Privacy Policy
1. Data controller
The controller of your personal data is ESQRD SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ (short name: ESQRD Sp. z o.o.), with its registered office at 4 Wolinska str., Warsaw, 03-699, Poland, entered in the National Court Register (KRS) under no. 0001021056, tax ID (NIP): 5214008266 (EU VAT: PL5214008266), REGON: 52459936200000 (the “Controller”).
Contact for data protection matters: the contact form at esqrd.pl/contact or by post to the Controller’s registered office. Security and incident reports: urgent@esqrd.co.
2. Purposes, legal bases and retention
| Purpose | Data | Legal basis (GDPR) | Retention |
|---|---|---|---|
| Handling enquiries sent via the contact form | name, email, phone (optional), message | Art. 6(1)(b) (steps prior to entering into a contract at your request) and 6(1)(f) (legitimate interest in replying to correspondence) | until the enquiry is handled, then for 3 years to defend against claims |
| Website statistics and analytics | cookie identifiers, IP address, device and browser data, pages viewed | Art. 6(1)(a) (consent), and consent required by the Polish Electronic Communications Law for non-essential cookies | as stated in the cookie table below, or until consent is withdrawn |
| Marketing and remarketing (Meta Pixel) | cookie identifiers, IP address, on-site behaviour | Art. 6(1)(a) (consent) | as stated in the cookie table, or until consent is withdrawn |
| Website security; establishing, exercising or defending legal claims | server logs, IP address, correspondence data | Art. 6(1)(f) (legitimate interest) | logs up to 12 months; other data until claims become time-barred |
Providing data is voluntary, but without it we cannot answer your enquiry sent via the contact form. We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you.
3. Recipients
Your data may be shared with or entrusted to the providers we use:
- hosting and IT infrastructure providers;
- analytics and advertising providers: Google Ireland Limited (Google Analytics), Meta Platforms Ireland Limited (Meta Pixel);
- accounting, legal and advisory service providers, to the extent necessary;
- public authorities, where required by law.
4. Transfers outside the EEA
Some providers may process data outside the European Economic Area, in particular in the United States. Transfers take place only under GDPR mechanisms: a European Commission adequacy decision (e.g. the EU–US Data Privacy Framework for certified recipients) or Standard Contractual Clauses. You can obtain a copy of the safeguards by contacting us.
5. Your rights
You have the right to access your data (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing based on legitimate interests (Art. 21). Where processing is based on consent, you may withdraw it at any time; withdrawal does not affect the lawfulness of processing carried out before it.
To exercise your rights, use the contact form at esqrd.pl/contact or write to the registered office: 4 Wolinska str., Warsaw, 03-699, Poland. You may also lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl, or with the supervisory authority in your EU country of residence.
6. Cookies
The website uses cookies and similar technologies. Essential cookies are always active; analytics and marketing cookies are enabled only after you consent, and you can change or withdraw your choice at any time via the cookie settings available on the website or your browser settings.
| Category | Tool / name | Purpose | Lifetime |
|---|---|---|---|
| Essential | consent-choice cookie | storing consent choices, security | 12 months |
| Analytics | Google Analytics: _ga, _gid | visit statistics | 2 years / 24 hours |
| Marketing | Meta Pixel: _fbp | ad performance measurement, remarketing | 3 months |
7. Security
We apply appropriate technical and organisational measures (including HTTPS encryption, access control and backups) to protect data against unauthorised access, loss or destruction. If you suspect a data breach or a security vulnerability, please tell us at urgent@esqrd.co.
8. Children
The website is not directed at persons under 16 and we do not knowingly collect their data. If you believe a child has provided us with data, contact us and we will delete it promptly.
9. Changes to this policy
We may update this policy, for example due to changes in the law or the website. The current version is always available on this page together with its effective date.