Privacy Policy

Last updated: 17 October 2026.

1. Controller

The controller of personal data processed in connection with the website core-level.com is:

Core-Level sp. z o.o.
ul. Twarda 18, 00-105 Warsaw, Poland
KRS 0001090468 · NIP 5252994830 · REGON 527934690
Email: info@core-level.com · Phone: +48 22 48 44 000
Data protection contact: iod@core-level.com

2. What data we process

• Contact form: your email address, the subject and content of your message, and any other data you choose to include in it.
• Email and phone contact: the data you give us when you write to us or call us.
• Technical data: IP address, date and time of the request, the requested address and browser information, recorded in server logs.
• Spam protection: a one-way hash of your IP address, kept for one hour to limit the number of messages sent from one address.

3. Purposes and legal bases

• handling an enquiry connected with a potential contract and taking steps at your request before entering into it — Art. 6(1)(b) GDPR;
• handling general business enquiries that are not connected with a potential contract — Art. 6(1)(f) GDPR (our legitimate interest in business communication);
• keeping the website secure and preventing spam and abuse — Art. 6(1)(f) GDPR (our legitimate interest);
• establishing, exercising or defending legal claims — Art. 6(1)(f) GDPR;
• showing the Google map — Art. 6(1)(a) GDPR (the consent you give in the cookie settings).

Providing your data is voluntary, but without an email address we cannot reply to your message.

4. Recipients

Your data may be processed by providers that support us under data processing agreements: hosting and server administration, and email services. If you consent to external media, Google Ireland Ltd receives the data needed to display the map. We do not sell personal data or use it for advertising.

5. Transfers outside the EEA

We do not transfer your data outside the European Economic Area. The only exception is the Google map shown with your consent: Google LLC may then process data in the USA under the EU-US Data Privacy Framework.

6. Retention

• enquiries: for as long as needed to handle them, and then until the limitation period for possible claims expires;
• IP address hash used for spam protection: 1 hour;
• server logs: up to 12 months;
• your cookie and accessibility choices: stored only in your browser; consent is valid for 12 months.

7. Your rights

You have the right to access your data, to have it rectified or erased, to restrict its processing, to data portability, to object to processing based on our legitimate interest and to withdraw your consent at any time — withdrawal does not affect the lawfulness of processing carried out before it. To exercise these rights, write to iod@core-level.com. You may also lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl.

8. Automated decisions

We do not make automated decisions about you and we do not profile website users.

9. Cookies

Cookies and similar technologies are described in the Cookie Policy.

10. Changes

We publish every change to this policy on this page together with the date of the update.