Privacy and cookie policy

Who we are

The controller of your personal data is CREST COMPACT sp. z o.o., a limited liability company registered in Poland.

For any question about personal data, write to crestcompact@proton.me.

What data we collect

• The brief form: your name, company, email address, phone number, the services you are interested in, budget and timeline ranges and the content of your message.
• Email correspondence: the data you include in messages you send us.
• Clients and suppliers: contact details of the people we work with and the data needed to perform contracts and issue invoices.
• Technical data: server logs such as IP address, browser type and the time of a visit, kept for security.

Why we use it

• To answer your brief and prepare a proposal, at your request before entering into a contract (Article 6(1)(b) GDPR).
• To perform contracts with clients and suppliers (Article 6(1)(b) GDPR).
• To meet legal obligations, for example in accounting and tax (Article 6(1)(c) GDPR).
• To keep the website secure, to establish or defend legal claims and to stay in touch with business contacts, based on our legitimate interests (Article 6(1)(f) GDPR).
• For purposes that require consent, such as optional cookies, only after you give it (Article 6(1)(a) GDPR). You can withdraw consent at any time.

How long we keep it

• Briefs that do not lead to cooperation: up to 12 months after our last contact.
• Contract data: for the duration of the contract and until related claims become time-barred.
• Accounting documents: for the period required by Polish tax and accounting law.
• Server logs: up to 90 days, unless they are needed to investigate a security incident.

Who receives it

We share personal data only with providers who help us run the business and process data on our behalf under a contract, such as hosting, email and IT providers, accounting firms and legal advisers. Public authorities receive data only where the law requires it. We do not sell personal data.

Transfers outside the EEA

Our email is provided by Proton AG in Switzerland, a country the European Commission recognises as providing an adequate level of data protection. If another provider processes personal data outside the European Economic Area, we rely on appropriate safeguards, such as the standard contractual clauses approved by the European Commission.

Your rights

You have the right to:

• access your data and receive a copy of it
• have inaccurate data corrected
• have data erased or its processing restricted
• receive the data you provided in a portable format
• object to processing based on our legitimate interests
• withdraw consent at any time, without affecting processing carried out before

To use these rights, write to crestcompact@proton.me. You can also lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa.

Providing data is voluntary, but without contact details we cannot reply to your brief. We do not use automated decision-making or profiling.

Cookies

This website does not use advertising or analytics cookies. It stores one technical note in your browser's session storage, so the opening animation plays only once per visit; it is deleted when you close the browser tab.

If we add analytics or marketing tools in the future, we will ask for your consent before they run and list them in this section.

You can delete or block cookies and site data in your browser settings.

Changes to this policy

We may update this policy when our services or the law change. The date at the top of the page shows the latest version.