Last Updated: 22 July 2026
This Privacy Policy describes how Cugada Kumaza, operating at plac Stefana Batorego 4, Szczecin, Poland ("we", "us", "our"), processes personal data collected through the website cugada-kumaza.info and through direct contact with our organization. We are committed to handling personal data responsibly and in full accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (the General Data Protection Regulation, "GDPR") and the Polish Act of 10 May 2018 on the Protection of Personal Data (Ustawa z dnia 10 maja 2018 r. o ochronie danych osobowych).
The data controller for personal data processed through this website and our workshop activities is Cugada Kumaza, plac Stefana Batorego 4, Szczecin, Poland. You can contact us regarding data protection matters by email at [email protected] or by telephone at +48914403400. We do not have a designated Data Protection Officer, as we are not required to appoint one under Article 37 of the GDPR, but all data protection enquiries are handled directly by our management.
We collect personal data in two primary ways. First, through the contact form on our website, which requests your name, organization name, email address, telephone number, and the content of your message. Completion of this form is entirely voluntary. Second, we may collect personal data when you contact us directly by telephone or email, in which case the data collected is limited to what you choose to share with us in that communication. We do not collect data through automated means beyond standard server logs, which may record IP addresses and browser information for technical and security purposes. These logs are not used for profiling or marketing.
The legal basis for processing data submitted through our contact form is Article 6(1)(b) of the GDPR, which permits processing necessary for taking steps at the request of the data subject prior to entering into a contract, and Article 6(1)(f), which permits processing based on our legitimate interest in responding to enquiries directed at our organization. Where you have given explicit consent, such as by ticking the privacy checkbox on our contact form, we also rely on Article 6(1)(a) of the GDPR. You may withdraw consent at any time without this affecting the lawfulness of processing that occurred before withdrawal.
Data submitted through our contact form is processed solely for the purpose of responding to your enquiry, providing information about our workshops and educational activities, and maintaining a record of our correspondence for internal administrative purposes. We do not use personal data collected through the website for marketing, profiling, or sale to third parties under any circumstances.
We retain personal data submitted through our contact form for as long as necessary to respond to your enquiry and for a reasonable period thereafter to address any follow-up questions or administrative matters arising from that correspondence. In practice, this means we retain contact enquiry data for a period not exceeding two years from the date of last contact, unless a longer retention period is required by applicable law or by the nature of an ongoing relationship. Server log data is retained for a shorter period consistent with standard technical security practices, typically not exceeding ninety days.
We do not sell, rent, or trade personal data. We may share data with technical service providers who assist in operating our website and communications infrastructure, where such providers act as data processors under a data processing agreement in accordance with Article 28 of the GDPR. These providers are required to process data only on our instructions and in accordance with applicable data protection law. We may also disclose data where required to do so by law, court order, or competent regulatory authority.
Our website uses cookies. Details of the cookies we use, their purposes, and how you can manage your preferences are set out in our Cookie Policy, which is available at cugada-kumaza.info/cookies.html. We obtain your consent to non-essential cookies before placing them, in accordance with the requirements of the Polish Telecommunications Law (Prawo telekomunikacyjne) and the GDPR.
As a data subject, you have the following rights under the GDPR: the right to access personal data we hold about you (Article 15); the right to rectification of inaccurate data (Article 16); the right to erasure in certain circumstances (Article 17); the right to restriction of processing in certain circumstances (Article 18); the right to data portability where processing is based on consent or contract and carried out by automated means (Article 20); and the right to object to processing based on legitimate interests (Article 21). To exercise any of these rights, please contact us at [email protected]. We will respond within one month of receiving your request, as required by Article 12 of the GDPR.
If you believe that our processing of your personal data does not comply with applicable data protection law, you have the right to lodge a complaint with the supervisory authority. In Poland, the supervisory authority is the President of the Personal Data Protection Office (Prezes Urzedu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warsaw. You may also have the right to an effective judicial remedy. We would, however, encourage you to contact us first so that we have the opportunity to address your concern directly.
We aim to process personal data within the European Economic Area. Where any service provider we use processes data outside the EEA, we ensure appropriate safeguards are in place in accordance with Chapter V of the GDPR, such as standard contractual clauses approved by the European Commission.
We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The date at the top of this document indicates when it was last revised. We encourage you to review this page periodically. Continued use of our website after any update constitutes acknowledgment of the revised policy.