by Art. 12 GDPR.

Supervisory Authority

You have the right to lodge a complaint with the Polish supervisory authority: Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warsaw, Poland. Website: uodo.gov.pl.

Cookies

This website uses cookies. For detailed information on the types of cookies used, their purpose, and how to manage your preferences, please refer to our Cookie Policy.

Changes to This Policy

We may update this Privacy Policy to reflect changes in law or our data practices. The "Last Updated" date at the top of this page indicates the most recent revision. Continued use of the website following any update constitutes acknowledgement of the revised policy.