Privacy and cookie policy

1. Controller

The controller of personal data is:

The controller has not appointed a data protection officer. For anything related to personal data, please write to biuro@defensar.pl.

2. What we process and why

Visiting the site. The site has no forms, no user accounts and no analytics. Every visit, however, sends technical data: your IP address, the date and time of the request, the page requested and information about your browser and system. Our hosting and content delivery provider, Cloudflare, processes this data to deliver the site and protect it from attacks. The legal basis is our legitimate interest in providing and securing the site (Article 6(1)(f) GDPR). We do not combine this data with other information or use it to identify visitors.

Email. When you write to biuro@defensar.pl, we process your email address, your name and company if you give them, and the content of your message, in order to reply. The legal basis is our legitimate interest in corresponding with you (Article 6(1)(f) GDPR) and, where you ask about working together, steps taken at your request before entering into a contract (Article 6(1)(b) GDPR).

Claims. We may keep correspondence to establish, exercise or defend legal claims (Article 6(1)(f) GDPR).

3. Recipients

The following process data on our behalf, as processors:

• Cloudflare, Inc. (USA) and its group companies: site hosting and content delivery;
• LH.pl sp. z o.o. (Poland): email hosting.

We may also disclose data to public authorities where the law requires it.

4. Transfers outside the European Economic Area

Cloudflare, Inc. is based in the United States. Data may be transferred there on the basis of the European Commission’s adequacy decision for the EU–US Data Privacy Framework, in which Cloudflare participates, and additionally under the standard contractual clauses adopted by the European Commission.

5. How long we keep data

• Technical data from visits: as long as needed to deliver and secure the site, under Cloudflare’s log retention rules. We do not collect or keep visit logs ourselves.
• Correspondence: for as long as it continues, and then until any claims that may arise from it are time-barred.

6. Your rights

You have the right to access your data and to have it corrected, erased or restricted, and, for data processed in connection with a contract, to data portability. You may object at any time to processing based on our legitimate interest. To exercise these rights, write to biuro@defensar.pl.

You also have the right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland.

7. Whether you must provide data, and automated decisions

Providing data in correspondence is voluntary, but without an email address we cannot reply. We make no automated decisions and do not profile visitors.

8. Cookies and similar technologies

This site does not store cookies on your device and does not use browser storage such as local storage. We use no analytics or advertising tools and no social media plugins, and we serve our fonts from our own server. That is why the site does not ask for cookie consent.

The one exception may be bot protection. When Cloudflare detects traffic that looks automated, it may set a technical cookie such as __cf_bm, valid for up to 30 minutes. It is used only to protect the site, does not identify you and, being strictly necessary for the service, does not require consent. You can block cookies in your browser settings and the site will keep working.

9. Changes

The current version of this policy is always available on this page, with the date it applies from. The Polish version is binding; this English version is a translation for information.