Hanalo → Privacy Policy

Data Controller

The data controller for this website is the operator of hanalo.info, reachable at Lednicka 6, Szczecin, Poland, and by email at [email protected]. This policy applies to all personal data processed in connection with your use of this website.

Legal Framework

This policy is written in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council (the General Data Protection Regulation, "GDPR"), as applied in Poland, and with the Polish Act of 10 May 2018 on the Protection of Personal Data (Ustawa z dnia 10 maja 2018 r. o ochronie danych osobowych, Dz.U. 2018 poz. 1000).

What Data Is Collected and Why

Contact form submissions: Name, email address, phone number (optional), and message content. Collected when you voluntarily submit the contact form. Used solely to respond to your enquiry. Legal basis: your consent (Article 6(1)(a) GDPR).
Email correspondence: If you contact us directly by email, the content of that communication and your email address are retained for the purpose of handling your communication. Legal basis: legitimate interest (Article 6(1)(f) GDPR).
Cookies and analytics: See the Cookie Policy for full details. Analytical cookies are used only with your explicit consent. Legal basis: consent (Article 6(1)(a) GDPR).
Server logs: Web server logs may record your IP address, browser type, and pages visited for security and operational purposes. These are not used for profiling. Legal basis: legitimate interest (Article 6(1)(f) GDPR).

How Long Data Is Kept

Contact form and email data: retained for up to 24 months from the date of last contact, then deleted.
Server logs: retained for up to 90 days for security purposes.
Cookie consent records: retained for 12 months from the date consent was given or withdrawn.

Data Sharing

Personal data submitted through this website is not sold, rented, or shared with third parties for marketing purposes. Data may be disclosed to:

Hosting and infrastructure providers operating under data processing agreements compliant with GDPR.
Competent public authorities when required by applicable law.

Your Rights Under GDPR

You have the following rights regarding your personal data:

Right of access (Article 15): You may request a copy of the data held about you.
Right to rectification (Article 16): You may request correction of inaccurate data.
Right to erasure (Article 17): You may request deletion of your data where it is no longer necessary for the purpose it was collected.
Right to restriction (Article 18): You may request that processing be restricted in certain circumstances.
Right to data portability (Article 20): Where processing is based on consent, you may request your data in a structured, machine-readable format.
Right to object (Article 21): You may object to processing based on legitimate interests.
Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Polish supervisory authority: Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl.

International Transfers

Where personal data is transferred outside the European Economic Area, such transfers are conducted in accordance with Chapter V of the GDPR, using appropriate safeguards including Standard Contractual Clauses where applicable.

Changes to This Policy

This policy may be updated periodically. Material changes will be indicated by a revised "Last Updated" date. Continued use of the website after such changes constitutes acknowledgement of the revised policy.

Contact

For any questions about this privacy policy or about how your data is handled, contact: [email protected] or write to Lednicka 6, Szczecin, Poland.