1. Data Controller

The controller of your personal data processed on koalka.pl is Konrad Kaliciński, running a sole proprietorship under the business name Akkroweb, mailing address: 40-lecia 18, 63-920 Pakosław, Poland.

Contact email: contact@koalka.pl

2. What Data We Collect

Contact form data: name, email address, optionally company name and message, plus the page language, the page the form was sent from, and campaign (UTM) parameters if present in the page address. We do not store your IP address or browser details.
Technical data processed by Cloudflare whenever the site is displayed (including IP address, browser and device information) and during the contact form's anti-spam check (Cloudflare Turnstile).
Google Analytics 4 analytics data, only with your consent: anonymous visit statistics, device and browser information, approximate location. IP anonymization is enabled.

3. Purposes and Legal Bases

Replying to an inquiry sent via the form or by email and, where applicable, preparing an offer — Art. 6(1)(b) GDPR (steps prior to entering into a contract) and Art. 6(1)(f) GDPR (legitimate interest: contacting people who reached out to us).
Keeping the site running and secure and protecting the form against spam — Art. 6(1)(f) GDPR.
Analysing site traffic to improve the site — Art. 6(1)(a) GDPR (your consent, which you can withdraw at any time).

4. Recipients and Processors

We share your data only with service providers we use to run the site, acting on our behalf:

Cloudflare, Inc. — site hosting, anti-spam verification (Turnstile), and the contact submission database stored in the European Union.
Resend (Plus Five Five, Inc.) — email notifications about new contact form submissions.
Google Ireland Limited — Google Analytics, only with your consent.
OVH sp. z o.o. — email for the koalka.pl domain.

Submission notifications are also delivered to the mailboxes of the people behind the Koalka brand who answer inquiries.

Cloudflare, Resend and Google may process data outside the European Economic Area, in particular in the USA. Such transfers rely on the European Commission's adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses.

5. How Long We Keep Data

Contact form data: as long as needed to handle the inquiry, at most 24 months from submission.
Analytics data in Google Analytics: 14 months.
Technical data at Cloudflare: according to Cloudflare's policy, usually no longer than a few days.

6. Your Rights

Under the GDPR you have the right to:

access your data and receive a copy,
rectify inaccurate data,
erasure (the right to be forgotten),
restriction of processing,
data portability,
object to processing based on legitimate interest,
withdraw consent at any time, without affecting the lawfulness of processing before withdrawal,
lodge a complaint with the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw, Poland).

To exercise these rights, contact us at: contact@koalka.pl

7. Cookies and Browser Storage

Google Analytics cookies are set only after you give consent and are valid for up to 14 months. In addition, the site stores three settings in your browser's storage (localStorage), which are never sent to us or anyone else:

your analytics consent decision (cookie-consent),
your chosen light or dark theme (koalka-theme),
your chosen language (koalka-language).

You can delete them at any time in your browser settings.

8. Changes to This Privacy Policy

We may update this privacy policy. The current version is always available on this page, and the date of the last change is shown above.