Privacy Policy

1. Data Controller

The controller of your personal data is Wataha Media Marcin Przybył, a sole trader with address: Wola Jedlińska 23, 97-561 Ładzice.

2. Definitions

3. Data we collect

We collect the following categories of personal data:

• Contact data: first name, last name, email address, phone number
• Company data: company name, industry, position (if provided)
• Inquiry data: message content, selected services, budget, project details
• Technical data: IP address, browser type and version, operating system, screen resolution, traffic source, visit time, pages viewed
• Cookie data: session identifiers, user preferences, analytics data
• Public registry data: For B2B outreach, we retrieve publicly available data from the CEIDG register, such as company name, NIP, business address, PKD codes and voluntarily provided phone/email.

4. Purpose and legal basis of processing

5. Data retention period

• Contact form data: 3 years from last contact or until objection
• Service-related data: for the duration of the contract and 5 years after (per accounting regulations)
• Analytics data (Google Analytics): 14 months from last user activity
• Marketing data: until consent is withdrawn or objection is raised

6. Recipients of data

Your personal data may be shared with the following categories of recipients:

• Legal and accounting service providers: to the extent necessary for business operations
• Public authorities: only in cases provided for by applicable law
• Telecommunications and SMS gateway providers: For business contact (SMS), we entrust phone numbers to certified SMS gateway operators. The provider processes data solely for technical delivery.

7. Data transfers outside the EEA

Due to the use of Google and Vercel services, your data may be transferred to the United States. The transfer is based on:

• Standard Contractual Clauses (SCC) approved by the European Commission, ensuring an adequate level of data protection
• Additional security measures applied by service providers, including encryption of data in transit and at rest

8. Your rights

Under GDPR you have the following rights:

To exercise the above rights, contact us using the details in section 1. We will respond without undue delay, no later than one month from receiving your request.

9. Cookies and tracking technologies

Our website uses cookies and similar technologies to ensure proper functioning, traffic analysis and content optimization.

Types of cookies used:

Analytics tools:

Managing cookies:

You can manage cookie settings in your browser. Most browsers allow blocking or deleting cookies. Please note that blocking some cookies may affect site functionality.

10. Data security

We apply appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction or disclosure:

• SSL/TLS encryption — all communication with the site is encrypted
• Secure hosting — we use a reputable hosting provider (Vercel) with security certificates
• Limited access — only authorized persons have access to personal data
• Regular updates — we keep software and security measures up to date

11. Changes to the Privacy Policy

We reserve the right to make changes to this Privacy Policy. We will inform about any significant changes by posting an updated version on the site. We recommend checking this page regularly.

12. Contact