Privacy Policy
Last updated: 8 September 2026
1. Who is responsible for your data
The controller of your personal data is:
Fundacja Kantrapunkt
ul. Jasnodworska 3B lok. 304
01-745 Warszawa, Poland
KRS: 0001245121
NIP: 5253093448
REGON: 544978902
For questions concerning privacy and the processing of personal data, you can contact us by email:
2. What data we process
Email correspondence data
The Kantrapunkt website does not require registration and does not use contact forms to collect personal data.
If you contact us by email, we may process the data you provide in your message, including your name, email address, the content of your message, and other information necessary to respond to your enquiry.
Providing this data is voluntary, but without it we may be unable to respond to your enquiry.
Technical data
When you visit the website, Tilda and providers of technical infrastructure may automatically process technical data necessary for the website to load, operate reliably, and remain secure. This may include your IP address, the date and time of the request, the address of the requested page, browser and operating-system type, device information, the address of the referring page, and technical log records.
Analytics data
If you consent to the use of analytics cookies, we use Google Analytics 4 to obtain statistical information about how the website is used.
Depending on how the website is used, this information may include, in particular, pages visited and interactions with the website, session duration and parameters, referral source, approximate geographic location, and information about the browser, operating system, and device type.
We use this data to analyse website traffic and improve the website, not to identify individual visitors ourselves or for advertising profiling.
3. Why and on what legal basis we process data
- Responding to enquiries and conducting correspondence concerning research, expert work, cooperation, and partnerships — the controller’s legitimate interest, Article 6(1)(f) GDPR.
- Preparing and carrying out cooperation or joint projects, including taking steps at your request prior to entering into a contract — Article 6(1)(b) GDPR.
- Compliance with legal obligations and the establishment, exercise, or defence of legal claims — Articles 6(1)(c) and 6(1)(f) GDPR.
- Ensuring the operation and security of the website, diagnosing errors, and preventing abuse — the controller’s legitimate interest, Article 6(1)(f) GDPR.
- Use of Google Analytics 4 and analytics cookies — your consent, Article 6(1)(a) GDPR. You may refuse consent or withdraw it at any time through the website’s cookie settings.
4. How long we retain data
Email correspondence data is retained for as long as necessary to respond and complete the communication.
If correspondence relates to cooperation or a contract, the data may be retained for the duration of that cooperation and, after it ends, until the expiry of the applicable document-retention periods and limitation periods for potential legal claims.
Technical data and logs are retained for the periods set by the platform and technical-infrastructure providers, but no longer than necessary to ensure the operation, diagnostics, and security of the website.
Data related to Google Analytics 4 is retained in accordance with the data-retention settings in Google Analytics and Google’s policies. Analytics cookies may remain on a visitor’s device for the period specified for the relevant cookie or until they are deleted by the visitor.
Data may be retained for longer where required by law or where necessary for the establishment, exercise, or defence of legal claims.
5. Who may have access to the data
To the extent necessary, data may be accessible to persons authorised by the controller and to service providers supporting the website, email, and analytics, in particular:
- Tilda — website platform, hosting, technical maintenance, and built-in website statistics;
- Google — Gmail email services and, after the relevant consent has been obtained, Google Analytics 4;
- providers of IT support, legal, or accounting services — where access is necessary for them to perform their tasks.
Some providers may process data outside the European Economic Area. In such cases, transfers are carried out using mechanisms provided for under the GDPR, depending on the specific recipient and country of processing, including on the basis of an applicable European Commission adequacy decision or Standard Contractual Clauses.
6. Website statistics and cookies
Essential cookies
The website may use technically necessary cookies required for its proper and secure operation and to remember the visitor’s cookie choices. Such cookies are not used for advertising tracking and cannot be disabled through the website’s cookie settings where they are necessary for the website to function.
Tilda built-in statistics
For Tilda’s built-in statistics, we use Simplified Statistics Mode. In this mode, Tilda maintains internal website statistics without creating analytics cookies, including when a visitor has allowed analytics cookies for other services.
Google Analytics 4
We also use Google Analytics 4 to analyse website traffic and how the website is used.
Google Analytics 4 is connected through the Tilda site settings and does not send analytics data to Google Analytics until the visitor has made a choice and consented to the use of analytics cookies.
Once consent has been obtained, Google Analytics may use its own cookies, including _ga and _ga_<container-id>, to distinguish visitors and store session information.
We use Google Analytics to obtain aggregated statistics about website traffic and use. We currently do not use Google Analytics for personalised advertising or remarketing.
Managing consent
When you first visit the website, you may accept all cookies, reject non-essential cookies, or choose individual cookie categories in the settings.
Essential cookies remain active. Google Analytics cookies are used only after you have given your consent.
You can change or withdraw your choice at any time through the “Cookie settings”widget available on the website. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
We currently do not use advertising cookies, Meta Pixel, Yandex Metrica, or other advertising tracking systems.
7. Your rights
Under the GDPR, depending on the legal basis and circumstances of the processing, you have the right to:
- access your personal data and obtain a copy;
- request rectification, erasure, or restriction of processing;
- object to processing based on legitimate interests;
- receive your data in a portable format where provided for by law;
- withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal;
- lodge a complaint with a supervisory authority.
If you object to processing based on legitimate interests, we will stop such processing unless there are compelling legitimate grounds for continuing it or the processing is necessary for the establishment, exercise, or defence of legal claims.
To exercise these rights, you can contact us at kantrapunkt.foundation@gmail.com.
You also have the right to lodge a complaint with the Polish data protection supervisory authority — Prezes Urzędu Ochrony Danych Osobowych (UODO).
UODO information for individuals
We do not use personal data for automated decision-making or profiling.
8. Changes to this Privacy Policy
This Policy may be updated in response to changes in the operation of the website, the technologies used, or legal requirements.
The current version is always available on this page.
