Privacy Policy

1. Who is responsible for your data

The controller of your personal data is ZMEEVA spółka z ograniczoną odpowiedzialnością, with its registered office at ul. Młynarska 29, 58-300 Wałbrzych, Poland, entered in the Register of Entrepreneurs of the National Court Register under KRS 0001211425, NIP 8863042735, REGON 543491457.

For any matter concerning personal data, write to contact@zmeeva.eu. We have not appointed a Data Protection Officer; enquiries sent to that address reach the people responsible.

2. What we collect, why, and on what legal basis

Data	Purpose	Legal basis (GDPR)	Kept for
Contact form: name, company, email, phone, project type, budget range, your description	Answering your enquiry and preparing an offer	Art. 6(1)(b) — steps prior to a contract; Art. 6(1)(f) — our legitimate interest in replying to business enquiries	24 months from the last message, unless a contract follows
Checkout: name, email, phone, company, VAT number, billing address	Concluding and performing the contract, and producing your order record	Art. 6(1)(b) — performance of a contract	For the duration of the contract
Transaction data relating to a purchase	Accounting and tax obligations under Polish law	Art. 6(1)(c) — legal obligation	5 years from the end of the tax year in which the transaction occurred
Server logs: IP address, time of request, page requested, browser identification	Keeping the site available and secure, diagnosing faults	Art. 6(1)(f) — our legitimate interest in the security of our own systems	Up to 12 months
Session identifier stored in a cookie	Remembering the contents of your basket between pages	Art. 6(1)(f) — our legitimate interest in providing a working basket; the cookie itself is strictly necessary and exempt from consent	Until you close the browser

Providing the data marked as required in a form is voluntary, but without it we cannot answer an enquiry or complete an order.

3. Billing data and the payment page

We collect your billing details ourselves, on this website, and transmit them to our payment service provider so that the payment page is already filled in and so that the correct tax is applied. That provider acts as merchant of record for the transaction: it processes the payment, determines and settles the applicable tax, and issues the tax invoice.

Card numbers never reach our servers. Card details are entered on a page operated by the payment provider and are processed exclusively by that provider. We receive only the outcome of the payment, the amount, the currency and the billing details you gave us.

4. Who else sees your data

We do not sell personal data and we do not share it for advertising. Data is disclosed only to the following categories of recipient, and only to the extent necessary:

• our payment service provider, which acts as an independent controller and merchant of record for purchases;
• our hosting provider, which stores the website and its logs;
• our email provider, through which correspondence is delivered;
• our accounting office, for transactions that must be recorded;
• public authorities, where disclosure is required by law.

The payment method logos shown in the site footer are loaded from a public content delivery network. This sets no cookies, but it means the network operator receives your IP address and the identification of your browser. No other content on this site is loaded from third parties, and the fonts are served from our own server precisely so that they do not create such a request.

5. Transfers outside the European Economic Area

Our payment service provider may process data outside the EEA. Where that happens, the transfer is covered by the European Commission's standard contractual clauses or another mechanism permitted by Chapter V of the GDPR. You may ask us for details of the safeguards that apply.

6. Your rights

You have the right to: access your data and obtain a copy of it; have inaccurate data corrected; have data erased; restrict processing; receive data you provided in a structured, machine-readable format and have it transmitted to another controller; and object to processing based on our legitimate interest.

To exercise any of these, write to contact@zmeeva.eu. We answer within one month.

You also have the right to lodge a complaint with the supervisory authority: the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland.

7. Automated decision-making

We do not carry out profiling and we do not take decisions about you by automated means.

8. Security

The site is served over an encrypted connection. Access to enquiry and order data is limited to the people who need it to do the work. Where we process personal data on your behalf in the course of a project, the terms of that processing are set out in a separate data processing agreement.

9. Changes to this policy

If this policy changes, the revised version is published on this page with a new date at the top. Material changes affecting an ongoing contract are communicated by email.