Privacy Notice & Legal Details

1. Data Controller Identity

• General & Data Protection Contact: biuro@primeconsulting.com.pl
• Phone: +48 662 040 132
• Official Website Domain: primeconsulting.com.pl
• Hosting & Email Infrastructure Provider: dhosting.pl Sp. z o.o. (based in Poland)

2. Purposes & Legal Bases for Data Processing (Art. 6 GDPR)

• B2B Inquiries & Communication: Personal data (name, email, phone number) provided voluntarily during direct communication via email or telephone are processed based on Art. 6(1)(f) GDPR (legitimate business interest in responding to commercial inquiries).
• Pre-contractual & Contractual Measures: In case of commercial engagement, processing is conducted pursuant to Art. 6(1)(b) GDPR (taking steps prior to entering into a contract or performance of a B2B agreement).
• Technical Server Security: HTTP server log data (IP address, request date/time, user agent) are processed under Art. 6(1)(f) GDPR to maintain IT security and system stability.
• Contact form. We process the data entered in the form (name, email address, optional phone number, message) to answer your enquiry, on the basis of Art. 6(1)(b) GDPR (steps taken at your request prior to entering into a contract) or, where the enquiry is not contract-related, Art. 6(1)(f) GDPR (our legitimate interest in answering correspondence). Providing the data is voluntary but necessary to receive a reply. To protect the form against spam and abuse (Art. 6(1)(f) GDPR) we use Cloudflare Turnstile, check technical parameters of the submission (e.g. completion time, country of connection determined by Cloudflare) and apply a rate limit, for which only a one-way hash of the IP address is kept for up to 24 hours. The IP address is not stored in the message.

3. Data Recipients & Service Providers

• Hosting and electronic mail infrastructure provider: dhosting.pl Sp. z o.o. based in Poland.
• Visit statistics: Cloudflare, Inc. (Cloudflare Web Analytics – cookieless, aggregated visit statistics only, no profiling). Website data are not shared with data brokers or advertising networks.
• Data are disclosed to public authorities only when required by mandatory statutory law.
• Contact form — Recipients: Cloudflare, Inc. (hosting, form processing, Turnstile), Sendinblue SAS / Brevo (France, email delivery to our mailbox), our email provider.

4. Retention Period Criteria

• Commercial Correspondence & Inquiries: Personal data provided in direct correspondence are retained solely for the period necessary to handle the inquiry, maintain the business relationship where applicable, and where justified for the period necessary to establish, exercise or defend potential legal claims.
• Server Technical Logs: Technical log data may be processed only to the extent necessary for website/infrastructure security and correct operation, and retained no longer than necessary for those purposes.
• Contact form — Retention: for as long as needed to handle the enquiry and, if we start working together, for the duration of the cooperation and the limitation period for claims; the rate-limit hash is deleted automatically within 24 hours.

5. Data Subject Rights (Art. 15–21 GDPR)

Every individual possesses the following statutory rights regarding their personal data:

• Right of access and receipt of a data copy (Art. 15 GDPR).
• Right to rectification (Art. 16 GDPR).
• Right to erasure ("right to be forgotten") (Art. 17 GDPR).
• Right to restriction of processing (Art. 18 GDPR).
• Right to data portability (Art. 20 GDPR).
• Right to object to processing (Art. 21 GDPR).

Contact form: Your rights under §5 apply, including the right to object to processing based on Art. 6(1)(f) GDPR.

To exercise your rights, please contact the Data Controller at: biuro@primeconsulting.com.pl.

6. Right to Lodge a Complaint with a Supervisory Authority

If you consider that the processing of your personal data violates GDPR provisions, you have the right to lodge a complaint with the competent supervisory authority in Poland:

7. Voluntary Provision of Data & No Profiling

• Voluntariness: Providing personal data in email or phone inquiries is voluntary, but necessary to receive a response to business inquiries.
• Automated Decision-Making: The Controller does not use automated decision-making or profiling (Art. 22 GDPR).

8. Cookies, Analytics & Technical Website State