Privacy Policy

1. Data Controller

The controller of personal data is:

2. Legal Basis for Data Processing

We process personal data on the basis of:

• Art. 6(1)(a) GDPR - consent of the data subject (contact forms, newsletter)
• Art. 6(1)(b) GDPR - performance of a contract or taking steps prior to entering into a contract
• Art. 6(1)(f) GDPR - legitimate interest of the controller (responding to inquiries, direct marketing)

3. Purposes of Data Processing

We process personal data for the following purposes:

• Responding to inquiries sent through the contact form
• Presentation of products and services (demo)
• Sending newsletter (with consent)
• Performance of contracts and provision of services
• Direct marketing of own products and services
• Maintaining documentation required by law

4. Types of Processed Data

We process the following categories of personal data:

• Identification data: first name, last name
• Contact data: email address, phone number
• Employment data: position, company name
• Data contained in messages sent through the form
• Technical data: IP address, browser type, date and time of visit (cookies)

5. Data Retention Period

We store personal data for the period:

• Necessary to achieve the purposes for which they were collected
• Required by law (e.g., tax, accounting regulations)
• Until consent is withdrawn (in case of processing based on consent)
• Until an effective objection is raised (in case of processing based on legitimate interest)

6. Rights of Data Subjects

In accordance with GDPR, you have the following rights:

• Right of access - right to obtain information about processed data
• Right to rectification - right to request correction of incorrect data
• Right to erasure - right to request deletion of data ("right to be forgotten")
• Right to restriction of processing - right to request restriction of data processing
• Right to data portability - right to receive data in a structured format
• Right to object - right to object to data processing
• Right to withdraw consent - right to withdraw consent at any time
• Right to lodge a complaint - right to lodge a complaint with the supervisory authority (UODO)

To exercise the above rights, please contact us at: kredolabs@gmail.com

7. Data Sharing

Personal data may be shared with:

• IT service providers (hosting, forms - Formspree)
• State authorities based on applicable legal provisions
• Other entities only with explicit consent

Formspree: Contact forms are handled by Formspree (formspree.io). Formspree processes data according to its own privacy policy. More information: Formspree Privacy Policy

8. Data Security

We apply appropriate technical and organizational measures to ensure the protection of personal data, including:

• Connection encryption (HTTPS/SSL)
• Restricting access to data only to authorized persons
• Regular backups
• Security monitoring

9. Cookies

The website uses cookies. Detailed information can be found in the Cookie Policy.

10. Changes to Privacy Policy

We reserve the right to make changes to this Privacy Policy. We will inform about any changes on this page. Last updated: January 27, 2026.

11. Contact

For matters regarding personal data processing, please contact: