1. Data controller
The data controller is Full Admin Grzegorz Borejko, ul. Marii Grzegorzewskiej 1, 02-778 Warsaw, Poland, NIP: 5251336674, REGON: 141589443.
For privacy matters and requests concerning your rights, contact the controller using the contact form at fulladmin.pl or by post at the address above.
2. Data we process and why
Enquiries and correspondence
When you submit the form, we may receive your name, company name, email address, phone number, selected topic and message. The data is sent to the website’s server function, checked by the anti-spam mechanism and then delivered to the controller as an email through Microsoft Graph and Exchange Online. The website does not create a separate enquiry database; the content is stored in the Microsoft 365 mail environment as correspondence.
We process this data to answer your enquiry, prepare an offer, take steps before entering into a contract or continue correspondence. The legal basis is Article 6(1)(b) GDPR when the enquiry concerns a potential contract, or Article 6(1)(f) GDPR — our legitimate interest in handling correspondence, protecting legal claims and developing the business.
Technical and security data
When you use the website, technical infrastructure may process data needed to deliver and secure it, such as an IP address, request date and time, browser type and error information. The legal basis is Article 6(1)(f) GDPR — availability, diagnostics and protection of the service.
The contact form is protected by Cloudflare Turnstile. The service analyses technical browser and connection signals to distinguish a person from an automated system and returns a one-time verification token. We use it solely to prevent spam and abuse under Article 6(1)(f) GDPR — our legitimate interest in protecting the website and contact channel.
Visit statistics
With your voluntary consent, the website may use Cloudflare Web Analytics to create aggregated visit statistics and measure website performance. Cloudflare states that the service collects a minimal amount of information and does not track individual users across its customers’ websites. The controller relies on Article 6(1)(a) GDPR. Refusing consent does not limit access to the website, and consent may be withdrawn at any time in the privacy settings.
3. Data recipients
Data may be entrusted to providers of hosting and technical infrastructure, email, security and IT support services, only to the extent required to provide those services. Cloudflare processes technical data required to operate the website and perform Turnstile verification and, after consent, may process technical and performance data through Cloudflare Web Analytics. Microsoft processes the form content and contact details as the provider of Microsoft 365, Microsoft Graph and Exchange Online.
4. Transfers outside the EEA
Some infrastructure or analytics providers may process data outside the European Economic Area. Where applicable, transfers use mechanisms provided by the GDPR, in particular an adequacy decision or standard contractual clauses.
5. Retention periods
- Correspondence is kept for the time needed to handle the matter and then for the period necessary to establish, exercise or defend legal claims.
- Contractual and accounting records are retained for periods required by law.
- A Turnstile token is short-lived, single-use and used only for current form verification.
- Your privacy choice is stored for 12 months.
- Analytics data is retained according to Cloudflare Web Analytics configuration and no longer than needed to analyse website operation.
6. Your rights
Subject to the GDPR, you may request access to, rectification, deletion, restriction and portability of your data, and object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing.
You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office.
7. Voluntary provision of data
Providing data in an enquiry is voluntary, but contact details and a description of the matter may be necessary to answer or prepare an offer.
8. Automated decision-making
Your data is not used to make decisions based solely on automated processing that produce legal or similarly significant effects.
9. Cookies and similar technologies
Details about local storage, analytics and changing your choices are available in the cookie policy.
10. Policy changes
This policy may be updated when website functions, service providers or legal requirements change. The current version is always published at this address with its effective date.
Cloudflare Web Analytics runs only after the visitor has given consent.