Rules for processing personal data at SKYNEST

1. Data Controller

The controller of personal data is Wiktor Gąsiewski SKYNEST (hereinafter: the “Controller”) providing IT services, including designing and building websites and web applications, deployment and administration of server/NAS solutions, IT support for businesses, and cybersecurity activities.

Tax Identification Number (NIP): 7432055951 | REGON (National Business Registry No.): 544146780

Registered place of business: ul. Jarzębinowa 94, 11-034 Stawiguda, Polska.

Contact the Controller regarding data protection matters: biuro@skynest.com.pl, phone: 733 016 474.

2. Scope and purposes of processing

We process personal data in particular in the following cases:

• Contact form on the website – we process the data you provide (e.g., name, email address, message content) to respond to your inquiry, prepare an offer, and continue correspondence.
• Direct contact – when you contact us by phone or email, we process the data shared during correspondence to handle the inquiry, prepare and deliver the cooperation, and maintain ongoing business relations.
• Newsletter – if you subscribe to the newsletter (e.g., by ticking the relevant checkbox in the contact form), we process your email address and name to send information about services, updates, tips, or content published by SKYNEST.
• Using the website – server logs and cookies collect technical data about your visit (e.g., IP address, server date and time, browser information, operating system, visited pages). This data is used to ensure the security of the service and, for analytical cookies, to analyze website traffic (details in the Cookie Policy).

3. Legal bases for processing

We process data based on the following legal grounds:

• Article 6(1)(b) GDPR – when processing is necessary to take steps at your request prior to entering into a contract or for the performance of a contract (e.g., preparing an offer, arrangements for cooperation, delivery of services).
• Article 6(1)(f) GDPR – the Controller’s legitimate interests, in particular: conducting correspondence, pursuing or defending claims, ensuring the security of the service, and handling ongoing business contacts.
• Article 6(1)(a) GDPR – to the extent you provide consent (e.g., for the newsletter or analytical cookies, if used).

3a. Voluntary provision of data

Providing personal data is voluntary, but in some cases it may be necessary to achieve the stated purposes — for example, without an email address we cannot reply to a contact form message, and without consent we will not send a newsletter.

4. Data retention period

We store data for as long as necessary to fulfill the purpose for which it was collected, and then for the period required by law or justified by limitation periods. In particular:

• data from the contact form — generally for the time needed to handle the inquiry and any subsequent commercial contact;
• data processed on the basis of consent (e.g., newsletter) — until consent is withdrawn or a valid objection is raised;
• server log data — for the time necessary to ensure service security and analyze its operation.

5. Data recipients

Data may be shared with entities cooperating with the Controller, such as:

• the website hosting and server infrastructure provider,
• entities that provide technical support for maintaining the website and IT systems,
• providers of analytics (e.g., statistical tools) or marketing services — only to the extent you give the appropriate consents (e.g., for analytical cookies).
• legal advisors, accountants, and other professional consultants — to the extent necessary to provide their services to the Controller.

If we use providers located outside the European Economic Area (EEA), data may be transferred to third countries. In such cases, we ensure appropriate safeguards under the GDPR (e.g., Standard Contractual Clauses).

6. Your rights

In connection with the processing of personal data, you have the following rights:

• the right to access your data and obtain a copy,
• the right to rectify your data,
• the right to erasure (“right to be forgotten”) in cases provided for by the GDPR,
• the right to restriction of processing,
• the right to data portability (when processing is based on a contract or consent),
• the right to object to processing based on the Controller’s legitimate interests — on grounds relating to your particular situation,
• the right to withdraw consent at any time — without affecting the lawfulness of processing before withdrawal,
• the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland) if you believe the processing violates the GDPR.

You can exercise your rights by contacting us at the email address provided in section 1.

7. Cookies and analytics

Detailed information about the use of cookies and how to change your settings can be found in the document Cookie Policy and in the Cookie settings.

8. Changes to the Privacy Policy

The Privacy Policy may be updated from time to time, including due to changes in law or service functionality. The updated version will be published on this page with the applicable effective date.