Privacy Policy

1. Who we are

This website, dkweb.com.pl, is operated by D&K WEB ("we", "us"), a digital product & web agency based in Kraków, Poland. We are the data controller for the personal data described in this policy. If you have any question about how we handle your data, contact us at kontakt@dkweb.com.pl.

2. What personal data we collect

We collect personal data in a few limited ways:

• Contact form. When you submit the form on our Contact page, we receive your name, email address, and — if you choose to provide them — your company name, project type, budget range and message.
• Direct email. If you email us directly, we receive whatever information is contained in that email and your email address.
• Cookies and similar technologies. Depending on the choices you make in our cookie banner, we (or third-party services we use) may store small amounts of data in your browser. See section 4 below.
• Technical data. Like most websites, our server and the third-party services we use (e.g. Google reCAPTCHA) automatically process some technical data — such as IP address, browser type and device information — needed to deliver the site and to detect spam or abuse.

We do not knowingly collect any special categories of data (e.g. health, religion, political views) through this website, and we ask that you don't include such information in the contact form message.

3. Why we process your data, and on what legal basis

• To respond to your enquiry and discuss a potential project — based on your consent and, once a project is being discussed, on the steps necessary to enter into a contract (Art. 6(1)(a) and (b) GDPR).
• To operate, secure and improve this website — based on our legitimate interest in keeping the site functional, secure and reliable (Art. 6(1)(f) GDPR).
• To measure site usage and, if we run any, personalise advertising — only where you have given consent through our cookie banner (Art. 6(1)(a) GDPR). You can withdraw this consent at any time.
• To protect the site against spam and abuse — via Google reCAPTCHA, based on our legitimate interest in keeping the contact form usable and free of automated abuse (Art. 6(1)(f) GDPR).

4. Cookies

We use a cookie consent tool that lets you choose which categories of cookies you're comfortable with. You can review and change your choice at any time using the "Cookie settings" link in the footer of this site.

• Necessary. Required for the site to function — for example, remembering your cookie preference. These cannot be switched off, as the site would not work correctly without them.
• Analytics. If you consent, we may use tools such as Google Analytics to understand how visitors use the site, so we can improve it. These are only active if you opt in.
• Marketing. If you consent, we may use tools such as Google Ads to measure and, where relevant, personalise advertising. These are only active if you opt in.

Google reCAPTCHA, which protects our contact form, is treated separately from these categories: it runs whenever you use the contact form, because it's necessary to keep the form usable and free of spam. Google's own privacy practices for reCAPTCHA are described in the Google Privacy Policy.

5. Who we share your data with

We don't sell your personal data. We share it only with service providers who help us run this website and respond to enquiries, including:

• Our hosting provider, to store and serve the website and any data submitted through it.
• Google (reCAPTCHA, and Analytics/Ads if you've consented to those cookie categories), to protect the contact form from abuse and, where consented, to measure site usage.
• Our email provider, to receive and respond to messages sent through the contact form.

We may also disclose personal data if required to do so by law, or to protect our rights, property or safety, or that of others.

6. International data transfers

Some of the service providers listed above (notably Google) may process data on servers located outside the European Economic Area. Where this happens, it is carried out under a recognised legal mechanism, such as the European Commission's Standard Contractual Clauses, as described in each provider's own privacy documentation.

7. How long we keep your data

We keep contact form and email enquiries for as long as needed to respond to you and, if we start working together, for the duration of our engagement plus any period required by Polish accounting and tax law afterwards (generally up to 5 years for financial records). If an enquiry doesn't turn into a project, we typically delete the correspondence within 24 months unless you ask us to keep it or contact us again. Cookie data is kept only for as long as described by each cookie's own retention period, as set by the relevant provider.

8. Your rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you.
• Ask us to correct inaccurate or incomplete data.
• Ask us to delete your data, where there's no legal reason for us to keep it.
• Ask us to restrict or object to certain processing.
• Request a copy of your data in a portable format.
• Withdraw consent at any time, for anything we process based on consent (this won't affect processing carried out before you withdrew it).
• Lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), or with the supervisory authority in your own EU country of residence.

To exercise any of these rights, email us at kontakt@dkweb.com.pl. We'll respond within one month.

9. Security

We take reasonable technical and organisational measures to protect the personal data we hold against loss, misuse and unauthorised access. No online service can guarantee perfect security, but we work to keep this website and the data it collects reasonably protected.

10. Changes to this policy

We may update this policy from time to time — for example, if we add a new tool or service to the website. We'll update the "Last updated" date above when we do. If changes are significant, we'll make that clear on this page.

11. Contact us

For anything related to this policy or your personal data, write to us at kontakt@dkweb.com.pl or see our Contact page. We're based in Kraków, Poland.