Privacy policy and GDPR notice

1. Data controller

The controller is DKNet Damian Kłosiewicz Sp. K., ul. Pawła Lipowczana 6, 02-260 Warsaw, Poland, Polish tax identification number (NIP): 5213964227, National Court Register number (KRS): 0000966304. For privacy matters, email biuro@dknet.com.pl, write to the registered address or call +48 690 530 630. Exercising your rights does not require use of the form.

2. Data, purposes and legal grounds

The form covers your name, company, email, phone, screen count, selected interests, message, acknowledgement of the policy and acceptance of the terms with the document version. Your name, email and required acknowledgements are used to handle the inquiry; other fields are optional. An inquiry ID, time, language and page address accompany the message.

We handle inquiries leading to a contract under Article 6(1)(b) GDPR. Other correspondence, contact with company representatives, abuse prevention and protection of claims rely on Article 6(1)(f), our legitimate interests in communication, security and protecting rights. Statutory obligations may require Article 6(1)(c). Acknowledging the policy is not marketing consent; the form does not subscribe you to advertising.

3. Recipients and Google Chat

Only people authorized to handle the inquiry on the controller's behalf receive it. The server transfers the message over an encrypted connection to Google Chat in Google Workspace. We do not send the visitor's IP, cookie, form token or secret integration URL to Chat. Form content is not stored in this website's database or application logs.

Hosting, IT, communication and legal service providers may access data as needed to supply their services, as may authorities entitled by law. Google infrastructure may process information outside the EEA. Transfers are subject to Chapter V GDPR mechanisms; Google's documentation provides transfer arrangements including standard contractual clauses. Ask the controller for information about the safeguards used and a copy of them.

4. Retention periods

Inquiries that do not lead to cooperation are kept for no longer than 6 months after the last contact about the matter. If an agreement is concluded, necessary correspondence is retained during performance and afterwards only for the scope and period required by law or for establishing, exercising or defending claims until the applicable limitation period expires.

Ordinary technical logs are kept for up to 30 days. Information concerning a specific incident may be retained longer where needed to investigate it or protect rights. Abuse-limiting records are cleaned during later submissions after 24 hours; they contain counters, time and an HMAC pseudonym of the IP address, without the raw IP or message. Form sessions expire after 30 minutes of inactivity.

5. Individual rights

Under the GDPR, you may request access, rectification, erasure and restriction of processing. Data portability applies in the cases specified by the GDPR. You may object to processing based on legitimate interests for reasons relating to your particular situation. Where specific processing relies on consent, you can withdraw it without affecting earlier lawfulness.

You may complain to the President of the Polish Personal Data Protection Office. Requests are normally handled within one month; any extension follows GDPR conditions and includes an explanation.

6. Voluntary provision and safeguards

Providing data is voluntary, but the form cannot be sent without its required fields. Telephone, email and postal contact remain available. Please do not submit health information, national identity numbers or information about other people that is unnecessary for the inquiry.

We do not use the data for profiling or solely automated decisions with legal or similarly significant effects. Technical anti-spam checks may reject a submission; use another contact channel if necessary. Safeguards include protected sessions, single-use tokens, origin checks and submission limits.

7. Technical data and cookies

To deliver and protect the website, the server may log IP address, request time, requested URL, response status and browser technical information. The legal ground is Article 6(1)(f) GDPR: proper operation and security. Access is limited to authorized people and infrastructure providers.

The active form uses the necessary SIGNIVOSESSID cookie. Language is determined by the URL. Fonts and images are local. We do not use analytics, advertising, embedded maps or optional cookies. Google Chat operates on the server and does not install browser cookies. See Cookie information for details; Cookie settings in the footer shows the categories actually used.

8. Links and scope of this notice

External websites have their own data processing rules. This policy covers the information website and contact with Signivo. Processing within a separately activated platform or service relationship is covered by the relevant agreements and notices supplied at that stage. Changes to this document are published with a version date.