Privacy
policy.
Here is what information we use, why we need it and how you can control your privacy.
Updated:01 / Who is responsibleData controller
85-722 Bydgoszcz, Poland
VAT EU: PL5542867726
Jędrzej Czarnecki, trading as eBest Jędrzej Czarnecki, is the controller of personal data submitted through this website. For questions about your data or to exercise your rights, email us at the address above.
02 / When you contact usContact and personal data
The form asks for your name or company name, email address and message. If you contact us directly by email or telephone, we receive the information you give us. We use it to reply, discuss your needs and, where appropriate, prepare a proposal.
- Enquiries about services or working together: we process data to take steps you request before entering a contract (Article 6(1)(b) GDPR).
- Other correspondence: our legal basis is our legitimate interest in responding and staying in touch (Article 6(1)(f) GDPR).
- Potential claims: we keep necessary records to establish, exercise or defend legal claims (Article 6(1)(f) GDPR).
Providing data is voluntary, but we cannot reply through the form without a return address and a description of your enquiry. Please do not send sensitive personal data, a PESEL number or copies of identity documents.
Retention: we keep correspondence for as long as needed to handle your enquiry. Where records are necessary to document arrangements or protect against claims, we retain the relevant part until the applicable limitation period ends. If we work together, contract and accounting records are also retained for the period required by law.
Form messages go to our email inbox; the form does not create a separate enquiry database. If you withdraw Turnstile consent while writing, the page briefly saves your draft in browser session storage, reloads to remove the Cloudflare script, restores the fields and immediately deletes the saved draft.
03 / Running the siteSecurity and logs
Our server processes technical request data such as IP address, connection time, requested URL and browser information. This keeps the site working, helps us diagnose problems and protects against misuse. The legal basis is our legitimate interest (Article 6(1)(f) GDPR).
The form verifies Turnstile before sending a message. If the verification service or mail function fails, we log the type of failure without the message contents, secret or Turnstile token.
We process technical logs and backups only for as long and to the extent needed to maintain security, investigate incidents and restore the service. Access is limited to people and providers carrying out those tasks.
05 / External toolsGoogle Analytics and Cloudflare Turnstile
Google Analytics
After analytics consent, the site may load the Google Analytics script. Google then receives connection information, including an IP address and browser data. The current configuration uses the discontinued Universal Analytics service (UA-24951028-1), which does not collect new statistics. See Google’s notice about the service ending.
Cloudflare Turnstile
Turnstile protects the form against spam. The verification area appears when you start typing; the Cloudflare service loads only after you consent to this category. Cloudflare processes technical connection, device and interaction data needed to distinguish people from automated programmes. We do not send the contents of your message to Cloudflare.
When you withdraw consent, we reload the page to remove the verification script and restore your draft. The form cannot be submitted without successful verification, but email and telephone contact remain available.
Provider information: Cloudflare Turnstile Privacy Addendum.
06 / Who helps usRecipients and transfers
Authorised people handling enquiries and our hosting, email and technical support providers may use data as needed to provide their services. Where required by law or to protect claims, relevant authorities or legal advisers may also receive data. We do not sell contact details.
If analytics is enabled, recipients may include Google Ireland Limited and other Google group entities, including Google LLC in the United States. If Turnstile is enabled, Cloudflare receives technical verification data. This may involve a transfer outside the European Economic Area.
Google describes transfer safeguards, including the EU–US Data Privacy Framework for certified entities and standard contractual clauses, in its data transfer information. You can review the mechanisms and how to request more information there.
07 / Your data, your rightsYour rights
Subject to the conditions in the GDPR, you may request access to and a copy of your data, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests for reasons relating to your particular situation.
You can withdraw consent for optional tools in Cookie settings. For other requests, email info@ebest.pl. We may ask for information needed to verify your identity so we do not disclose data to someone unauthorised.
You may lodge a complaint with Poland’s President of the Personal Data Protection Office (UODO). Details are available at uodo.gov.pl.
We do not use form data for marketing profiling or solely automated decisions with legal or similarly significant effects. Automated spam protection can block form submission; if that happens, you can contact us directly.
08 / Keep in touchChanges to this policy
We update this policy when the website or our data processing changes. The version date appears at the top. If the purposes or scope of consent for optional tools change, we will ask you to choose again.
Questions about privacy? Email info@ebest.pl.