Privacy Policy

This Privacy Policy describes how Jahoba Kimaja, operating the website jahoba-kimaja.info ("we", "us", "our"), collects, uses, stores, and protects personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (the General Data Protection Regulation, "GDPR"), as supplemented by the Polish Act of 10 May 2018 on the Protection of Personal Data (Dz.U. 2018 poz. 1000, as amended) and related implementing legislation in the Republic of Poland.

1. Data Controller

The data controller responsible for personal data collected through this website is Jahoba Kimaja, with a registered correspondence address at Aleja Władysława Reymonta 12A, Warszawa, Poland. You may contact the data controller at any time by email at [email protected] or by telephone at +48 22 732 18 40. All data protection enquiries will be handled in accordance with the procedures described in this policy and within the timeframes required by applicable law.

2. Categories of Personal Data Collected

We collect only the personal data that is necessary for the specific purposes described in this policy. Through the contact and assessment booking forms on this website, we may collect the following categories of data: your full name, email address, telephone number, and the content of any message you submit. We also collect technical data automatically when you visit the website, including your IP address (in anonymised or pseudonymised form where technically feasible), browser type and version, operating system, referring URL, pages visited, and the date and time of your visit. This technical data is collected through cookies and similar tracking technologies as described in our Cookie Policy.

3. Purposes and Legal Bases for Processing

We process your personal data for the following purposes, each supported by a specific legal basis under Article 6 of the GDPR. Responding to enquiries submitted via our contact forms: we process name, email, phone, and message content on the basis of Article 6(1)(b) GDPR (processing necessary for the performance of pre-contractual steps at the request of the data subject) and Article 6(1)(f) GDPR (our legitimate interest in responding to communications directed to us). Operating and improving the website: we process technical and usage data on the basis of Article 6(1)(f) GDPR (our legitimate interest in maintaining a functional and secure website). Where processing is based on consent, for example the use of non-essential cookies, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

4. Retention Periods

We retain personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Correspondence data submitted through our forms is retained for a period of up to 24 months from the date of last contact, after which it is securely deleted or anonymised. Technical log data collected for security and operational purposes is retained for no longer than 12 months. Where a longer retention period is required by Polish tax, accounting, or commercial law, we will retain the relevant data for the period mandated by that legislation, following which it will be deleted.

5. Data Sharing and Third-Party Processors

We do not sell, rent, or trade your personal data to any third party. We may share personal data with carefully selected data processors who provide technical services necessary for the operation of this website, including hosting providers and email delivery services. All processors are bound by data processing agreements that comply with Article 28 of the GDPR. Where processors are located outside the European Economic Area, we ensure adequate safeguards are in place as required by Chapter V of the GDPR, such as Standard Contractual Clauses adopted by the European Commission. We will disclose personal data to public authorities, law enforcement bodies, or courts only where required to do so by applicable law or a binding judicial or administrative order.

6. Your Rights Under GDPR

As a data subject, you have the following rights under the GDPR, exercisable free of charge and without undue delay: the right of access (Article 15), allowing you to obtain confirmation of whether we process your data and to receive a copy of it; the right to rectification (Article 16), to have inaccurate data corrected; the right to erasure (Article 17), to request deletion of your data subject to applicable exceptions; the right to restriction of processing (Article 18); the right to data portability (Article 20); and the right to object to processing (Article 21), particularly where processing is based on legitimate interests. To exercise any of these rights, please contact us at [email protected]. We will respond within one month of receiving your request, extendable by a further two months where necessary given the complexity or number of requests, with notification of any extension provided within the initial month.

7. Right to Lodge a Complaint

If you believe that our processing of your personal data infringes the GDPR or applicable Polish data protection law, you have the right to lodge a complaint with the Polish supervisory authority, the Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, Poland (website: uodo.gov.pl). You also have the right to lodge a complaint with the supervisory authority in any EU Member State where you reside, work, or where the alleged infringement took place.

8. Cookies and Tracking Technologies

This website uses cookies and similar technologies. Strictly necessary cookies are placed without consent as they are required for the website to function. All other cookies, including analytics and preference cookies, are placed only upon your explicit consent given through our cookie consent mechanism. Full details of the cookies used, their purposes, and how to manage them are provided in our Cookie Policy, available at cookies.html.

9. Security Measures

We implement appropriate technical and organisational security measures to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction, in accordance with Article 32 of the GDPR. These measures include encrypted transmission of data (HTTPS), access controls, and regular review of security practices. No transmission over the internet or method of electronic storage is entirely secure, and while we take reasonable precautions, we cannot provide an absolute guarantee of security.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or regulatory guidance. The most recent version will always be available on this page with the date of last update shown at the top. We encourage you to review this policy periodically. Continued use of the website after changes are published constitutes acknowledgement of the updated policy.

11. Contact

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact us at: Jahoba Kimaja, Aleja Władysława Reymonta 12A, Warszawa, Poland. Email: [email protected]. Telephone: +48 22 732 18 40.