Privacy Policy

Last updated: 16 July 2026

This Privacy Policy explains how Hanibe (operating through hanibe.info, located at Zwycięstwa 8/lokal 407, Białystok, Poland) collects, processes, and protects personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (the "General Data Protection Regulation" or "GDPR") and Polish implementing legislation, including the Act of 10 May 2018 on the Protection of Personal Data (Dz.U. 2018 poz. 1000, as amended).

1. Data Controller

The data controller for personal data processed through this website is Hanibe, Zwycięstwa 8/lokal 407, Białystok, Poland. You can contact us regarding data protection matters at: [email protected] or by phone at +48 886 971 974.

2. Categories of Personal Data We Process

The following table sets out the categories of personal data we may collect, the purposes for which we use them, and the legal basis for processing under Article 6 GDPR.

Data Category Examples Purpose Legal Basis (Art. 6 GDPR)
Contact data Name, email address, phone number Responding to inquiries submitted through the contact form Art. 6(1)(b) – processing necessary to take steps at the request of the data subject; Art. 6(1)(f) – legitimate interest in managing correspondence
Communication content Message text submitted via the contact form Understanding and responding to the inquiry Art. 6(1)(b); Art. 6(1)(f)
Technical / log data IP address, browser type, pages visited, time of visit, referral URL Site security, performance monitoring, aggregate analytics Art. 6(1)(f) – legitimate interest in operating a secure and functional website
Cookie data Cookie identifiers and preference settings Storing user consent preferences; optional analytics (only with consent) Art. 6(1)(c) – legal obligation (consent management); Art. 6(1)(a) – consent for analytics cookies

3. How We Collect Personal Data

We collect personal data through the following means:

  • Contact form submissions: When you complete and submit the contact form on this website, the data you enter (name, email, phone, message) is transmitted to us via your email client as a mailto action.
  • Cookies and similar technologies: Cookies placed on your device when you visit the site may collect technical and usage data. See our Cookie Policy for full details.
  • Server logs: Our web hosting provider automatically records technical information about each request made to the server.

4. Retention Periods

We retain personal data only as long as necessary for the purposes for which it was collected:

  • Contact form correspondence: retained for up to 24 months from the date of last contact, unless a longer period is required by law or ongoing communication.
  • Server log data: retained for a maximum of 90 days, after which it is automatically deleted or anonymized.
  • Cookie consent records: retained for 12 months from the date of consent.

5. Data Sharing and Third Parties

We do not sell personal data. We do not share personal data with third parties for marketing purposes. Data may be disclosed to:

  • Hosting and infrastructure providers: Our web hosting provider processes server log data as part of providing the hosting service. We use providers operating within the EEA or under appropriate safeguards.
  • Legal or regulatory authorities: Where we are required by law, court order, or regulatory authority to disclose personal data.

6. International Data Transfers

Where personal data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place as required by Chapter V of the GDPR, including reliance on European Commission adequacy decisions or Standard Contractual Clauses.

7. Your Rights Under GDPR

As a data subject, you have the following rights under the GDPR:

  • Right of access (Art. 15): You may request a copy of the personal data we hold about you.
  • Right to rectification (Art. 16): You may request correction of inaccurate personal data.
  • Right to erasure (Art. 17): You may request deletion of your personal data where the legal basis for processing no longer applies.
  • Right to restriction (Art. 18): You may request that we limit processing of your data in certain circumstances.
  • Right to data portability (Art. 20): Where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, machine-readable format.
  • Right to object (Art. 21): You may object to processing based on legitimate interests.
  • Right to withdraw consent (Art. 7(3)): Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within one month as required by Article 12 GDPR.

8. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority. In Poland, the competent supervisory authority is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warsaw, Poland. Website: uodo.gov.pl.

9. Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures are reviewed and updated as necessary. No method of internet transmission is completely secure; however, we take data security seriously and apply reasonable protections.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last updated" date. We encourage you to review this policy periodically. Continued use of the website after changes are posted constitutes acceptance of the updated policy.

11. Contact

For any questions about this Privacy Policy or your personal data, contact us at:

Hanibe
Zwycięstwa 8/lokal 407
Białystok, Poland
Email: [email protected]
Phone: +48 886 971 974