Privacy Policy

1. Controller

The data controller for personal data collected via this website is Talev, ul. Nowy Swiat 14, 00-372 Warsaw, Poland ([email protected]). References to "we", "us", or "our" refer to Talev.

2. Scope of this Policy

This policy applies to all personal data processed through the website talev.info and any related contact processes. It does not apply to third-party websites linked from our site.

3. Data We Collect

3.1 Data you provide directly

When you complete the contact form we collect your name, email address, the subject of your enquiry, and your message. We collect no special category data.

3.2 Technical data collected automatically

When you visit the site our hosting provider records IP address, browser type and version, referrer URL, pages visited, and the date and time of access. This information is used only for security and server analytics purposes and is not linked to individual identities.

4. Legal Basis for Processing

We rely on the following lawful bases under Article 6 GDPR:

• Consent (Art. 6(1)(a)) — when you tick the consent checkbox on the contact form.
• Legitimate interests (Art. 6(1)(f)) — for server security logs and fraud prevention.

5. How We Use Your Data

We use data collected via the contact form solely to respond to your enquiry and to keep a record of that correspondence. We do not use your email address for marketing unless you have separately opted in to receive marketing communications.

6. Retention

Contact form correspondence is retained for a period of three years from the date of the enquiry. Server access logs are retained for a maximum of 90 days.

7. Disclosure

We do not sell, rent, or trade personal data to third parties. Data may be disclosed to:

• Our hosting provider, for the purpose of website operation.
• Email service providers acting as data processors, used solely to deliver our responses.
• Competent authorities, where disclosure is required by law.

8. International Transfers

Our hosting infrastructure is located in the European Economic Area. Where any processor outside the EEA is engaged, we ensure appropriate safeguards are in place in accordance with Chapter V GDPR.

9. Your Rights

Under the GDPR and applicable Polish data protection law (Ustawa z dnia 10 maja 2018 r. o ochronie danych osobowych) you have the right to:

• Access your personal data (Art. 15 GDPR).
• Rectification of inaccurate data (Art. 16 GDPR).
• Erasure of data ("right to be forgotten") where no overriding legitimate basis applies (Art. 17 GDPR).
• Restriction of processing (Art. 18 GDPR).
• Data portability (Art. 20 GDPR).
• Object to processing based on legitimate interests (Art. 21 GDPR).
• Withdraw consent at any time without affecting prior processing (Art. 7(3) GDPR).

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Polish supervisory authority: Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warsaw.

10. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or destruction. The site is served exclusively over HTTPS.

11. Cookies

For details of cookies used on this site, please refer to our Cookie Policy.

12. Changes to this Policy

We may update this policy from time to time. Material changes will be communicated by updating the "Last updated" date at the top of this page. Continued use of the site after any update constitutes acceptance of the revised policy.

13. Contact

All data protection enquiries should be directed to [email protected] or in writing to the address stated in Section 1 above.