SkullMedia

Privacy Policy

Information on personal data processing under GDPR

1. Basic information

This Privacy Policy describes how we process and protect personal data provided by users in connection with electronic services delivered via uslugi.skullmedia.pl.

Data controller:

SkullMedia - Artur Spychalski
NIP: 5922292367
REGON: 524191477

2. Data we collect

Contact form:

  • First and last name
  • Email address
  • Phone number (optional)
  • Message content
  • Service type and project budget
  • IP address (automatically)
  • Date and time of form submission

Technical data (collected automatically):

  • IP address
  • Browser type and version
  • Operating system
  • Referrer (traffic source)
  • Time spent on the site

3. Purposes of processing

Contact and client support:

  • Replying to inquiries
  • Preparing quotes
  • Project communication
  • Technical support

Security:

  • Spam protection
  • Traffic analysis
  • Abuse prevention
  • reCAPTCHA verification

4. Legal basis

Art. 6(1)(a) GDPR - consent of the data subject (contact form)

Art. 6(1)(f) GDPR - legitimate interests of the controller (security, analytics)

Art. 6(1)(b) GDPR - performance of a contract or pre-contractual steps (service delivery)

5. Data retention periods

Contact form data

or until consent is withdrawn

3 years

Technical data (server logs)

e.g. IP address, access logs

12 months

Contract-related data

under Polish accounting regulations

5 years

6. Your rights

Access

Information about how your data is processed

Rectification

Correction of inaccurate data

Erasure

Request deletion of your data

Restriction

Limiting how we process your data

Portability

Receiving data in a structured format

Objection

Withdrawing consent or objecting to processing

To exercise your rights, email us at: biuro@skullmedia.pl

7. Cookies and tracking technologies

No marketing or analytics cookies

When you browse uslugi.skullmedia.pl normally, we do not use tracking or profiling tools. In particular:

  • We do not use Google Analytics, Meta Pixel or similar marketing analytics
  • We do not use advertising cookies, remarketing or behavioural profiling
  • We do not store marketing preferences in cookies
  • We do not operate user accounts or a newsletter that requires tracking

Processing beyond the contact form

We process personal data only when you voluntarily submit the contact form. Simply visiting the site, reading content or switching between PL/EN does not store your identifying data for marketing purposes.

Browser notice (localStorage)

When you click “Got it” on our information banner, we store a local flag in your browser (localStorage) so we do not show the message again. This is not a tracking cookie and is not sent to our servers.

Google reCAPTCHA (contact form submission only):

We use Google reCAPTCHA v3 for spam protection only when you submit the contact form. reCAPTCHA may collect device and behaviour information under Google’s policy.

8. Data security

Technical measures:

  • SSL/TLS encryption
  • Secured servers
  • Regular updates
  • Security monitoring

Organisational measures:

  • Restricted data access
  • GDPR training
  • Security procedures
  • Regular audits

9. Contact regarding personal data

For questions about personal data processing, contact us:

Subject:GDPR - personal data inquiry

You also have the right to lodge a complaint with the Polish Data Protection Authority (UODO) or your local supervisory authority in the EEA.

10. Changes to this policy

We reserve the right to update this Privacy Policy. We will inform users of material changes via the website.

Last updated: 3 October 2025

Polish version