Privacy policy
We explain in plain language what data we collect, why, how long we keep it and what rights you have. This policy covers the Stronea website and your contact with us.
1. Data controller
The controller of your personal data is the company that runs the Stronea brand:
- Company
- WEISS COMPANY SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ
- Registered office
- ul. Złota 7/28, 00-019 Warsaw, Poland
- Tax ID (NIP)
- 5253095335
- REGON
- 545108882
- Court register (KRS)
- 0001250277
- Registry court
- District Court for the Capital City of Warsaw, 12th Commercial Division of the National Court Register
- Share capital
- PLN 5,000.00
For anything related to your personal data, email kontakt@stronea.com or send a letter to our registered office. We have not appointed a data protection officer, as the law does not require us to.
2. What data we collect
- Contact form: your name, email address, the services you need and your message.
- Quote form: your full name, email address, company name or current website (if you provide them), when you want to start, your message, and the options you selected with the calculated price.
- Correspondence: data you give us yourself by email, e.g. your company name and information about the project.
- Orders and billing: data needed to carry out the project and issue invoices, e.g. company name, address, tax ID and contact person details.
- Technical data: IP address, browser and device type and the time of the visit, recorded automatically in server logs.
- Visit statistics: pages visited, time on the site, device type (phone, tablet, computer), the page you came from and the campaign (utm). We count them ourselves, on our own server, without cookies and without third-party tools. We do not store your IP address: it is only used to calculate an anonymous hash that changes every day, so it cannot be used to identify you or to link your visits on different days.
Providing your data is voluntary, but without it we cannot reply to your inquiry or take on your project.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Replying to your inquiry and preparing a quote | Art. 6(1)(b), steps taken at your request before entering into a contract; when you write on behalf of a company, Art. 6(1)(f), our legitimate interest in communicating with clients |
| Carrying out the website project you order | Art. 6(1)(b), performance of a contract |
| Accounting, invoices and taxes | Art. 6(1)(c), legal obligation |
| Establishing, pursuing or defending claims | Art. 6(1)(f), legitimate interest |
| Operation, security and technical statistics of the website | Art. 6(1)(f), legitimate interest |
We do not make automated decisions about you and we do not profile you.
4. How long we keep data
- Inquiries that did not lead to an order: up to 12 months from the last contact.
- Data related to an order: for as long as the work lasts, and then until the limitation period for claims expires.
- Accounting documents: 5 years from the end of the year in which the tax payment deadline passed.
- Server logs: usually up to 12 months.
- Backups: we keep database backups for 14 days and full server backups for 7 days. Deleted data disappears from the backups after that time at the latest.
If you successfully object, we will delete the data sooner.
5. Who we share data with
We do not sell your data. It may only be received by entities that help us run our business, under data processing agreements:
- Skillhost, the provider of the server the website runs on. We store the data on a server in the European Union,
- OVH (OVHcloud), the provider of our domain and email, where messages from the forms arrive,
- our accounting firm, law firm and other advisers,
- public authorities, where required by law.
6. Transfers outside the EEA
We load all website files (scripts, fonts, icons, images) from our own server in the European Union, so simply visiting the site does not pass your IP address to other companies. If any of our providers processes data outside the European Economic Area, this is based on a European Commission adequacy decision (e.g. the EU-US Data Privacy Framework) or on standard contractual clauses approved by the European Commission.
7. Your rights
At any time you can:
- access your data and get a copy of it,
- correct inaccurate data,
- request the deletion of your data or the restriction of its processing,
- transfer your data to another controller,
- object to processing based on legitimate interest,
- withdraw your consent where processing is based on it. This does not affect the lawfulness of processing before the withdrawal.
To exercise your rights, email kontakt@stronea.com. We will reply within one month. You also have the right to lodge a complaint with the Polish data protection authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland.
9. Security
We use technical and organizational measures appropriate to the risk: an encrypted connection (HTTPS) and access to data limited to the people who need it. We also only use trusted service providers.
10. Changes to this policy
We may update this policy, e.g. when the law or the tools we use change. The current version is always available on this page, and the date at the top shows when it took effect.