Privacy policy
Your data, stated plainly.
We collect only what we need to reply to your enquiry.
Controller
The data controller is Global Impact spółka z ograniczoną odpowiedzialnością, registered at ul. Niemierzyńska 27, 71-436 Szczecin, Poland, entered in the register of entrepreneurs under KRS number 0001206159, VAT ID PL8513341070, REGON 543279800.
For matters concerning personal data you can reach us two ways: through the contact form or in writing, by post to the registered address above. We answer form enquiries within one working day, and letters within a period counted from the day of delivery.
We do not publish an email address, because an address written out on a page gets harvested by spam robots. When we reply to a form enquiry we give you ours, so you can carry on by ordinary email.
What we collect and why
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| First name, email, description of the opportunity | Replying to the form enquiry and any follow-up conversation | Art. 6(1)(a) GDPR, your consent | Until consent is withdrawn, no longer than 24 months from last contact |
| Visit data, meaning IP address, browser and pages viewed | Visit statistics, if you accept analytics | Art. 6(1)(a) GDPR, your consent | As set out in the cookie policy table |
| Consent record: identifier, date, policy version, categories chosen, IP address | Demonstrating that we asked for consent and what you answered | Art. 6(1)(c) GDPR read with Art. 7(1) GDPR, the duty to demonstrate consent | 12 months from the moment the choice was saved |
| Server logs | Security and fault diagnosis | Art. 6(1)(f) GDPR. Our legitimate interest is keeping the site running, detecting abuse and establishing the cause of failures | Up to 12 months |
Data protection officer
We have not appointed a data protection officer, because none of the cases listed in Art. 37 GDPR applies. We are not a public authority, we do not monitor anyone on a large scale and we do not process special categories of data. On any matter concerning your data you write directly to us, by the means described above.
Does data leave Europe
No. The site runs on a server in Poland, correspondence stays in our own system on that same server, and the consent record does not leave it. We do not transfer data to third countries or international organisations, so we apply no standard contractual clauses or other safeguards from Chapter V of the GDPR.
Should that change, we will describe it here before any such transfer takes place.
Who we share with
The hosting provider running this site, LH.pl Sp. z o.o. The entrustment covers storing data on the server and rests on a data processing agreement.
We use no external system for handling enquiries. Correspondence stays in our own system on the same server.
Providers of analytics and advertising tools only when you accept that category. We currently use no such tool, which you can verify in the cookie policy.
We do not sell data and we do not share it for purposes unrelated to your enquiry.
Your rights
You have the right to access your data, rectify it, erase it, restrict processing and port it to another controller.
You can withdraw consent at any time. Withdrawal does not affect what we lawfully did before it.
If you believe we process data unlawfully, you can lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland.
Right to object
You may object at any time to processing of your data based on our legitimate interest. This concerns the server logs we keep for security and fault diagnosis.
Once you object we will stop processing that data, unless we demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or grounds for establishing, exercising or defending legal claims.
Voluntary basis
Providing data is voluntary and follows from no statute or contract. Without a name and an email we cannot reply, because there would be no route back to you. You face no other consequence for not providing it.
We do not make automated decisions, we do not profile enquiries and we build no scores or predictions from them.
Version
This is version 1 of this policy, in force since 3 August 2026. A change of version invalidates previously saved consent, so on your next visit we will ask again.