1. Controller and contact
The controller of personal data is Adrian Zaremba Combo, ul. Włodarzewska 83/53, 02-393 Warszawa, Poland. Questions about privacy or requests concerning your data may be sent to support@combo-it.pl.
2. Data we process
When you use the contact form, we process the name, email address, subject and message that you provide. The server may also process basic technical information necessary to deliver and secure the website, such as an IP address, request time, requested resource, browser identification and response status.
Please do not send special-category data or confidential information through the form unless it is necessary and agreed in advance.
3. Purposes and legal bases
- To answer your enquiry and take steps at your request before entering into a contract — Article 6(1)(b) GDPR.
- To correspond about other matters on the basis of your consent — Article 6(1)(a) GDPR.
- To secure, diagnose and maintain the website, prevent abuse and establish or defend claims — our legitimate interests under Article 6(1)(f) GDPR.
- To meet legal and accounting obligations where they apply — Article 6(1)(c) GDPR.
You may withdraw consent at any time. Withdrawal does not affect processing carried out before withdrawal.
4. Recipients and hosting
Data may be handled by authorised persons and by service providers supporting hosting, email and IT maintenance, only to the extent needed for their tasks and subject to appropriate confidentiality or data-processing arrangements. Contact messages are delivered through the locally configured mail system serving the domain.
We do not sell personal data. This website does not intentionally transfer form data to advertising or analytics platforms. If a provider processes data outside the European Economic Area in the future, an appropriate transfer mechanism will be used and this policy will be updated.
5. Retention
Enquiries are normally retained for the time needed to respond and follow up, and then for up to 24 months unless the correspondence leads to a contract, a legal duty requires longer storage, or it is needed to establish, pursue or defend claims. Security logs are kept for a limited operational period and then deleted or rotated. Rate-limiting records contain one-way technical identifiers and expire automatically.
6. Your rights
Subject to the conditions in data-protection law, you may request access, rectification, erasure, restriction, portability, or object to processing based on legitimate interests. You may also withdraw consent. To exercise a right, contact us by email. We may need to verify your identity.
You may lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych) in Poland.
7. Cookies and security
The website does not use analytics, advertising trackers or marketing cookies. A strictly necessary session cookie may be set when the contact form is loaded. It supports CSRF protection, is not used for profiling and expires with the session. Your language preference is stored locally in your browser and is not transmitted as a tracking identifier.
We use proportionate safeguards including encrypted HTTPS transport, server-side validation, CSRF protection, a honeypot field, request throttling and access restrictions. No internet transmission can be guaranteed absolutely secure.
8. Automated decisions, changes and contact
We do not use automated decision-making or profiling in relation to website enquiries. Providing contact details is voluntary, but without them we may be unable to respond. This policy may change when the website, legal requirements or processing practices change. The current version and effective date are published on this page.
Privacy contact: support@combo-it.pl.