Privacy Policy

This Privacy Policy describes the rules for processing personal data and using cookies and similar technologies on the Kraken Group website available at https://krakengroup.eu/, with particular regard to technologies used by providers of embedded third-party content.

1. Data controller

The controller of personal data is KRAKEN GROUP Spółka z ograniczoną odpowiedzialnością z siedzibą w Poznaniu, ul. Szamarzewskiego 21/2, 60-514 Poznań, KRS: 0001115291, NIP: 7812072890, REGON: 529113832.

For matters related to personal data protection, contact: info@krakengroup.eu, phone +48 790 350 450.

2. Scope of processed data

Data provided directly by the User

When using contact forms, we may process data voluntarily provided by the User, in particular:

• full name,
• e-mail address,
• company name, if provided,
• selected model, inquiry topic, or other message context,
• message content,
• information about submitted statements or consents where required by the form.

Technical and operational data

When the Website is used, we may also process technical data, including IP address, device or browser identifiers, operating system type, information about visited subpages, request time, technical errors, language settings, and server logs.

3. Sources of data

• from the User, when the User fills in a form or contacts the Controller,
• automatically, when the Website is used through the User's device and browser, including server logs, technical Website cookies, and similar technologies,
• from external service providers, to a limited technical extent, where the User uses third-party content embedded in the Website.

4. Purposes and legal bases of processing

• replying to inquiries, handling correspondence, and taking steps prior to entering into a contract: Article 6(1)(b) GDPR, where the inquiry concerns an offer, order, or cooperation,
• day-to-day contact handling, business communication management, and correspondence handling: Article 6(1)(f) GDPR,
• ensuring Website security, preventing abuse, system administration, and maintaining technical logs: Article 6(1)(f) GDPR,
• establishing, pursuing, or defending against claims: Article 6(1)(f) GDPR,
• fulfilling legal obligations where applicable: Article 6(1)(c) GDPR,
• processing based on separately granted consent: Article 6(1)(a) GDPR, where such consent is requested in a specific case.

5. Is providing data mandatory?

Providing data is voluntary, but for data marked as required it may be necessary to send a Contact Form or receive a reply. Failure to provide required data may make handling the inquiry impossible.

6. Recipients of data

Data may be disclosed to processors acting on behalf of the Controller, in particular hosting providers, server infrastructure providers, IT systems providers, software providers used for website maintenance, technical support providers, and entities providing security or maintenance services for the Website.

Data may also be disclosed to entities authorized under applicable law where such disclosure is required by law.

7. External services and embedded content

The Website may embed or use external services, in particular Google Maps and YouTube. Displaying such elements or navigating to external services may result in the provider receiving technical data such as the IP address, browser data, device information, language settings, diagnostic data, or internet identifiers.

Providers of embedded content may independently store cookies or use similar technologies, and the rules governing those technologies are set out in the terms and privacy policies of those providers. The Controller does not have full control over the technologies used by those entities once their content is loaded in the User's browser.

As of the publication date of this document, the Website does not provide user account registration, a public comments system, or a newsletter service. The Controller also does not declare the use of its own advertising campaigns based on marketing cookies within the Website unless this is communicated separately.

8. Transfers outside the European Economic Area

As a rule, the Controller processes data within the European Economic Area. However, where the User uses functions based on external providers, technical data may be transferred outside the EEA in accordance with the rules used by those providers and the legal mechanisms provided for by the GDPR.

9. Retention period

• data from contact forms and correspondence: for the period necessary to handle the matter and then for the period needed to demonstrate the course of contact and defend against claims,
• data processed under a legal obligation: for the period required by applicable law,
• technical data and logs: for the period justified by security, diagnostics, system administration, and abuse prevention needs,
• data processed based on consent: until the consent is withdrawn, unless further retention is required by law or justified by the defense against claims.

10. Rights of the data subject

The data subject has the right to:

• access personal data and obtain a copy,
• rectify personal data,
• erase personal data where the conditions of the GDPR are met,
• restrict processing,
• data portability where processing is based on consent or contract and carried out by automated means,
• object to processing based on the Controller's legitimate interests,
• withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal,
• lodge a complaint with the President of the Personal Data Protection Office.

11. Automated decision-making

Personal data processed by the Controller is not used to make decisions producing legal effects for the User solely by automated means. The Controller does not carry out profiling within the meaning of Article 4(4) GDPR based on data obtained through the Website unless the User is informed separately in the future.

12. Cookies and similar technologies

The Website may use its own cookies or similar technologies only to the extent necessary for the proper operation of the website, security, maintenance of technical settings, and remembering language or session preferences where required by a given function.

Independently of the above, in the case of external content such as Google Maps or YouTube, providers of those services may use their own cookies, local storage, pixels, or similar technologies in accordance with their own rules. Such technologies may be activated when embedded content is displayed, played, or otherwise used.

The Controller therefore distinguishes between technical technologies used for the operation of the Website itself and technologies originating from third parties. With regard to external technologies, the Controller does not independently determine the storage duration, file names, or detailed technical purposes implemented by the provider on its side.

The User may manage cookie settings through browser settings and may also limit the use of embedded external content. Limiting the use of cookies or similar technologies may, however, affect the proper operation of certain Website functions or prevent the use of maps, video materials, or other external content.

13. Contact

For matters relating to privacy and personal data processing, contact the Controller at info@krakengroup.eu, by phone at +48 790 350 450, or through the form available in the Contact section.