Privacy Policy

Last updated: June 2026

1. Data Controller

The controller of your personal data is branch-osprey with its registered office at ul. Reformacka 12/4, 31-012 Kraków. For matters related to personal data protection, you can contact us at e-mail: [email protected]

2. What data we collect

Depending on how you use our service, we may collect the following categories of data:

• Identification data: first and last name
• Contact data: email address
• Order data: information about the selected service, message content
• Technical data: IP address, browser type, device information

3. Purposes of data processing

We process your personal data for the following purposes:

• Provision of services and handling of contact requests
• Communication regarding inquiries and bookings
• Issuance of accounting documents
• Statistical analysis of website traffic
• Ensuring the security of the service

4. Legal bases for processing

The processing of personal data is based on:

• Art. 6 sec. 1 lit. a GDPR — consent (e.g., for marketing contact)
• Art. 6 sec. 1 lit. b GDPR — performance of a contract or taking action before its conclusion
• Art. 6 sec. 1 lit. c GDPR — fulfillment of legal obligations
• Art. 6 sec. 1 lit. f GDPR — legitimate interest of the controller

5. Data recipients

Your data may be transferred to entities cooperating with us to the extent necessary for the provision of services, including:

• Hosting service providers
• Payment service providers
• Accounting offices
• Public authorities, when required by law

6. Data retention period

We store personal data for the period necessary to achieve the processing purposes:

• Data related to service provision — for the duration of the contract and the limitation period for claims
• Data processed based on consent — until its withdrawal
• Data for tax and accounting purposes — for the period required by law

7. Your rights

In connection with the processing of personal data, you have the following rights:

• Right to access data
• Right to rectify data
• Right to erase data ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority (President of UODO)

8. Data transfer outside the EEA

As a rule, we do not transfer personal data outside the European Economic Area. If analytical tools whose providers are based outside the EEA are used, the transfer takes place on the basis of standard contractual clauses approved by the European Commission.

9. Automated decision-making

We do not make decisions based solely on automated processing, including profiling, which would produce legal effects or similarly significantly affect you.

10. Data Security

We apply appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction, or disclosure.

11. Contact

For matters concerning personal data protection, you can contact us in writing at our registered office address or electronically: [email protected]