Legal Document

Privacy Policy

Last Updated: 16 July 2026 | Zejoda / zejoda.info

1. Controller Identity and Contact

The controller of your personal data within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, "GDPR") and the Polish Act on Personal Data Protection of 10 May 2018 (Ustawa z dnia 10 maja 2018 r. o ochronie danych osobowych, Dz.U. 2018 poz. 1000) is the operator of the Zejoda platform, reachable at:

  • Website: zejoda.info
  • Address: Józefa Ignacego Kraszewskiego 7/lok.1, 85-008 Bydgoszcz, Poland
  • Email: [email protected]
  • Phone: +48 663 828 222

For all matters relating to the processing of your personal data, including the exercise of your rights, you may contact us at the address or email above.

2. Categories of Personal Data Collected

The following table describes the categories of personal data we may collect, the circumstances in which collection occurs, and the purposes for which each category is processed.

Data Category Examples Collection Context Purpose
Identification data Full name Contact form submission Responding to enquiries; identifying the enquiring party
Contact data Email address, telephone number Contact form, direct correspondence Communicating about enquiries and session arrangements
Correspondence content Message text submitted via contact form Contact form Handling and responding to the specific enquiry
Technical data IP address, browser type, device type, pages visited, referral source Automatic collection via cookies and server logs (with consent where required) Website security, analytics (where consented), troubleshooting
Cookie preference data Consent record, preference settings Cookie consent tool Recording and honouring your cookie preferences as required by law

3. Legal Bases for Processing

We rely on the following legal bases under Article 6 GDPR for processing personal data:

  • Article 6(1)(a) — Consent: Where you have freely given, specific, informed, and unambiguous consent, including consent for optional cookie categories.
  • Article 6(1)(b) — Contract performance: Where processing is necessary to arrange and deliver one-on-one sessions or respond to pre-contractual enquiries.
  • Article 6(1)(c) — Legal obligation: Where processing is required to comply with Polish law, tax law, or other applicable legal obligations.
  • Article 6(1)(f) — Legitimate interests: For the security and technical operation of the website, where such interests are not overridden by your interests or fundamental rights.

4. Data Retention

Personal data is retained only for as long as necessary for the purpose for which it was collected, and in any case no longer than required by applicable law. Contact form data is retained for a period of up to 24 months from the date of last contact. Technical log data is typically retained for up to 90 days. Cookie preference records are retained for 12 months from the date of consent. If a contractual relationship arises from an enquiry, data related to that relationship is retained for the periods required by Polish accounting and civil law, which may be up to 5 years after the end of the relationship.

5. Data Recipients and Transfers

We do not sell personal data. We may share data with third-party service providers who process data on our behalf under data processing agreements compliant with Article 28 GDPR. These providers may include hosting infrastructure providers, email service providers, and website analytics providers (where you have consented to analytics cookies). All processors are required to maintain appropriate security measures and to process data only on our documented instructions.

Where any transfer of personal data outside the European Economic Area occurs, we ensure that appropriate safeguards are in place in accordance with Chapter V GDPR, including Standard Contractual Clauses adopted by the European Commission.

6. Your Rights Under GDPR

As a data subject, you have the following rights under GDPR, which you may exercise at any time by contacting us at [email protected]:

  • Right of access (Article 15 GDPR): to receive a copy of your personal data we hold and information about how it is processed.
  • Right to rectification (Article 16 GDPR): to have inaccurate or incomplete data corrected.
  • Right to erasure (Article 17 GDPR): to request deletion of your personal data where no overriding legal basis for continued processing exists.
  • Right to restriction (Article 18 GDPR): to restrict processing in certain circumstances.
  • Right to data portability (Article 20 GDPR): to receive your data in a structured, commonly used, machine-readable format where processing is based on consent or contract and carried out by automated means.
  • Right to object (Article 21 GDPR): to object to processing based on legitimate interests.
  • Right to withdraw consent (Article 7(3) GDPR): to withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warsaw, Poland, website: uodo.gov.pl.

7. Security Measures

We implement technical and organisational measures appropriate to the risk of processing personal data, including encryption of data in transit, access controls, and regular review of security practices. No method of electronic transmission or storage is entirely secure; however, we take reasonable steps to protect your data against unauthorised access, loss, or disclosure.

8. Automated Decision-Making

Zejoda does not engage in automated decision-making or profiling that produces legal effects or similarly significantly affects data subjects within the meaning of Article 22 GDPR.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Material changes will be communicated via a notice on the website. The "Last Updated" date at the top of this document indicates the date of the most recent revision. Continued use of the website after changes take effect constitutes acceptance of the revised policy.