Privacy and cookies

1. Controller and contact details

The controller of your personal data is Kamil Kłopocki, conducting business under the name CAUTE Legal & Regulatory Advisory Kamil Kłopocki, Polish tax identification number (NIP) 7773078806, address for service: ul. Głogowska 39/16, 60-736 Poznań, Poland (“CAUTE”, “we”, “us”).

For privacy-related matters, contact us at k.klopocki@caute.eu or by post at the address above.

2. Scope and categories of data

This policy explains how we process data relating to visitors to caute.eu, people who contact CAUTE, and representatives of businesses or other organisations interested in working with us.

In correspondence, we may process your name, email address, telephone number, organisation, position, message content and attachments. We may also receive business contact details and information about your role from your organisation or another person who identifies you as a contact.

When the website is accessed, its infrastructure may process technical data necessary to display and secure the site and diagnose faults, including an IP address, request time, requested resource, response code and basic browser and device information. The site does not provide a contact form, user accounts or a newsletter.

3. Purposes and legal bases

We process technical data to provide and secure the website, diagnose faults and prevent abuse, on the basis of our legitimate interests under Article 6(1)(f) GDPR.

We process correspondence to respond to enquiries, understand needs and discuss potential cooperation, on the basis of Article 6(1)(f) GDPR. Where an individual requests steps leading to a contract to which that individual will be a party, Article 6(1)(b) GDPR may also apply.

We may also process data to comply with legal obligations, handle data-subject requests and establish, exercise or defend legal claims, as applicable under Article 6(1)(c) or (f) GDPR.

4. Provision and retention of data

Providing data in correspondence is voluntary, but without the information needed to contact you or understand the matter, we may be unable to respond or prepare a proposal.

Correspondence that does not lead to a contract is retained while discussions remain active and for no longer than 12 months after the last substantive message, unless earlier deletion is appropriate or longer retention is necessary for legal claims. Data relating to privacy requests and claims is kept for the period necessary to handle and document them. Technical data is retained in line with infrastructure settings and practices, for no longer than necessary for security, diagnostics and the protection of claims.

5. Recipients and international transfers

Data may be accessed by authorised persons and service providers necessary for CAUTE’s operations, including website hosting and internet infrastructure, IT support and Google Workspace email services. It may also be disclosed to advisers supporting the protection of CAUTE’s rights and to competent authorities where required by law.

Some providers may process data outside the European Economic Area. Where this occurs, the transfer relies on an applicable European Commission adequacy decision or appropriate safeguards, in particular standard contractual clauses, together with supplementary measures where required.

6. Your rights

Subject to the conditions of the GDPR, you may request access to and a copy of your data, rectification, erasure or restriction, data portability, and object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

Send requests to k.klopocki@caute.eu. You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office or another competent supervisory authority.

7. Cookies and similar technologies

We have not implemented analytics or advertising cookies, profiling tools, external analytics, embedded social-media plugins or browser storage used to track visitors. The site therefore does not display a consent banner.

Technical infrastructure may use solutions strictly necessary to transmit data, maintain security and deliver the page requested by the visitor. If technologies requiring consent are introduced in the future, they will be activated only after the visitor has made an appropriate choice, and this policy will be updated.

8. External links, automated decisions and updates

The site contains ordinary links to third-party websites, including LinkedIn and external publications. Once you follow such a link, the third-party operator processes data under its own rules. Selecting an email address opens your email application.

Within the scope of this policy, we do not make decisions based solely on automated processing that produce legal or similarly significant effects. We update this policy when the operation of the site, the tools used or our processing practices change.