Privacy Policy

1. Controller

The controller of your personal data is HELOBRAND SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ (Helobrand Sp. z o.o.), registered office in Kraków, ul. Ujastek 1, 31‑752 Kraków, Poland, entered in the register of entrepreneurs of the National Court Register under KRS number 0001076794, tax ID (NIP) 6793286140, REGON 527245854.

For anything about your personal data, write to helobrand@helobrand.pl or by post to the registered office.

2. What data we process and where it comes from

When you send the form, you give us your name, e-mail address and message. If you write to us by e-mail, we process the data in that correspondence.

When you open the site, the hosting provider, Cloudflare, processes technical connection data such as your IP address and browser type. It is needed to deliver the site and protect it from abuse.

3. Why, and on what legal basis

• Replying to your message and any further correspondence: Article 6(1)(f) GDPR, our legitimate interest in answering people who write to us. If you ask about working together, also Article 6(1)(b) GDPR (steps taken at your request before entering into a contract).
• Protecting the form from spam and bots (Cloudflare Turnstile): Article 6(1)(f) GDPR.
• Establishing, pursuing or defending legal claims, should that be needed: Article 6(1)(f) GDPR.

The checkbox under the form confirms that you know this policy. It is not consent to process your data for any other purpose.

4. Who receives the data

We use two companies that process data only on our instructions, under data processing agreements:

• Cloudflare, Inc.: site hosting, form protection (Turnstile) and delivering the form message to our mailbox.
• Google Ireland Limited: Google Workspace, the e-mail service where we receive messages.

We do not sell data and do not pass it on to anyone for marketing.

5. Transfers outside the European Economic Area

Cloudflare and Google may also process data outside the EEA, including in the USA. The transfer is based on the European Commission's adequacy decision (EU-US Data Privacy Framework) and on standard contractual clauses.

6. How long we keep the data

We keep form messages and correspondence for up to 12 months after the last message. If we sign a contract, we keep them for its duration and until the limitation period for claims ends.

Cloudflare deletes technical connection data automatically, under its own rules.

7. Your rights

• access to your data and a copy of it,
• rectification,
• erasure,
• restriction of processing,
• data portability, where we process the data under a contract,
• objection to processing based on our legitimate interest,
• a complaint to the President of the Personal Data Protection Office (Prezes UODO, ul. Stawki 2, 00‑193 Warsaw, Poland).

To use these rights, write to helobrand@helobrand.pl. We will reply without undue delay, at the latest within one month.

8. Do you have to give us your data

No. Giving your data is voluntary, but without a name, an e-mail address and a message we cannot reply. We make no automated decisions and do no profiling.

9. Cookies

The site uses no cookies for advertising or tracking and shows no consent banner, because there is nothing to accept.

Cloudflare Turnstile, which protects the form, may store data in your browser that it needs to check that a person is sending the form. Visits are counted by Cloudflare Web Analytics, without cookies and without identifying anyone.

10. Security

The site works only over an encrypted connection (HTTPS). Form messages are not stored on the website's server: they go straight to our mailbox.

11. Changes to this policy

When we change this policy, we publish the new version on this page and update the date at the top.