This document describes which personal data we collect through the lpcreation.pl website, why we do so, on what legal basis, and what rights you have in this regard. We have tried to write it in plain language - if anything is unclear, write to hello@lpcreation.pl.

1. Who is the controller of your data

The controller of personal data is Piotr Tadeusz Łącz, trading as Blue Creation - Piotr Łącz, NIP 5291645499 (hereinafter: "we", "Controller"). Contact address: ul. Skoroszewska 7/88, 02-495 Warszawa.

Contact for personal data matters: hello@lpcreation.pl or by post to the address given above. Telephone: +48 606 704 195.

We have not appointed a Data Protection Officer - we are not required to do so. We handle all matters concerning personal data at the address above.

2. What data we collect

The scope depends on how you use the website.

  • Contact form and brief: first and last name, e-mail address, telephone number, company name, optionally the address of your website, and the content of your message and any answers selected in the form.
  • Correspondence: data contained in e-mail messages you send to us, together with the history of contact.
  • Technical data: IP address, browser type and version, operating system, approximate location, subpages visited, source of entry, and date and time of your visit.
  • Cookies and similar technologies: details are described in the Cookie policy.
  • Conversation with the AI assistant (if you use it): the content of the questions you ask and any data that you provide yourself during the conversation.

We do not collect special category data (including, among others, data concerning health, political opinions or trade union membership). Please do not provide such data in the form or in conversation with the AI assistant.

3. Why we process data and on what basis

Each purpose has its own legal basis under the GDPR (Regulation 2016/679).

  • Responding to an enquiry and preparing an offer - basis: Article 6(1)(b) of the GDPR (steps taken prior to entering into a contract) and Article 6(1)(f) of the GDPR (our legitimate interest in conducting commercial correspondence).
  • Performance of a contract, should we agree to cooperate - basis: Article 6(1)(b) of the GDPR.
  • Accounting and tax obligations - basis: Article 6(1)(c) of the GDPR in conjunction with the provisions on accounting and tax law.
  • Statistics and improving the operation of the website - basis: Article 6(1)(a) of the GDPR (your consent expressed in the cookie window).
  • Marketing of our own services, including sending commercial information by electronic means or contact by telephone - basis: Article 6(1)(a) of the GDPR (voluntary consent), which you may withdraw at any time.
  • Establishing, pursuing or defending claims - basis: Article 6(1)(f) of the GDPR.

Providing data is voluntary, but without an e-mail address we will not be able to respond to your enquiry, and without the details required for an invoice we will not be able to settle our cooperation.

4. How long we keep data

  • Enquiries that did not lead to cooperation - up to 24 months from the last contact, so that we can return to the conversation.
  • Data from the performance of a contract - for the duration of the contract and then for the limitation period for claims (as a general rule, 3 years for claims connected with business activity).
  • Accounting documents - 5 years, counting from the end of the calendar year in which the tax obligation arose.
  • Data processed on the basis of consent - until consent is withdrawn.
  • Cookie data - in accordance with the periods indicated in the Cookie policy.

5. Who we share data with

Data may be passed on to trusted entities that help us run our business. Each of them acts on the basis of a data processing agreement or on its own legal basis.

  • hosting and e-mail service provider,
  • providers of analytics and marketing tools: Google Tag Manager, Hotjar, Meta Pixel and LinkedIn Insight Tag - only where you have given the appropriate consent to cookies,
  • provider of the language model, if you use the AI assistant,
  • accounting office and advisers (legal and tax),
  • payment operators, if a payment is made,
  • authorised state bodies, where required by law.

We do not sell personal data and do not make it available to third parties for their marketing purposes.

6. Transfers of data outside the European Economic Area

Some of the tools we use may process data outside the EEA - this particularly concerns cloud service providers and AI models. In such cases we rely on a decision of the European Commission finding an adequate level of protection, or on standard contractual clauses. On request, we will provide you with information about the safeguard applied.

7. Your rights

In connection with the processing of your data, you have the right to:

  • access your data and obtain a copy of it (Article 15 of the GDPR),
  • rectification of inaccurate data or completion of incomplete data (Article 16 of the GDPR),
  • erasure of data, the so-called right to be forgotten (Article 17 of the GDPR),
  • restriction of processing (Article 18 of the GDPR),
  • data portability to another controller (Article 20 of the GDPR),
  • objection to processing based on our legitimate interest (Article 21 of the GDPR),
  • withdrawal of consent at any time - without affecting the lawfulness of processing carried out before the withdrawal.

You can make a request by sending it to hello@lpcreation.pl. We respond without undue delay, and no later than within one month.

You also have the right to lodge a complaint with a supervisory authority - in Poland this is the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa.

8. Automated decisions and profiling

We do not make decisions concerning you that are based solely on automated processing and that would produce legal effects concerning you or similarly significantly affect you. The AI assistant answers questions and may recommend services, but it does not decide on the terms of cooperation - these are always determined by a human being.

9. Conversation with the AI assistant

If you use the AI assistant on the website, the content of the conversation is processed in order to answer your questions. The conversation may be saved in order to improve the quality of service. Do not enter sensitive data, passwords or confidential information into the chat - the assistant is not designed for this.

10. Security

We apply technical and organisational measures appropriate to the risk: an encrypted connection (HTTPS), restricted access to data, backups and software updates. No method of transmission over the internet is fully secure, which is why we cannot guarantee absolute security - but we take it seriously.

11. Changes to the policy

We may update this policy when the law, the scope of our services or the tools we use change. The date of the last update is shown at the top of the page. We will signal significant changes in a visible way on the website.

We will update the scope of the tools used and of the recipients in line with changes to the actual processes on the website.