Documents
Privacy policy
Last updated: 20 October 2026
This document explains what personal data we collect on spacepr.pl, why, and what rights you have. We write in plain language — if anything is unclear, write to us.
1. Data controller
The controller of your personal data is SPACE PR Sp. z o.o., registered office in Bielsko-Biała, ul. Gen. S. Maczka 41, 43-300 Bielsko-Biała, Poland, entered in the National Court Register (KRS) under no. 0000673127, NIP (tax ID) 937-269-32-57, REGON 367014288, share capital PLN 10,000.
For matters concerning personal data, write to [email protected] or call +48 731 330 550.
2. What data we process and why
| Situation | Data | Purpose and legal basis | How long |
|---|---|---|---|
| Contact form, consultations, training enquiries | name, e-mail, phone, company, message content | replying and preparing an offer at your request — Art. 6(1)(b) GDPR; correspondence — Art. 6(1)(f) GDPR | until the conversation ends, then up to 3 years (limitation of claims) |
| Consent to be contacted with an offer | e-mail, phone | marketing of SPACE PR services — Art. 6(1)(a) GDPR and Art. 10 of the Polish Act on Providing Services by Electronic Means and Art. 172 of the Telecommunications Law | until consent is withdrawn |
| Training and consultations | participant and payer data, invoice data | performance of a contract — Art. 6(1)(b); tax and accounting obligations — Art. 6(1)(c) GDPR | for the term of the contract and 5 years from the end of the tax year |
| Chat with the AI assistant | conversation content, approximate time, shortened (anonymised) IP address | answering questions, improving answer quality and preventing abuse — Art. 6(1)(f) GDPR | 90 days, then deleted automatically |
| Statistics (with consent) | cookie identifiers, information about your device and the pages you visit | website traffic analysis — Art. 6(1)(a) GDPR | up to 14 months in Google Analytics |
| Marketing (with consent) | cookie and pixel identifiers | measuring effectiveness and targeting ads on Meta and LinkedIn — Art. 6(1)(a) GDPR | until consent is withdrawn, max. 13 months |
| Server security | IP address, date and time, browser type (logs) | protecting the website against attacks — Art. 6(1)(f) GDPR | up to 30 days |
Providing data is voluntary, but without it we cannot reply to your message or conclude a contract.
3. AI assistant on the website
Chat replies are generated by the Claude language model from Anthropic PBC (USA), which acts as our data processor under a data processing agreement and standard contractual clauses. Anthropic does not use conversations sent through the API to train its models.
Please don’t enter sensitive data (e.g. health information) or other people’s data in the chat. The assistant can make mistakes — we will confirm binding information about our offer by e-mail or phone.
4. Who we share data with
We don’t sell data. We use providers that process data on our behalf under data processing agreements:
- e-mail and domain provider — Zenbox Sp. z o.o. (Poland),
- Cloudflare, Inc. — protecting and speeding up traffic to the website,
- Google Ireland Ltd. — Google Analytics 4 and Google Tag Manager (with your consent),
- Meta Platforms Ireland Ltd. — Meta pixel (with marketing consent),
- LinkedIn Ireland Unlimited Company — LinkedIn Insight Tag (with marketing consent),
- Anthropic PBC — operating the AI chat on the website,
- accounting firm and invoicing system provider — for settlements,
- Google (YouTube) — only when you click to play an embedded video.
Some of these companies are based in the USA or have affiliates there. Data transfers are based on the European Commission’s adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses.
5. Your rights
You have the right to access your data and receive a copy, to rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interest. You can withdraw consent at any time — this does not affect the lawfulness of processing before withdrawal. You can change your cookie consents with the button .
If you believe we process your data unlawfully, you can lodge a complaint with the President of the Polish Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl).
We do not make decisions about you based solely on automated processing that would produce legal effects.
6. Cookies
You’ll find the details in our cookie policy. In short: without your consent we only store the files necessary for the website to work and to remember your choices.
7. Security
The website works only over an encrypted HTTPS connection. Forms are protected against spam, and only authorised persons have access to the data. The website’s fonts are hosted locally, so visiting it doesn’t connect you to Google’s servers.
8. Changes to this policy
We update the policy when the law or the tools on the website change. The current version is always available at this address.
9. Information clause — summary
Pursuant to Art. 13(1) and (2) GDPR, we inform you that the controller of your data is SPACE PR Sp. z o.o., ul. Gen. S. Maczka 41, 43-300 Bielsko-Biała, Poland. We process data for the purposes described in section 2, for the period indicated there. You have the rights described in section 5, including the right to lodge a complaint with the President of the Polish Data Protection Office (UODO).
10. Terms of open training sessions and consultations
You’ll find the rules for registration, payment and cancellation in the terms of training and consultations.