Privacy and cookie policy

1. Data controller

The controller of personal data is Arpino sp. z o.o., registered office in Warsaw, al. Jerozolimskie 200, 02-486 Warszawa, Poland, KRS 0000736345, NIP (tax ID) 5223129058, REGON 380515110. For data protection matters, write to kontakt@arpino.pl or call +48 505 499 975.

2. Purposes, legal bases and retention

Purpose	Data and legal basis	Retention
Replying to an enquiry sent via the contact form or by e-mail	name, e-mail, company, topic and message; Art. 6(1)(b) GDPR (steps prior to entering into a contract) or Art. 6(1)(f) GDPR (replying to correspondence)	until the correspondence ends; the copy of the enquiry in the website panel is deleted automatically after 12 months
Cooperation with clients and partners (company contact persons)	name, job title, business contact details; Art. 6(1)(f) GDPR	for the duration of cooperation and then until claims become time-barred
Website security: bot protection, login and form rate limits	IP address, technical request data, security events; Art. 6(1)(f) GDPR	briefly — the security log is continuously overwritten and blocks expire within one hour at most
Establishing, pursuing or defending claims	data from correspondence and cooperation; Art. 6(1)(f) GDPR	until claims become time-barred

Providing data is voluntary. Without your name, e-mail address and message, however, we cannot reply to your enquiry.

3. Recipients

We share data only with entities that help us run the website and communication — under data processing agreements and to the extent necessary:

• the website hosting provider (thecamels.org);
• Microsoft (Microsoft 365) — e-mail, including sending messages from the form;
• Cloudflare (Turnstile) — checking that the form is sent by a human rather than a bot, when this feature is enabled;
• IT, legal and accounting service providers;
• public authorities where required by law.

4. Transfers outside the EEA

Microsoft and Cloudflare may also process data outside the European Economic Area, including in the USA. In that case the basis is a European Commission adequacy decision (EU–US Data Privacy Framework) or standard contractual clauses. We will provide information on the safeguards on request.

5. Your rights

• access to your data and a copy of it;
• rectification;
• erasure where the legal conditions are met;
• restriction of processing;
• data portability in the cases set out in the GDPR;
• objection to processing based on legitimate interests;
• lodging a complaint with the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw, Poland).

Send requests to kontakt@arpino.pl. Before handling a request, we may verify your identity to the extent necessary.

6. Automated decision-making

We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.

7. Cookies

The website uses only cookies that are strictly necessary for it to work. We do not use analytics, advertising or profiling cookies, so we do not ask for consent — the banner at the bottom of the page is for information only.

Name	Purpose	Duration
cookie_notice_accepted	remembers that the cookie notice has been closed	30 days
arpino_lang	remembers the selected language version	12 months
wordpress_*, wordpress_logged_in_*, wp-settings-*	signing in to the admin panel — website administrators only	end of session or up to 14 days
Cloudflare Turnstile	protects forms against bots when enabled; may store technical data in the browser	for the duration of the check

You can delete or block cookies in your browser settings. Blocking necessary cookies may make the website harder to use, e.g. it will not remember your language.

If we add analytics or marketing tools, they will only run after you give consent, and this policy will be updated.

8. Security

We use an encrypted connection (HTTPS), regular software updates, least-privilege access control, backups and protection against bots and abuse.

9. Changes to this policy

We update this policy when the law, our providers or website features change. The current version and its date are always available on this page.