Last updated: 27 October 2026

This Privacy Policy explains how personal data is processed on about.depantero.com, in line with Regulation (EU) 2016/679 (General Data Protection Regulation, “GDPR”) and Polish law. The page is written in plain language: if anything is unclear, write to mail@depantero.com.

1. Who is the controller of your data

The controller of your personal data is Tomasz Marcin Zawisny, running a sole proprietorship under the business name DEPANTERO TOMASZ MARCIN ZAWISNY, ul. Ziemowita 3 lok. 16, 92-413 Łódź, Poland, NIP (tax ID): 7282317957, REGON: 101342030, registered in the Polish Central Registration and Information on Business (CEIDG) (“depantero”, “we”). Contact in all matters related to personal data: mail@depantero.com. We have not appointed a Data Protection Officer, as we are not required to do so.

2. What data we process, why and on what legal basis

• Contact form and e-mail. When you use the contact form or write to us, we process your name, e-mail address, the budget range you select and the content of your message. We use them to reply and, if you wish, to prepare an offer. Legal basis: Art. 6(1)(b) GDPR (steps taken at your request before entering into a contract) and Art. 6(1)(f) GDPR (our legitimate interest in answering enquiries).
• Marketing e-mails. Only if you tick the optional box, we will send you personalised offers from depantero by e-mail. Legal basis: your consent, Art. 6(1)(a) GDPR and Art. 398 of the Polish Electronic Communications Law. Giving this consent is voluntary and has no effect on handling your message.
• Booking a call. When you book a meeting through Calendly, the data you enter there (e.g. name, e-mail, date, notes) is used to arrange and hold the meeting. Legal basis: Art. 6(1)(b) and Art. 6(1)(f) GDPR.
• Spam protection. The contact form is protected by Google reCAPTCHA, which analyses technical data such as your IP address and how you interact with the page, to tell people from bots. Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in protecting the site and the form against abuse).
• Operating the website. Our hosting server records standard technical data (IP address, date and time, browser type) in server logs, needed to deliver the site and keep it secure. Legal basis: Art. 6(1)(f) GDPR.
• Claims. Where necessary, we may keep correspondence to establish, pursue or defend legal claims. Legal basis: Art. 6(1)(f) GDPR.

Providing data in the contact form is voluntary, but the fields marked as required are needed for us to reply.

3. How long we keep your data

• Messages and enquiries: for as long as needed to handle your matter, and then until any related claims become time-barred under the Polish Civil Code.
• Marketing data: until you withdraw your consent or object.
• reCAPTCHA and server logs: for the short periods used by the providers for security purposes.
• Data related to a contract we conclude with you: for the period required by tax and accounting law.

4. Who receives your data

We do not sell your data. It may be shared only with providers who help us run the website and our communication, acting on our instructions or as independent controllers:

• dhosting.pl Sp. z o.o. (Poland) – website hosting and e-mail;
• Google Ireland Limited – reCAPTCHA spam protection and web fonts loaded from Google servers;
• Calendly LLC (USA) – meeting booking, only if you choose to book a call;
• LinkedIn – only if you click the link to the LinkedIn profile, after which LinkedIn’s own privacy policy applies;
• legal, tax and IT advisers, and public authorities where required by law.

5. Transfers outside the European Economic Area

Google and Calendly may process data in the United States. Such transfers are based on the EU–US Data Privacy Framework adequacy decision or, where it does not apply, on Standard Contractual Clauses approved by the European Commission. You can request information about these safeguards by e-mail.

6. Cookies and similar technologies

The website uses only technical cookies needed for it to work and stay secure (for example, the reCAPTCHA cookie and cookies set when an administrator is logged in). Calendly may set its own cookies when you open the booking window. We do not use analytics or advertising cookies. You can delete or block cookies in your browser settings; blocking them may limit some features, such as the contact form protection.

When you first visit the website, a consent banner lets you accept or deny non-essential cookies; you can change your choice at any time using the “Manage consent” tab. The full list of cookies and services is in our Cookie Policy.

7. Your rights

Under the GDPR you have the right to:

• access your data and receive a copy of it;
• have your data rectified;
• have your data erased or its processing restricted;
• data portability;
• object to processing based on our legitimate interest, and to object at any time to direct marketing;
• withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal;
• lodge a complaint with the supervisory authority: the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl.

To exercise your rights or withdraw consent, simply write to mail@depantero.com. We will reply without undue delay, at the latest within one month.

8. Automated decision-making

We do not make decisions about you that are based solely on automated processing and produce legal effects. The reCAPTCHA score is used only to block automated spam.

9. Changes to this policy

We may update this policy when our services or the law change. The current version is always available on this page, with the date of the last update at the top.