Who is the controller of your data
The controller of the personal data collected on this website and in correspondence is EBMT Consulting Krzysztof Sadurski. Contact for any matter concerning your data: details below. We reply within one working day.
| CONTROLLER | EBMT Consulting Krzysztof Sadurski |
| ADDRESS | ul. Henryka Biernackiego 26, 58-250 Pieszyce, Poland |
| TAX ID (NIP) | PL7162312354 |
| contact@ebmtconsulting.com | |
| DATA PROTECTION OFFICER | Not appointed, matters are handled by a partner |
What data we collect
We collect only the data you provide yourself and the technical data needed for the site to operate securely. Providing data is voluntary, but without an e-mail address we cannot reply to your enquiry. Call booking details are entered in the TidyCal calendar embedded on the Contact page; the provider of that tool collects them on our behalf.
| CONTACT FORM | CALL BOOKING | TECHNICAL DATA |
|---|---|---|
| Full name | Full name | IP address |
| E-mail address | E-mail address | Browser type |
| Company and role | Selected slot | Date and time of visit |
| Phone, if provided | Time zone | Pages visited |
| Message content | Meeting note | Referral source |
Purposes, legal bases and retention periods
Each purpose has its own legal basis under the GDPR and its own retention period. Once the period expires, we delete or anonymise the data.
| PURPOSE | LEGAL BASIS | PERIOD |
|---|---|---|
| Replying to an enquiry from the form | Art. 6(1)(b) and (f) GDPR | 12 months from the end of correspondence |
| Booking and holding an intro call | Art. 6(1)(b) GDPR | 12 months from the meeting date |
| Performance of an advisory or training contract | Art. 6(1)(b) GDPR | Duration of the contract and 6 years after it ends |
| Settlements, invoices, accounting | Art. 6(1)(c) GDPR | 5 years from the end of the tax year |
| Establishing and defending claims | Art. 6(1)(f) GDPR | Until the limitation period expires |
| Sending materials and information about services | Art. 6(1)(a) GDPR, consent | Until consent is withdrawn |
| Site statistics and security | Art. 6(1)(f) GDPR | 12 months, server logs 3 months |
Who we share data with
Data goes only to the partners of EBMT Consulting and to the providers who run our tools. Each of them acts under a data processing agreement and may process data only to the extent we specify.
| Website hosting provider | Hostinger (hostinger.com) |
| Business e-mail provider | Google Workspace (Google), United States |
| Call booking calendar and online meeting link | TidyCal (tidycal.com), United States |
| Legal advisers, when needed | ON REQUEST |
The booking calendar on the Contact page is embedded from TidyCal and loads when you open that page. TidyCal processes the booking details (full name, e-mail address, selected slot, meeting note) and technical browser data, including for its reCAPTCHA protection. The provider's policy: <a href="https://tidycal.com/privacy-policy" target="_blank" rel="noopener noreferrer">tidycal.com/privacy-policy</a>.
We do not sell, exchange or share data with advertising networks. We disclose it to public authorities only where required by law.
Transfers of data outside the EEA
Some of the tools we use have servers outside the European Economic Area. In such cases the transfer takes place on the basis of standard contractual clauses approved by the European Commission or an adequacy decision. Tools involving transfers outside the EEA: TidyCal, call booking calendar (United States), and Google Workspace, business e-mail (United States). If the list changes, we will update this point.
Your rights
You can exercise each of these rights with a single e-mail. We reply without undue delay, and at the latest within one month of your request.
| RIGHT | WHAT IT MEANS |
|---|---|
| Access to data | We will tell you what data we hold about you and where we got it. |
| Rectification | We will correct inaccurate data and complete incomplete data. |
| Erasure | We will delete your data unless we are required by law to keep it. |
| Restriction | We will suspend processing while the matter is clarified. |
| Portability | We will provide your data in a machine-readable format. |
| Objection and consent | You can object to processing under point (f) and withdraw consent at any time. |
If you believe we process data unlawfully, you have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.
Cookies
We always use essential cookies, because the site does not work without them. The others are activated only after your consent in the banner. The exception is the booking calendar on the Contact page, embedded from TidyCal: it loads when you open that page and may set that service's own cookies. You can change your consent at any time and delete cookies in your browser settings.
| CATEGORY | PURPOSE | DURATION | CONSENT |
|---|---|---|---|
| Essential | Session handling, remembering your cookie banner choice, form security | Session up to 12 months | Not required |
| Analytics | Aggregate statistics on visits and page popularity, without identifying individuals | Up to 12 months | Required |
| Functional | Language version selection and site settings | Up to 6 months | Required |
| Third party: TidyCal | Embedded booking calendar on the Contact page, including reCAPTCHA protection | As per the TidyCal policy | Loads when Contact opens |
| Marketing | Not used. If that changes, we will add them here and in the banner | None | None |
Data security
The site runs over an encrypted connection. Only the partners have access to mailboxes and documents, on accounts protected by two-factor authentication. We keep client materials separately for each project and delete them once the period stated in point 03 has passed. Technical documentation and production data we receive during an audit are covered by a confidentiality agreement.
Profiling and automated decisions
We do not make decisions based solely on automated processing and we do not profile visitors. Enquiries are read and assessed by a partner, not an algorithm.
Changes to this document
We update this policy when we change our tools or the scope of our services. The date of the last change and the version number are shown at the top of this page. Earlier versions are available on request. If a change is significant, we will inform the people we are in correspondence with.