Privacy Policy

1. Data Controller

2. Scope of Data Processing

Our website does not automatically collect any personal data, except for information contained in cookies, as described in section 4.

Personal data may be voluntarily provided by users through:

• Email contact at kontakt@vwx.pl
• Member panel (requires separate authorization)

3. Purpose and Legal Basis for Data Processing

Personal data is processed only for the following purposes:

• Responding to inquiries (Art. 6 para. 1 lit. f GDPR - legitimate interest)
• Managing association membership (Art. 6 para. 1 lit. b GDPR - contract performance)
• Fulfilling legal obligations (Art. 6 para. 1 lit. c GDPR)

4. Cookies

Our website does not use cookies for tracking users or marketing purposes.

The only cookie used stores language preference (PL/EN), which is stored locally in the browser and does not contain any personal data.

5. Rights of Data Subjects

Individuals whose data is processed have the following rights:

• Right to access personal data
• Right to rectification of data
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to lodge a complaint with a supervisory authority (UODO)

6. Data Retention Period

Personal data is stored for the period necessary to achieve the purposes for which it was collected, and thereafter for the period required by law.

7. Data Recipients

Personal data may be disclosed to the following categories of recipients:

• IT service providers (hosting, email)
• Authorities authorized by law

8. Data Security

We employ technical and organizational measures to ensure the protection of processed data, in particular:

• SSL/TLS connection encryption (HTTPS)
• Restricted access to personal data
• Regular backups

9. Changes to Privacy Policy

The Controller reserves the right to make changes to the privacy policy. The current version of the policy is available at www.vwx.pl.