Effective date: 12 September 2026.
1. Data controller and contact
The controller of personal data submitted through the lobbysta.pl form is Anna Barańska. For matters concerning your data, including exercising your rights, you can use the contact form and begin your message with “Personal data”.
2. Data collected and its purposes
The form collects your first name, telephone number and message. The data is used to understand your enquiry, respond, contact you by telephone and establish the potential scope of an engagement. Providing data is voluntary, but it will not be possible to call you back without a telephone number.
Please do not send special categories of personal data, identity documents or information about third parties that is unnecessary to explain the matter.
3. Legal basis for processing
For an enquiry about an engagement, the legal basis is taking steps at your request before entering into a contract — Article 6(1)(b) of the GDPR. For other messages, the basis is the controller's legitimate interest in handling correspondence and providing replies — Article 6(1)(f) of the GDPR. Form security and the prevention of abuse are based on Article 6(1)(f) of the GDPR.
4. Storage and recipients
Enquiries are saved in the website's protected panel on LH.pl hosting. They are encrypted in a database held in a protected directory with access through the web blocked. The owner has access through a password-protected panel. The hosting provider, LH.pl sp. z o.o., processes data to ensure the operation and security of the service.
Enquiries are retained for 180 days after the form is submitted, unless you request their deletion earlier and there is no basis for retaining them further. Marking an enquiry as handled does not change this period. Older enquiries are automatically removed during daily database cleanup and on the next use of the service. If an engagement is agreed, the retention rules for its documentation are established separately. Backups may retain data until they are rotated under the hosting provider's rules.
5. Your rights
You have the right to request access to your data, rectification, erasure and restriction of processing, and, where provided for by the GDPR, data portability. You may object to processing based on legitimate interests. You have the right to lodge a complaint with the President of the Polish Personal Data Protection Office.
6. Cookies and technical data
The website does not use advertising or analytics cookies, external fonts or tracking tools. The form and the owner's panel login require a technical session cookie to protect the form, preserve entered data after an error and maintain the login session. The form uses safeguards against automated submissions.
The server may record the IP address, connection time, requested URL and browser information in technical logs. The form does not store the IP address in an enquiry; to limit abuse temporarily, it uses a cryptographic hash of the address, valid for one hour (for login: 15 minutes). Expired entries are removed on the next use of the service and during daily cleanup.
7. Profiling and data transfers
The form does not involve profiling or decisions made solely by automated means. It does not send enquiries to advertising or analytics services. Enquiries remain in the website's database on LH.pl hosting.