01 Data controller
The controller of personal data processed in connection with the use of gizalab.pl is Motogadabout Spółka z ograniczoną odpowiedzialnością (a limited liability company) with its registered office at ul. Kalwaryjska 41, 34-113 Sosnowice, Poland, entered in the Register of Entrepreneurs of the National Court Register under KRS number 0001246244, tax ID (NIP) 5512679084, REGON 544948350 (the "Controller", "we").
Contact: email info@gizalab.pl, phone +48 502 217 725, or in writing to the registered address.
02 Data protection officer
The Controller has not appointed a data protection officer. For any matter concerning personal data, please contact info@gizalab.pl.
03 What data we process, why and for how long
| Situation | Data | Purpose and legal basis | Retention |
|---|---|---|---|
| Visiting the website | IP address, date and time of the request, the page visited, browser and system information (server logs). | Displaying the website, keeping it secure and preventing abuse. Legitimate interest of the Controller (Art. 6(1)(f) GDPR). | Up to 7 days (Cloudflare Workers hosting logs). |
| Contact form | Name, email address, message and — if you provide them — phone number, company name, project type and timeline. | Replying to your enquiry: legitimate interest (Art. 6(1)(f) GDPR). Where the enquiry concerns a contract: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR). | For the duration of the correspondence, then until any potential claims become time-barred. |
| Protecting the form from bots | IP address, browser and device information and technical signals needed to tell a person from a program (Cloudflare Turnstile); a submission counter tied to the IP address. | Protecting the form from spam and abuse. Legitimate interest of the Controller (Art. 6(1)(f) GDPR). | For the duration of the check; the submission counter — up to 60 seconds. The website does not store verification results. |
| Contact by email or phone | Data provided in the message or conversation, usually name, email address and phone number. | Replying and corresponding: legitimate interest (Art. 6(1)(f) GDPR). Where the contact concerns a contract: Art. 6(1)(b) GDPR. | For the duration of the correspondence, then until any potential claims become time-barred. |
The website does not store form data: the message is forwarded by email to the Controller’s inbox and is not saved in any database. There are no user accounts and no newsletter. We do not make automated decisions about you within the meaning of Art. 22 GDPR and we do not profile you.
04 Recipients
Data may be shared with entities that process it on our behalf:
- Cloudflare, Inc.: website hosting, content delivery network, form protection (Turnstile) and email forwarding (Email Routing);
- Google Ireland Limited (Gmail): the mailbox that receives messages;
- providers of IT, accounting and legal services to us, to the extent necessary.
Data may also be disclosed to public authorities where required by law.
05 Transfers outside the European Economic Area
Cloudflare, Inc. and Google LLC (parent company of the mailbox provider) are based in the United States. Transfers outside the EEA rely on the European Commission’s adequacy decision under the EU-US Data Privacy Framework or on standard contractual clauses approved by the European Commission.
06 Your rights
You have the right to:
- access your data and receive a copy;
- rectify your data;
- erase your data;
- restrict processing;
- data portability, to the extent provided by the GDPR;
- object to processing based on the Controller’s legitimate interest;
- lodge a complaint with the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw, Poland) if you believe the processing infringes the law.
To exercise your rights, write to info@gizalab.pl. Providing data in the form or when contacting us is voluntary, but without it we cannot reply.
07 Cookies
gizalab.pl does not use cookies or any other technology that stores information on your device (such as browser local storage). We do not use analytics or advertising tools. Fonts are served from our own server, not from external services. That is why the website does not ask for cookie consent.
The only third-party script is Cloudflare Turnstile, loaded on the contact page only, to protect the form. It is not used for tracking or advertising. Cloudflare may also set technical security cookies (e.g. __cf_bm, cf_clearance) only when its security system needs to tell people from bots. They are strictly necessary and do not require consent.
If we ever start using cookies that are not strictly necessary, we will ask for your consent and update this policy.
08 Our work and the MotoGadabout ecosystem
The website links to websites we have delivered for clients. Each is run by its owner and has its own privacy policy.
GIZALAB is part of the MotoGadabout ecosystem. Ecosystem websites (motogadabout.com) have their own privacy policies — please read them after visiting the chosen site.
09 Changes to this policy
We may update this policy, for example when the website’s features or the law change. The current version is always available on this page.
Effective from the day the website is launched.