This Privacy Policy describes how Iso100 Sp. z o.o., ul. Kupa 3/13, 31-057 Kraków, Poland (hereinafter: "we", "Karma Media") collects, uses and protects personal data of users visiting the website karmamedia.pl, in accordance with Regulation (EU) 2016/679 (GDPR).
1. Data Controller
The controller of your personal data is:
Iso100 Sp. z o.o.
ul. Kupa 3/13, 31-057 Kraków
E-mail: kontakt@karmamedia.pl
Phone: +48 600 459 606
2. What Data We Collect
We may collect the following categories of personal data:
- Contact form data — name, company, e-mail address, project description (when you submit an inquiry).
- Project brief data — all information you provide when completing the project brief form.
- Technical data — IP address, browser type, pages visited, visit duration (collected automatically via server logs and analytics tools).
3. Purposes and Legal Bases for Processing
- Responding to inquiries — Art. 6(1)(b) GDPR (pre-contractual measures at your request).
- Service performance — Art. 6(1)(b) GDPR (contract performance).
- Legal obligations — Art. 6(1)(c) GDPR (e.g. accounting and tax obligations).
- Legitimate interests — Art. 6(1)(f) GDPR (website analytics, fraud prevention).
- Marketing communications — Art. 6(1)(a) GDPR (only with your explicit consent).
4. Data Retention
We retain personal data only as long as necessary for the purposes stated above:
- Inquiry and contact data: up to 3 years from the last contact.
- Accounting documents: 5 years from the end of the financial year (Polish Accounting Act).
- Website analytics data: up to 26 months (aggregated).
5. Your Rights
Under the GDPR you have the right to:
- Access your personal data (Art. 15 GDPR).
- Rectify inaccurate data (Art. 16 GDPR).
- Erase data ("right to be forgotten") (Art. 17 GDPR).
- Restrict processing (Art. 18 GDPR).
- Data portability (Art. 20 GDPR).
- Object to processing (Art. 21 GDPR).
- Withdraw consent at any time (without affecting the lawfulness of prior processing).
- Lodge a complaint with the Polish supervisory authority: UODO (uodo.gov.pl).
To exercise your rights, contact us at: kontakt@karmamedia.pl.
6. Data Recipients
We may share your data with:
- Formspree Inc. — form submission processing (data processed in the USA under Standard Contractual Clauses).
- Hosting providers — server infrastructure partners.
- Accounting and legal advisors — bound by professional confidentiality obligations.
We do not sell personal data to third parties.
7. Cookies
Our website uses cookies — small text files stored on your device. We use:
- Essential cookies — necessary for the website to function properly (no consent required).
- Analytics cookies — to understand how visitors use the site (require consent).
You can manage cookie preferences at any time via your browser settings or our cookie consent banner.
8. Security
We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or destruction, including SSL encryption, access controls and regular security reviews.
9. Changes to This Policy
We may update this Privacy Policy periodically. The current version is always available on this page. Material changes will be communicated via the website.
10. Contact
For any questions regarding this Privacy Policy:
Iso100 Sp. z o.o., ul. Kupa 3/13, 31-057 Kraków
kontakt@karmamedia.pl