PRIVACY POLICY

1. Personal data administrator

The personal data administrator is:

Alesia Hryhoryeva GSG, running a business

TAX IDENTIFICATION NUMBER: 6772512418

Address: ul. Królowej Jadwigi 299C, 30-234, Krakow

E-mail: info@greatsolution.pl

Phone: +48 694162685

The Administrator processes personal data in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016. (GDPR).

2. Scope of processed data

The Administrator processes personal data provided by users via the website, in particular:

• name and surname,
• email address,
• phone number,
• data contained in the content of the message sent via the contact form or e-mail.

3. Purposes of personal data processing

Personal data are processed for the following purposes:

• responding to inquiries sent via the contact form,
• conducting e-mail correspondence,
• making contact at the request of the data subject,
• possible determination, investigation or defense against claims.

4. Legal basis for data processing

The legal basis for the processing of personal data is:

• Article 6(1)(b) of the GDPR – data processing for the purpose of taking action at the request of the data subject before concluding a contract,
• Article 6(1)(f) of the GDPR – the legitimate interest of the controller consisting in conducting correspondence and securing claims.

5. Data storage period

Personal data will be stored:

• for the duration of the correspondence,
• and after its termination for a period no longer than 12 months, unless further storage of the data is necessary to establish, pursue or defend claims – then until the statute of limitations expires.

6. Recipients of personal data

Personal data may be transferred to entities providing services to the Controller, in particular:

• website hosting provider – Host Europe GmbH,
• IT and email service providers.

Data is transferred only on the basis of data processing agreements and only to the extent necessary to achieve the processing purposes.

7. Data transfer outside the EU/EEA

Personal data is not transferred outside the European Union or the European Economic Area.

8. Data subject rights

Every data subject has the right to:

• access to your personal data,
• their corrections,
• deletion of data,
• processing restrictions,
• object to processing,
• data transfer,
• lodging a complaint with the President of the Personal Data Protection Office.

9. Voluntary provision of data

Providing personal data is voluntary, but necessary to use the contact form or contact the Administrator.

10. Data security

The Administrator uses appropriate technical and organizational measures to ensure the protection of processed personal data, in particular against loss, unauthorized access or disclosure.

11. Cookies

The website uses only necessary (technical) cookies that ensure its proper functioning. Detailed information can be found in the Cookies Policy tab.

12. Privacy Policy Changes

The Administrator reserves the right to change this Privacy Policy. The current version of the document is always available on the website.

The privacy policy is effective from December 16, 2025 and is subject to ongoing verification and updating in the event of changes to the law or the method of processing personal data.