Privacy policy

Data controller

The controller of your personal data is OUTQUO sp. z o.o., with its registered office in Warsaw at ul. Złota 75A/7, 00-819 Warszawa, entered in the register of entrepreneurs of the National Court Register by the District Court for the Capital City of Warsaw in Warsaw, XIII Commercial Division of the National Court Register, under KRS number 0001270143, NIP (tax ID) 5273239317.

For matters concerning personal data, write to kontakt@outquo.com or send a letter to our registered office. The controller has not appointed a data protection officer.

Contact form and email

When you use the contact form, we process your email address, the topic you choose, the content of your message and, optionally, your first name. When you send us an email, we also process any other data you provide in the correspondence. Messages from the form are delivered to our mailbox; we do not send automated advertising and we do not sign you up for a newsletter.

Purpose and legal basis

• Replying to your message and further correspondence: our legitimate interest in communicating with people who contact us (Art. 6(1)(f) GDPR).
• If you are a natural person asking about entering into a contract: taking steps at your request before entering into the contract (Art. 6(1)(b) GDPR). Contact with representatives of companies is based on our legitimate interest (Art. 6(1)(f) GDPR).
• Establishing, exercising or defending legal claims, if the correspondence may be relevant to them: our legitimate interest (Art. 6(1)(f) GDPR).

Retention period

We keep correspondence for as long as needed to deal with the matter. If it may be relevant to legal claims, we keep it until the limitation periods for those claims expire. If your message leads to a contract, the retention period follows from that contract and from the law, for example tax law.

Voluntary provision of data

Providing your data is voluntary. The form requires an email address and a message so that we can understand your matter and reply. Your first name is optional.

Technical data and security

The server processes your IP address and request data in order to deliver the website and handle the form. We do not keep a log of every visit, and we do not record the content of the form in server logs.

If we need to secure technical data to investigate a security incident, we keep it for as long as the investigation and any related legal claims require. The legal basis is our legitimate interest in keeping the website secure (Art. 6(1)(f) GDPR). We do not use this data to analyse visitor behaviour.

To limit spam, the form server keeps a daily hash of the IP address and the time of the submission attempt for one hour. To protect against duplicate submissions, it stores an identifier, a hash of the content and the status of the submission for 24 hours. This database does not store the content of messages or email addresses. This processing serves security and the proper handling of correspondence (Art. 6(1)(f) GDPR).

Cookies and browser storage

The website does not store cookies or any other data on your device, for example in the browser’s local storage. We do not use analytics or advertising tools, or social media plugins.

All parts of the website, including fonts, scripts, the 3D model and images, are downloaded only from our server. The website does not send requests to other companies’ servers, which is why we do not ask for consent to cookies.

Recipients of data

Data may be received by entities that provide services to us and process data on our behalf: our email service provider and the provider of the server that hosts the website. Where necessary, data may also be received by entities that provide us with accounting or legal services. Providers acting on our behalf process data under a data processing agreement. Other recipients, if they act as separate controllers, process it under the rules that apply to them.

If a service provider processes data outside the European Economic Area, this is based on a decision of the European Commission finding an adequate level of protection or on standard contractual clauses approved by the Commission. You can obtain a copy of the safeguards by writing to kontakt@outquo.com.

We do not sell data, and we do not make automated decisions about you, including profiling.

Your rights

In connection with the processing of your data, you have the right to:

• access to your data and a copy of it (Art. 15 GDPR);
• rectification of your data (Art. 16 GDPR);
• erasure of your data (Art. 17 GDPR);
• restriction of processing (Art. 18 GDPR);
• data portability, if we process your data in connection with a contract (Art. 20 GDPR);
• objection to processing based on our legitimate interest (Art. 21 GDPR).

To exercise these rights, write to kontakt@outquo.com. We will reply without undue delay, as a rule within one month. If the law allows us to extend this period because of the complexity or number of requests, we will tell you about the extension and the reason for it.

If you believe that we process your data unlawfully, you can lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Moniuszki 1A, 00-014 Warszawa, Poland.

Changes to this policy

We update this policy when the way the website works or the law changes. The current version is always available on this page, and the date at the top shows when it took effect.

This is an English version of the Polish privacy policy. If the two versions differ, the Polish version prevails. This does not limit any rights you have under data protection law.