Privacy policy

The controller of your personal data is Black Remora Group Sp. z o.o., with its registered office in Kraków (ul. Bobrzyńskiego 41/59, 30-348 Kraków, Poland), entered in the register of entrepreneurs of the National Court Register kept by the Sąd Rejonowy dla Krakowa-Śródmieścia w Krakowie, XI Wydział Gospodarczy Krajowego Rejestru Sądowego under KRS number 0001265113, tax ID (NIP) 6762727330 ("we").

For anything concerning your personal data, write to contact@blackremora.com or to our registered address. We have not appointed a data protection officer, as we are not required to.

Contacting us (the contact form or e-mail). We process your name (or company name), e-mail address, the subject and content of your message, and any data you include in it, to reply and continue the correspondence. The legal basis is our legitimate interest in answering enquiries sent to us (Article 6(1)(f) GDPR). Where an enquiry concerns entering into a contract, the basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR).

Operating and securing the website. Each time the website is visited, the server automatically records technical data: IP address, date and time, the page requested, the response code and browser information (user agent). We use it to deliver the website, diagnose errors and protect the website and the contact form from abuse (including limiting the number of messages sent from one IP address). The legal basis is our legitimate interest in operating the website securely (Article 6(1)(f) GDPR).

Legal claims. Where necessary, we may process the data above to establish, exercise or defend legal claims (Article 6(1)(f) GDPR).

We use no analytics or advertising tools and do not profile visitors. Information stored on your device is described in the Cookie policy.

• Correspondence: 12 months after the last message on the matter. If it leads to a contract, for the duration of the contract and the period required by law (e.g. tax law); if it is needed to establish, exercise or defend legal claims, until those claims become time-barred.
• Technical data in server logs: up to 30 days.
• The IP address used to limit contact-form messages: only in the server’s memory, for one limit window (by default up to 1 hour).

The data is processed on our behalf by service providers bound by data processing agreements:

• Amazon Web Services – website hosting (AWS Amplify, EU region – Frankfurt),
• Mailjet (Sinch group) – technical delivery of contact-form messages to our mailbox,
• Google – e-mail in Google Workspace, where we receive and keep correspondence.

Data may also be received by providers of legal, accounting or IT services to us, to the extent needed for those services, and by public authorities where the law requires it.

We host the website in a European Union region. Amazon Web Services and Google may, as part of their services, also process data outside the European Economic Area, including in the United States. Such transfers rely on the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework for certified organisations, or on the standard contractual clauses adopted by the European Commission (Articles 45 and 46(2)(c) GDPR). You can obtain a copy of the safeguards by writing to our contact address.

Regarding the processing of your data, you have the right to:

• access your data and receive a copy (Article 15 GDPR),
• rectification (Article 16 GDPR),
• erasure (Article 17 GDPR),
• restriction of processing (Article 18 GDPR),
• data portability, for data processed in connection with entering into or performing a contract (Article 20 GDPR),
• object to processing based on our legitimate interests, on grounds relating to your particular situation (Article 21 GDPR).

To exercise these rights, write to contact@blackremora.com. We will reply without undue delay and at the latest within one month.

You also have the right to lodge a complaint with the supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl), if you believe we process your data unlawfully.

Providing data is voluntary. Without an e-mail address, however, we cannot reply to your message.

We do not make decisions about you based solely on automated processing, including profiling (Article 22 GDPR).

We may change this policy when the way we process data or the law changes. The current version is always available on this page, with the date it applies from.