Skip to the document
RUNSY

Legal document

Privacy Policy

This policy explains what data is processed when you use runsy.pl or send an inquiry, why it is needed and what rights you have.

Version
1.1
Effective from

Data controller

RUNSY Jakub Szumiato

ul. Konwaliowa 3
55-095 Długołęka

Tax ID (NIP):
9141498484
Business register no. (REGON):
523165644
Email:
kontakt@runsy.pl

1. Controller and scope

The data controller is RUNSY Jakub Szumiato, ul. Konwaliowa 3, 55-095 Długołęka, Poland, tax ID (NIP) 9141498484, business register number (REGON) 523165644. For data matters, email kontakt@runsy.pl.

This policy covers the public runsy.pl website, technical data involved in displaying it and the contact form. The current site does not create accounts, run a newsletter or save submissions in an application database.

2. Data we process

The scope depends on whether you only browse the site or send an inquiry. Do not put special-category data, passwords, access keys or other confidential secrets in the form.

  • Form data: full name, email address, selected area of help and message are required; company name is optional.
  • Correspondence: further message content and basic email sending and delivery data.
  • Technical and security data: this may include an IP address, browser headers, request time and outcome, and signals Cloudflare Turnstile needs to distinguish people from bots, such as user-agent, TLS fingerprint, sitekey and origin.

3. Purposes and legal bases

We process data only as needed for the following purposes:

  • answering you and taking steps you request before a possible contract — Article 6(1)(b) GDPR where you may personally become a party to that contract;
  • handling inquiries sent for a company and ordinary business correspondence — Article 6(1)(f) GDPR, our legitimate interest in receiving and handling inquiries;
  • protecting the form and site against spam, abuse and attacks — Article 6(1)(f) GDPR;
  • establishing, exercising or defending legal claims — Article 6(1)(f) GDPR;
  • meeting a specific legal obligation if one arises — Article 6(1)(c) GDPR.

4. Required and optional data

Using the form is voluntary. Full name, email, area of help and message are needed to send and handle the inquiry; the form cannot be sent without them. Company name is optional. You can email kontakt@runsy.pl directly instead.

Sending the form is not marketing consent and does not subscribe you to a newsletter. Consent to this policy is not the legal basis for answering, so the form has no mandatory privacy-consent checkbox.

5. Recipients and transfers outside the EEA

Providers receive only the data needed to perform their tasks. Data may also be disclosed to advisers or public authorities where there is a justified need or legal duty.

Cloudflare operates globally, so some technical data may be processed in the United States or another country outside the European Economic Area. Depending on the case, transfers rely on an adequacy decision, including a valid EU-US Data Privacy Framework certification, European Commission Standard Contractual Clauses and supplementary safeguards.

  • Webio Grzegorz Wołoszyn — hosting the kontakt@runsy.pl mailbox, transmitting the message through SMTP and handling basic mail metadata;
  • Cloudflare, Inc. — CDN, Cloudflare Workers, site protection and Turnstile. Cloudflare processes Turnstile signals as a processor when protecting the form and as a separate controller when improving bot detection.
  • people expressly authorized by RUNSY to handle correspondence.

6. Retention

Retention depends on the data and purpose:

  • we keep inquiry correspondence for up to 12 months after the last exchange;
  • we may keep data longer while cooperation continues, where law requires it or to establish, exercise or defend claims — no longer than the relevant basis continues;
  • Cloudflare Workers diagnostic logs follow the service plan: currently up to 3 days on Free and never more than 7 days on plans with longer retention;
  • Webio and Cloudflare apply their own retention periods under their services, agreements and legal duties.

7. Your rights

Within the limits set by the GDPR, you may request access, correction, erasure or restriction. You may object to processing based on Article 6(1)(f) GDPR and request portability where its statutory conditions apply.

Email kontakt@runsy.pl to exercise a right. You may also complain to the President of the Polish Personal Data Protection Office (UODO).

8. Automated processing, profiling and cookies

RUNSY does not use data for profiling or automated decisions that produce legal or similarly significant effects under Article 22 GDPR. Turnstile automatically assesses technical signals solely to distinguish legitimate traffic from bots and protect the form. If verification fails, direct email remains available.

The current runsy.pl site uses no analytics tools, advertising pixels or cookies other than strictly necessary technical and security mechanisms used by Cloudflare and Turnstile.

9. Security

We use safeguards proportionate to risk, including TLS transmission encryption, access controls, anti-spam checks and data minimization. No internet transmission is absolutely secure, so do not send passwords or confidential secrets through the form.

10. Changes to this policy

This policy applies from the date shown above. We will update it if the site, providers or legal requirements change. The current version will remain at this address, and material changes will be described no later than when they take effect.