Povuna - Privacy Policy

A. Data Controller

The data controller for personal data collected through this website is Povuna, with contact address at Młyńska 12, Koszalin, Poland.
Contact for privacy-related matters: [email protected] or +48 696 173 141.
Processing is carried out in accordance with Regulation (EU) 2016/679 (GDPR) and the Polish Act of 10 May 2018 on the Protection of Personal Data.

Contact form submissions: name, email address, selected subject, and message content.
Technical data related to cookie consent preferences, stored locally in a browser cookie.
Standard server log data such as IP address and browser type, collected automatically for security and technical maintenance.
We do not collect payment information, government identifiers, or special categories of data as defined in Article 9 GDPR.

Responding to inquiries submitted via the contact form, based on consent (Article 6(1)(a) GDPR) given via the privacy checkbox.
Maintaining the security and technical functioning of the site, based on legitimate interest (Article 6(1)(f) GDPR).
Storing cookie preferences, based on consent where the cookie is not strictly necessary.

Contact form data is retained only as long as necessary to address the inquiry, and is deleted or anonymized afterward unless a longer retention period is required by law.
Cookie consent records are retained for up to 180 days, after which consent is requested again.
Server logs are retained for a limited period for security purposes and are not used for profiling.

Personal data is not sold or shared with third parties for marketing purposes.
Data may be disclosed to hosting or technical service providers acting as processors, bound by data processing agreements under Article 28 GDPR.
Data may be disclosed where required by Polish or European Union law, or to competent public authorities upon lawful request.

Where a processor is located outside the European Economic Area, transfers are carried out only where appropriate safeguards, such as Standard Contractual Clauses, are in place.

Right to access your personal data and receive a copy of it.
Right to request rectification of inaccurate or incomplete data.
Right to request erasure of your data, subject to legal retention obligations.
Right to restrict or object to processing based on legitimate interest.
Right to data portability where processing is based on consent or contract.
Right to withdraw consent at any time without affecting prior lawful processing.
Right to lodge a complaint with the Polish supervisory authority, Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warsaw.

This policy may be updated periodically to reflect legal or operational changes. The date at the top reflects the most recent revision.