1. Controller and scope
The controller for enquiries and client relationships is Expanta Andriy Golyk, Polish tax identification number (NIP) 1251789994. Address: ul. Ignacego Krasickiego 31C/1, 05-250 Słupno, Poland. For privacy enquiries, email office@expanta.pl. This policy covers the current website with optional Google Analytics 4, without an active calendar or online payments.
2. Data and purposes
Emails may contain your name, email address, company details and information you choose to provide. We use these to answer questions, prepare proposals and deliver services. Please avoid sending sensitive personal data unless necessary.
Steps at your request before a contract and performance of a contract with you rely on Article 6(1)(b) GDPR. Correspondence and contact with company representatives rely on our legitimate interest in business communication (Article 6(1)(f)). Accounting records are processed to meet legal obligations (Article 6(1)(c)). Data needed to establish, exercise or defend claims relies on the related legitimate interest (Article 6(1)(f)).
Providing data is voluntary, but we need contact details to reply and the necessary contract and billing details to provide a service. Sending an enquiry does not subscribe you to a newsletter.
With your consent, we use Google Analytics 4 to measure visits and improve the website under Article 6(1)(a) GDPR. Data may include page views, interactions, cookie identifiers, browser and device information, referral sources and approximate location. Consent is optional; refusing does not restrict access to the website.
3. Service providers and recipients
Business email is handled through Microsoft 365, including messages and attachments. The hosting provider may process connection data, such as IP addresses and request details, to deliver and secure the website.
The website is hosted by LH.pl. If you consent to analytics, data is also received by the Google Analytics provider, Google Ireland Limited. No payment or booking provider is currently integrated.
Using Google and Microsoft services may involve processing data outside the European Economic Area. Transfer policies and safeguards are described by Google and Microsoft. For information about processing by Expanta, contact office@expanta.pl.
4. Retention
Correspondence is retained for handling the enquiry and, where justified, protecting legal claims. Contract data is needed for performance and the applicable limitation periods. Accounting records are retained for the periods required by law. Technical log retention depends on the selected hosting service and requires confirmation.
Your analytics preference is saved in browser storage (localStorage) for 180 days. Google Analytics cookies (_ga and _ga_*) are limited to the remaining consent period, up to 180 days. Retention of data within Google Analytics is a separate service setting; withdrawal stops further measurement but does not automatically delete data already sent. Contact us about erasure.
5. Your rights
Subject to GDPR conditions, you may request access, rectification, erasure or restriction of processing. Portability applies to qualifying data processed automatically on the basis of consent or contract. You may object to processing based on legitimate interests on grounds relating to your particular situation.
Where a particular activity relies on consent, you may withdraw it at any time without affecting earlier lawful processing. You may complain to the President of the Polish Personal Data Protection Office: uodo.gov.pl. Rights depend on the purpose and legal basis; erasure does not cover data we must retain by law.
6. Cookies, links and automation
Google Analytics loads only after you select “Allow analytics”. Without consent, the analytics code is not loaded and the website sends no data to Google Analytics. The integration disables Google Signals and advertising personalisation. Fonts are served locally.
LinkedIn and Techmark are ordinary links, without embedded tracking plugins. External sites follow their own operators’ policies. We do not use data from this website to make solely automated decisions producing legal effects.
You can withdraw consent at any time: select “Cookie settings” in the footer, then “Without analytics”. We delete Google Analytics cookies accessible on this domain and reload the page to stop the loaded code. Refusal is remembered in the same way as consent. Read more about how Google uses data from websites using its services.