Privacy policy

The data controller is OFFIT Katarzyna Walczak, ul. Ochla-Makowa 15, 66-006 Zielona Góra, Poland, NIP (tax ID) 929-181-63-13, REGON 381654806. For privacy enquiries, contact kontakt@offit.pl.

We process your name, email address, selected topic and message to respond to your enquiry and, where relevant, take steps before entering into a contract. Providing these details is voluntary, but necessary for us to handle your message.

The legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR) or, where that basis does not apply, our legitimate interest in responding to and managing correspondence (Article 6(1)(f) GDPR).

Form messages are delivered to the OFFIT email inbox. We do not store them in a separate website database. We retain correspondence for 12 months after contact has ended. If the enquiry leads to a business relationship, data may be retained for the period required to perform the contract and meet legal obligations.

We use Cloudflare Turnstile to protect the form from abuse. For this verification, Cloudflare may process technical data such as your IP address and browser or device information. The legal basis is our legitimate interest in protecting the website and form from spam and abuse (Article 6(1)(f) GDPR).

The website and anti-abuse verification use Cloudflare infrastructure, and email is handled by dpoczta.pl. These providers process data as necessary to provide their services. People authorised by the controller may also access correspondence.

Cloudflare may process data outside the European Economic Area. Where this occurs, applicable data protection transfer mechanisms and safeguards under the provider’s terms apply.

When you use the website, its infrastructure provider may process technical request data, including your IP address, request time and browser information, to deliver the website, maintain security and diagnose errors.

We use local storage to remember your theme and analytics choice (for 180 days). Turnstile may use cookies or similar technologies necessary to protect against abuse.

We load Google Analytics 4 only with voluntary consent (Article 6(1)(a) GDPR). The provider is Google Ireland Limited. Analytics processes cookie identifiers, device and browser information, visited page URLs and titles, and referring URLs. Enhanced measurement covers page views, scrolling, outbound clicks, downloads and form interactions, plus searches and video playback where those features are present. Parameters may include link and form URLs, file names, form metadata and search terms. We do not add names, email addresses or message content to events. The contact_success event is sent only after the API confirms the sending operation and only with consent. Advertising features and Google Signals are disabled. The _ga and _ga_* analytics cookies are configured for 180 days. Google processing details: https://policies.google.com/privacy.

You can reject analytics or withdraw consent at any time using “Privacy settings” in the footer. Withdrawal deletes analytics cookies accessible to the website and reloads the page to stop the loaded script; it does not affect the lawfulness of earlier processing. Google may process data outside the EEA under applicable transfer mechanisms, including standard contractual clauses. Refusal does not restrict access to the website or contact form.

You start the optional chat yourself. It helps select services and does not make decisions or commitments on behalf of OFFIT. Questions and the current conversation history are sent to Cloudflare Workers AI to generate replies. Do not share personal data, passwords or confidential information. AI may give incorrect answers; OFFIT confirms offers and terms.

Conversation history is held only in the current page memory, without a website database archive or conversation content in our application logs. Reloading or clearing chat removes the local history. Cloudflare processes requests and technical data under its service terms, potentially outside the EEA with applicable transfer safeguards. This does not imply that the provider processes or retains no technical data. If you voluntarily provide personal data when asking about cooperation, the basis is Article 6(1)(b) GDPR, or for other enquiries Article 6(1)(f) GDPR (responding to enquiries). Chat does not require analytics consent; conversation content is not sent to GA4.

You may have the right to access, rectify or erase your data, restrict processing and, where provided by law, receive your data or object to processing. To exercise your rights, contact kontakt@offit.pl.

You may also lodge a complaint with the President of the Polish Personal Data Protection Office if you believe that your data is being processed unlawfully.

We may update this policy when the website or the way we process data changes. The current version is published on this page.