GDPR Information

General Data Protection Regulation

1. Data Controller

The controller of your personal data is:

stormy-geyser
ul. Marszałkowska 84/92
00-514 Warszawa
Poland
Email: [email protected]

2. Processing Purposes

Your personal data will be processed for the following purposes:

2.1. Provision of Services

Fulfillment of ordered consulting, educational, and research services in accordance with the concluded contract.

Legal basis: Art. 6(1)(b) GDPR (contract performance)

Storage period: for the duration of the contract and for the period required by law

2.2. Contact and Communication

Answering questions sent via the contact form or by email.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest)

Storage period: until the inquiry is answered or consent is withdrawn

2.3. Direct Marketing

Sending information about new services, educational materials, and offers.

Legal basis: Art. 6(1)(a) GDPR (consent) or Art. 6(1)(f) GDPR (legitimate interest)

Storage period: until consent is withdrawn or objection is raised

2.4. Analysis and Statistical Purposes

Analyzing user behavior to optimize the website and services.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest)

Storage period: until objection is raised

2.5. Archiving and Proof Purposes

Archiving data for evidentiary purposes in case the legality needs to be proven.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest)

Storage period: according to the limitation periods specified in the Civil Code

3. Recipients of Personal Data

Your personal data may be disclosed to the following categories of recipients:

  • IT and hosting service providers (who process data on our behalf)
  • Email sending system providers
  • Analytics tool providers
  • Economic and legal service providers
  • State authorities authorized by legal provisions

We do not transfer personal data to third countries (outside the European Economic Area) or international organizations.

4. Your Rights

In connection with the processing of personal data, you have the following rights:

4.1. Right to Access (Art. 15 GDPR)

You can obtain information about whether we process your personal data, and if so – access it and request a copy.

4.2. Right to Rectification (Art. 16 GDPR)

You can request the rectification of inaccurate data or the completion of incomplete data.

4.3. Right to Erasure (Art. 17 GDPR)

In certain cases, you can request the erasure of your personal data ("right to be forgotten").

4.4. Right to Restriction of Processing (Art. 18 GDPR)

In certain situations, you can request the restriction of the processing of your data.

4.5. Right to Data Portability (Art. 20 GDPR)

You can receive your data in a structured, commonly used and machine-readable format and transmit it to another controller.

4.6. Right to Object (Art. 21 GDPR)

You can object to the processing of your data for marketing purposes or if the processing is based on the legitimate interest of the controller.

4.7. Right to Withdraw Consent (Art. 7(3) GDPR)

If the processing is based on consent, you can withdraw it at any time. The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5. How can you exercise your rights?

To exercise the above rights, please contact us:

  • Email: [email protected]
  • By post: stormy-geyser, ul. Marszałkowska 84/92, 00-514 Warszawa

We will comply with your request immediately, but no later than one month after receipt. If necessary, we may extend this period by another two months, informing you of the reasons for the delay.

6. Right to Lodge a Complaint

If you believe that the processing of your personal data violates the provisions of the GDPR, you have the right to lodge a complaint with the supervisory authority:

President of the Personal Data Protection Office
ul. Stawki 2
00-193 Warszawa
Tel.: 22 531 03 00
www.uodo.gov.pl

7. Data Security

We apply appropriate technical and organizational measures to ensure the security of the processed data, including:

  • Encryption of data transmission (HTTPS protocol)
  • Access control to systems and data
  • Regular backups
  • Employee training in data protection
  • Procedures for reporting and handling data breaches

8. Obligation to Provide Data

The provision of personal data is:

  • Voluntary for contact forms and newsletter subscription
  • Necessary to the extent required for the conclusion and performance of the contract

Failure to provide the necessary data may make it impossible to provide the service or conclude the contract.

9. Automated Decision-Making

Your data will not be processed automatically (including profiling) to an extent that produces legal effects concerning you or similarly significantly affects you.

10. Contact Regarding Data Protection

If you have any questions about the processing of your personal data or the exercise of your rights, please contact us at:

Email: [email protected]