Rules for processing personal data at SKYNEST

Updated: 8 September 2026

1. Data Controller

The controller of personal data is Wiktor Gąsiewski SKYNEST (hereinafter: the “Controller”) providing IT services, including designing and building websites and web applications, deployment and administration of server/NAS solutions, IT support for businesses, and cybersecurity activities.

Tax Identification Number (NIP): 7432055951 | REGON (National Business Registry No.): 544146780

Registered place of business: ul. Jarzębinowa 94, 11-034 Stawiguda, Polska.

Contact the Controller regarding data protection matters: biuro@skynest.com.pl, phone: +48 733 016 474.

2. Contact form and other processing purposes

We process personal data in particular in the following cases:

• Contact form on the website – we process your name or company name, email address, message and acknowledgement of the privacy notice to handle your enquiry, prepare a requested offer and correspond about that matter. The message is delivered to the Controller's email inbox. The form does not subscribe you to a newsletter or marketing.
• Direct contact – when you contact us by phone or email, we process the data shared during correspondence to handle the inquiry, prepare and deliver the cooperation, and maintain ongoing business relations.
• Using the website – server logs and cookies collect technical data about your visit (e.g., IP address, server date and time, browser information, operating system, visited pages). This data is used to ensure the security of the service and, for analytical cookies, to analyze website traffic (details in the Cookie Policy).

The checkbox confirms that you have read the privacy notice. It is not consent serving as a legal basis for processing or consent to marketing. Ticking it is a technical condition for submitting this form, not a GDPR requirement. You can also use the email address or phone number in section 1. Do not send passwords, national identification numbers, health data or other information unnecessary for discussing your enquiry.

3. Legal bases for processing

We process data based on the following legal grounds:

• Article 6(1)(b) GDPR – when processing is necessary to take steps at your request before entering into a contract to which you will be a party, or to perform such a contract, for example to prepare an offer you requested.
• Article 6(1)(f) GDPR – the Controller’s legitimate interests, in particular: handling other enquiries and correspondence with company representatives, maintaining website security and establishing, pursuing or defending specific claims where necessary.
• Article 6(1)(a) GDPR – to the extent you provide consent (e.g., for analytical cookies, if used).

3a. Voluntary provision of data

Using the form is voluntary. It requires a name or company name, an email address, a message and acknowledgement of the privacy notice. Without them you cannot submit the form; without an email address we cannot reply by email. Providing data to make an enquiry is not a statutory obligation.

4. Data retention period

Retention depends on the purpose and how the matter develops:

• enquiry correspondence is kept while we respond and conclude discussions on that matter. If it leads to a contract, the relevant data is processed further to perform it. Longer retention needs a separate justification, such as a legal obligation or the handling of specific claims. Potential future marketing contact alone does not justify keeping the enquiry;
• analytics data is kept for the period justified by website analysis and the tool's retention settings. Withdrawing consent stops further collection for that purpose. Cookie lifetimes are described in the Cookie Policy;
• server log data — for the time necessary to ensure service security and analyze its operation.

5. Data recipients

Data may be shared with entities cooperating with the Controller, such as:

• hosting, server infrastructure, email and backup providers, where their services are used,
• entities that provide technical support for maintaining the website and IT systems,
• analytics providers, where their tools are enabled and you consent to analytics. The contact form checkbox is not that consent.
• legal advisors, accountants, and other professional consultants — to the extent necessary to provide their services to the Controller.

Using a provider that processes data outside the European Economic Area (EEA) may involve a transfer to a third country, including through remote access. A transfer requires a basis under Chapter V GDPR, such as an applicable adequacy decision or appropriate safeguards. You can request information about recipients, processing locations and a copy of the safeguards used by contacting the Controller by email.

6. Your rights

In connection with the processing of personal data, you have the following rights:

• the right to access your data and obtain a copy,
• the right to rectify your data,
• the right to erasure (“right to be forgotten”) in cases provided for by the GDPR,
• the right to restriction of processing,
• the right to data portability when processing is based on a contract or consent and is carried out by automated means,
• the right to object to processing based on the Controller’s legitimate interests — on grounds relating to your particular situation,
• the right to withdraw consent at any time — without affecting the lawfulness of processing before withdrawal,
• the right to lodge a complaint with the President of the Polish Personal Data Protection Office if you believe the processing violates the GDPR. Current contact details and complaint procedures are available on the UODO website.

You can exercise your rights by contacting us at the email address provided in section 1.

7. Cookies and analytics

When handling enquiries from this website, we do not make decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects concerning you.

Detailed information about the use of cookies and how to change your settings can be found in the document Cookie Policy and in the Cookie settings.

Facebook and LinkedIn links are ordinary links, not embedded social plugins. After you follow them, those services process data under their own privacy rules. Ticking the contact form checkbox does not enable analytics or advertising tracking.

8. Changes to the Privacy Policy

The Privacy Policy may be updated from time to time, including due to changes in law or service functionality. The updated version will be published on this page with the applicable effective date.