Privacy Policy_

This Privacy Policy describes how Totidu Mobila ("we", "us", "our"), operating the website totidu-mobila.info, collects, uses, stores, and protects personal data. We are committed to protecting your privacy in full compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the General Data Protection Regulation, known as GDPR) and with Polish national implementing legislation, including the Act of 10 May 2018 on the Protection of Personal Data (Dz.U. 2018 poz. 1000).

1. Who We Are

The data controller for personal data collected through this website is Totidu Mobila, with its registered address at Jacka Malczewskiego 81, Gdańsk, Poland. You can contact us regarding data protection matters at [email protected] or by telephone at +48 58 573 2880.

2. What Personal Data We Collect

We collect personal data in the following situations:

Contact form submissions: When you use the contact form on our website, we collect your name, email address, telephone number (optional), subject selection, and message content. This data is transmitted via your email client to our inbox and is not stored on our web server.

Newsletter subscriptions: If you subscribe to our newsletter, we collect your email address for the purpose of sending periodic educational content updates. This constitutes processing of personal data under Article 4(2) GDPR.

Cookies and technical data: When you visit our website, certain technical information may be recorded automatically, including your IP address, browser type, operating system, referring URL, and pages visited. This data is collected through cookies and similar technologies. Please see our separate Cookie Policy for details.

3. Legal Basis for Processing

We process your personal data on the following legal grounds as defined in Article 6 GDPR:

Consent (Article 6(1)(a) GDPR): For newsletter subscriptions and non-essential cookies, we rely on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

Legitimate interests (Article 6(1)(f) GDPR): For analysing website usage to improve the educational content and platform functionality, we rely on our legitimate interest in operating a functional and relevant educational service, provided this does not override your fundamental rights and freedoms.

Compliance with legal obligations (Article 6(1)(c) GDPR): Where processing is necessary to comply with a legal obligation to which we are subject under Polish or EU law.

4. How We Use Your Data

Personal data collected through this website is used exclusively for the following purposes: responding to your enquiries and contact form submissions; sending newsletter updates to subscribers who have provided explicit consent; improving the functionality and content of the educational platform; complying with legal and regulatory obligations; and maintaining records as required by applicable law.

We do not use your personal data for automated decision-making or profiling within the meaning of Article 22 GDPR.

5. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data to third parties. We may share data with data processors who act on our behalf, including hosting providers and email service providers. All such processors are bound by data processing agreements that require them to protect your data and process it only on our documented instructions, in compliance with Article 28 GDPR.

Where processors are located outside the European Economic Area, we ensure appropriate safeguards are in place in accordance with Chapter V GDPR, such as Standard Contractual Clauses approved by the European Commission.

6. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, in accordance with the principle of storage limitation under Article 5(1)(e) GDPR. Contact form enquiries are retained for a maximum of twelve months unless a longer period is required by law. Newsletter subscriber data is retained until you unsubscribe. Technical log data is typically deleted within ninety days.

7. Your Rights

Under Chapter III of the GDPR, you have the following rights regarding your personal data:

Right of access (Article 15): You may request confirmation of whether we process your personal data and, if so, receive a copy of that data.

Right to rectification (Article 16): You may request correction of inaccurate personal data we hold about you.

Right to erasure (Article 17): You may request deletion of your personal data in certain circumstances, including where the data is no longer necessary for the purposes for which it was collected.

Right to restriction of processing (Article 18): You may request that we limit our processing of your data in certain circumstances.

Right to data portability (Article 20): Where processing is based on consent or contract, you may request your data in a structured, commonly used, machine-readable format.

Right to object (Article 21): You may object to processing based on legitimate interests at any time.

To exercise any of these rights, please contact us at [email protected]. We will respond within one month as required by Article 12(3) GDPR. If we are unable to comply with your request, we will explain why.

If you believe your rights have been violated, you have the right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warsaw, Poland, www.uodo.gov.pl.

8. Security

We implement technical and organisational measures appropriate to the risk of processing your personal data, in accordance with Article 32 GDPR. These include encrypted communications (HTTPS), access controls, and regular security reviews. No method of transmission over the internet is entirely secure, but we take reasonable steps to protect the data you share with us.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically. Continued use of the website after changes constitutes acceptance of the updated policy.

10. Contact

For any questions about this Privacy Policy or our data practices, please contact us at: Totidu Mobila, Jacka Malczewskiego 81, Gdańsk, Poland. Email: [email protected]. Phone: +48 58 573 2880.