1. Controller

The controller of personal data processed in connection with the website core-level.com is:

Core-Level sp. z o.o.
18 Twarda Street, 00-105 Warsaw, Poland
KRS: 0001090468 · NIP: 5252994830 · REGON: 527934690
Email: info@core-level.com · Phone: +48 22 484 40 00
Data-protection contact: iod@core-level.com

2. What data we process

• identification and contact data you send via forms (name, email, phone, message content),
• technical data (IP address, logs, browser type, cookie identifiers),
• account data if you log in to WordPress.

3. Purposes and legal bases (GDPR)

• responding to enquiries and providing our services — Art. 6(1)(b) or (f),
• website security, abuse prevention and logs — Art. 6(1)(f),
• legal obligations (e.g. accounting) — Art. 6(1)(c),
• cookies other than strictly necessary — Art. 6(1)(a) (consent via the cookie bar).

4. Recipients

Data may be entrusted to IT providers (hosting, email, anti-spam / reCAPTCHA) under data-processing agreements. We do not sell personal data.

5. Retention

Contact messages: for the time needed to handle the request and any related claims. Logs: typically up to 12 months. Cookie consent: 12 months. Accounts: for the duration of the account.

6. Your rights

You have the right of access, rectification, erasure, restriction, portability, objection and withdrawal of consent. You may lodge a complaint with the President of the Personal Data Protection Office (UODO), 2 Stawki Street, 00-193 Warsaw, uodo.gov.pl.

7. Cookies

Details of cookie types, purposes and how to manage them are set out in the Cookie Policy.