Privacy Policy - Privacy Policy
This Privacy Policy explains how we process personal data in line with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and applicable national legislation. It covers data collected via this website and the contact form.
1. Data controller
The controller is StriveLab – Maciej Sala (“Administrator”), Kraków, Poland, email: contact@strivelab.pl. Contact this address regarding any data protection matters.
2. Data scope and categories
We process data voluntarily provided via the contact form or email: name, email address, phone number (if provided), company name, and message content. We may also process technical data related to site usage (e.g. IP address, cookie identifiers, device/browser information) for analytics and security.
3. Purposes and legal bases
We process data for the following purposes and legal bases: - replying to enquiries sent via form or email – Art. 6(1)(f) GDPR (legitimate interest in providing information and correspondence), and when it leads to a contract – Art. 6(1)(b) GDPR; - performing a service agreement and handling related settlements – Art. 6(1)(b) GDPR, and for accounting obligations – Art. 6(1)(c) GDPR; - establishing, pursuing, or defending claims – Art. 6(1)(f) GDPR; - analytics, statistics, and service security (e.g. maintaining event logs) – Art. 6(1)(f) GDPR; - direct marketing of own services (e.g. responding with an offer) – Art. 6(1)(f) GDPR; - when an action requires consent (e.g. certain marketing cookies) – Art. 6(1)(a) GDPR (consent, withdrawable at any time without affecting prior lawful processing).
4. Data recipients
Data may be shared with processors acting on our behalf, such as hosting providers, analytics tools, email systems, CRM platforms, or form services – only under processing agreements and our instructions. Data may also be disclosed to authorised public bodies when required by law.
5. Transfers outside the EEA
If third-party tools (e.g. email or analytics services) involve transferring data outside the European Economic Area, it happens only where adequate protection is ensured – for example via adequacy decisions or standard contractual clauses (Art. 46 GDPR). Details on safeguards are available upon request.
6. Retention period
Contact data is stored for as long as needed to handle enquiries and correspondence, then for up to 12 months for archiving and evidence. Data related to service delivery and settlements is stored for the period required by law (including tax and accounting rules). Data processed under consent is stored until the consent is withdrawn.
7. Data subject rights
You have the right to access, rectify, erase (“right to be forgotten”), restrict processing, and transfer data. You can object to processing based on Art. 6(1)(f) GDPR (including direct marketing) and withdraw consent at any time without affecting prior lawful processing. Contact us to exercise these rights.
8. Right to lodge a complaint
You may lodge a complaint with the supervisory authority – in Poland: President of the Personal Data Protection Office (PUODO), ul. Stawki 2, 00-193 Warsaw – if you believe processing infringes GDPR.
9. Requirement to provide data
Providing contact data is voluntary but necessary to respond to your enquiry or conclude a contract. Without it we may be unable to act on your request.
10. Automated decision-making
We do not conduct automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you (Art. 22 GDPR).
11. Cookies and analytics
The site may use cookies necessary for operation and – subject to consent – analytical or marketing cookies. Details appear in our Cookie Policy. You can give, refuse, or change cookie consent through browser settings or a consent banner.
12. Policy updates
We reserve the right to update this Policy. Material changes will be announced on the site. Last updated: 14.01.2026.
13. Contact
For data protection matters please contact StriveLab – Maciej Sala, email: contact@strivelab.pl.