Privacy policy
Last updated: 2026-06-30
1. Controller
The controller is Adam Grudziński, operator of “Panel Biznesu”, address: pełny adres zostanie podany w zaakceptowanej ofercie albo umowie przed rozpoczęciem płatnej współpracy . For privacy matters contact kontakt@panelbiznesu.pl.
2. Data, purposes and legal bases
- Contact, demo and enquiries: name, e-mail, phone, company and message content. Basis: GDPR art. 6(1)(b) and 6(1)(f).
- Contracts and billing: identity, address, payment and billing history. Basis: GDPR art. 6(1)(b) and 6(1)(c).
- Panel accounts: login, e-mail, role, login history, settings and activity. Basis: GDPR art. 6(1)(b) and 6(1)(f).
- Client CRM data: contacts, notes, tags, enquiries, bookings, message templates, PDF offers and attachments uploaded by the client. The client is the controller and Panel Biznesu acts as processor under a data processing agreement.
- B2B outreach: company contact details collected from public sources such as company websites, public directories, maps and registers. Basis: GDPR art. 6(1)(f). The recipient may object at any time.
- Technical data: IP address, logs, session identifiers, device data and error data. Basis: GDPR art. 6(1)(f), service security and diagnostics.
- Consent-based marketing: newsletter or optional communications. Basis: GDPR art. 6(1)(a). Consent can be withdrawn at any time.
3. Recipients and processors
Data may be shared with providers supporting the service, including Cloudflare for hosting, Workers, D1, R2, security and CDN; e-mail providers such as Resend; payment operators when online payments are enabled; domain, analytics, backup, accounting and legal service providers. Non-EEA transfers are used only with an appropriate GDPR transfer mechanism, such as standard contractual clauses.
4. Retention
- Contact enquiries: up to 12 months after the last message, unless a contract or dispute follows.
- Contracts and billing: for the contract term, limitation periods and tax-law requirements.
- Technical logs: usually up to 90 days, longer only for security incidents.
- B2B marketing leads: until objection, data expiry or up to 24 months after last contact.
- Client CRM data: according to the client's instructions and data processing agreement.
5. Your rights
You may request access, rectification, erasure, restriction, portability, object to legitimate-interest processing and withdraw consent where processing is consent-based. You may also lodge a complaint with the Polish data protection authority. To exercise rights, contact kontakt@panelbiznesu.pl.
6. Cookies
The website and panel use technical cookies needed for operation, such as login sessions, security and settings. Analytics or marketing cookies are used only if implemented with appropriate notice and required consent.
