Privacy and Cookie Policy for the kahaconcept.pl website

Administrator danych	KaHa Katarzyna Hassa
Kontakt	kaha@kahaconcept.pl | +48 733 990 860
Adres	ul. Syrenki 10, 05-500 Piaseczno
NIP	5213379753

This Privacy and Cookie Policy defines the principles of processing personal data and the use of cookies in connection with the use of the website available at kahaconcept.pl (“Website”). The document has been prepared for a website of an informational and contact nature, without e-commerce functionality, order placement, or user account registration.

1. Data Controller

The controller of personal data of the Website users is KaHa Katarzyna Hassa, ul. Syrenki 10, 05-500 Piaseczno, Poland, Tax ID (NIP) 5213379753 (“Controller”).

In matters concerning personal data protection, the Controller can be contacted via e-mail: kaha@kahaconcept.pl
or by phone: +48 733 990 860.

2. Scope of data and source of collection

The Controller processes data voluntarily provided by the user, primarily via the contact form or e-mail messages.

The scope of processed data may include in particular: name, e-mail address, message content, as well as other data that the user voluntarily provides in the course of contact.

In addition, the Website may collect technical information related to the use of the website, including the IP address, data about the device, browser, operating system, approximate statistical data regarding user activity, and information stored in cookies.

3. Purposes and legal bases for data processing

Personal data may be processed for the following purposes:

responding to a message sent via the contact form or e-mail – on the basis of Article 6(1)(f) GDPR, i.e. the legitimate interest of the Controller consisting in handling correspondence and maintaining contact with users;
taking actions at the request of the data subject prior to the possible conclusion of a contract – on the basis of Article 6(1)(b) GDPR, if the content of the contact concerns cooperation or an offer;
establishing, pursuing, or defending legal claims – on the basis of Article 6(1)(f) GDPR;
conducting statistics, analyzing traffic on the Website, and carrying out marketing activities using cookies and similar technologies – on the basis of user consent, where required.

4. Is providing data mandatory

Providing data is voluntary, but to the extent necessary to send a message and receive a response, it may be required. Failure to provide contact details may make it impossible to process the inquiry.

5. Data recipients

Data may be transferred to entities supporting the Controller in operating the Website and handling communication, in particular the hosting provider and technical services provider Cyber_Folks, e-mail service providers, entities providing IT support, and providers of analytical or marketing tools – only to the extent necessary to perform their services.

If the Website uses tools provided by external entities, such as Google, Meta, or providers of embedded content, user data may also be processed by these providers in accordance with their own privacy policies.

6. Transfer of data outside the EEA

In connection with the use of tools provided by entities such as Google or Meta, data may be transferred outside the European Economic Area, in particular to the United States. In such cases, the Controller uses only solutions provided for by law, in particular standard contractual clauses or other mechanisms legitimizing the transfer of data.

7. Data retention period

Data from the contact form and correspondence will be stored for the time necessary to handle the inquiry, conduct further communication, and then for the period necessary to secure possible claims.

Data processed on the basis of consent will be stored until the consent is withdrawn or until the purpose for which the data was collected ceases to exist.

Information stored in cookies is retained for the period specified in the settings of those cookies or until they are deleted by the user.

8. Rights of the data subject

Each data subject has the right to access their data, rectify it, erase it, restrict processing, transfer data, object to processing based on legitimate interest, and withdraw consent at any time if processing is based on consent.

The data subject also has the right to lodge a complaint with the President of the Personal Data Protection Office if they believe that the processing of data violates legal provisions.

9. Cookies and similar technologies

The Website uses cookies and similar technologies to ensure the proper functioning of the website, remember user settings, conduct statistics, and – if appropriate tools are enabled – carry out marketing activities and display content embedded from external services.

Cookies are small text files stored on the user’s end device. They may be read by the Controller’s system or by third parties whose tools have been implemented on the Website.

10. Types of cookies that may be used

11. External tools used on the Website

The Website may use third-party solutions responsible for:

Google Analytics – for generating visitor statistics and analyzing website traffic;
Meta Pixel – for measuring the effectiveness of specific activities and remarketing;
Google Maps – if a map showing directions or location is embedded on the Website;
embedded content from social media, in particular from Instagram or Facebook.

The use of these tools may involve the transfer of certain information to the providers of these services,
as well as the storage of additional cookies on the user’s device. The scope of such data and the rules of its processing depend on the respective provider.

12. Cookie and consent management

The user may manage cookie settings via the consent banner available on the Website, as well as through the settings of their web browser.

Restricting the use of cookies may affect certain functionalities of the Website, especially those related to external tools or embedded elements.

13. Server logs

Using the Website involves sending requests to the server on which the website is hosted. Each such request may be recorded in server logs and may include, among others, the IP address, date and time, and information about the browser and operating system.

Data stored in server logs is used primarily for technical, administrative, and security purposes.

14. Policy changes

The Controller may update this Policy in the event of legal, technological, or organizational changes. The current version of the document is published on the Website.

Last updated: March 30, 2026