Legal / Privacy
Privacy Policy.
This policy explains what personal data THX processes when you use thx.marketing, why we process it, who may receive it, how long we keep it and what rights you have.
01 Data controller
The controller of personal data processed through this website is thx.marketing Piotr Burnat , with its registered address at ul. Jeleniogórska 1/3F/47, 60-179 Poznań, Poland (“THX”, “we”, “us”).
You can contact us about privacy or your personal data at privacy@thx.marketing .
If we appoint a Data Protection Officer or another privacy contact in the future, their contact details will be published here.
02 Personal data we process
Depending on how you use the website, we may process the following categories of data:
- Enquiry data — your name, work email address, company name, website URL and the message you send through the contact form.
- Communication data — the content and history of correspondence with us if you contact us by email or respond to our messages.
- Technical and security data — such as IP address, date and time of a request, browser or device information, requested URL, server logs and information needed to detect errors, abuse or malicious activity.
- Consent and preference data — records of choices made through our cookie/consent tool, including whether you accepted, rejected or changed optional cookie categories.
- Usage and analytics data — information about how the website is used, but only where the relevant analytics technology is enabled in accordance with your consent choices.
- Marketing technology data — identifiers or interaction data used by advertising/retargeting technologies, but only if such technologies are enabled on the website and you have given the required consent.
The contact form is intended for ordinary business enquiries. Please do not include special-category personal data, for example health, religion, political opinions or biometric data, or other confidential personal information unless it is genuinely necessary.
03 Why we process data and our legal bases
| Purpose | Typical data | Legal basis |
|---|---|---|
| Responding to an enquiry and discussing a potential project | Enquiry and communication data | Steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and/or our legitimate interest in handling business enquiries (Art. 6(1)(f) GDPR). |
| Operating, securing and troubleshooting the website | Technical and security data | Our legitimate interest in keeping the website secure, reliable and protected against abuse (Art. 6(1)(f) GDPR). |
| Remembering necessary website or consent settings | Necessary cookie / preference data | Where personal data is involved, our legitimate interest in providing the requested website functionality and/or complying with legal obligations. Access to or storage on your device is used without consent only where permitted for strictly necessary functionality. |
| Analytics and website improvement using optional technologies | Analytics and usage data | Your consent (Art. 6(1)(a) GDPR), where consent is required. |
| Advertising, retargeting or marketing measurement using optional technologies | Marketing technology data | Your consent (Art. 6(1)(a) GDPR), where such technologies are enabled. |
| Keeping evidence of consent or privacy choices | Consent and preference records | Compliance/accountability obligations and our legitimate interest in demonstrating compliance where applicable. |
| Establishing, exercising or defending legal claims | Relevant enquiry, communication and technical data | Our legitimate interest in protecting our legal rights (Art. 6(1)(f) GDPR). |
Where we rely on legitimate interests, we consider the nature of the data, your reasonable expectations and the impact of the processing on your rights and freedoms.
04 Where the data comes from and whether you must provide it
Most personal data is obtained directly from you when you submit the contact form, email us or otherwise communicate with us. Technical data is generated automatically when your browser or device communicates with our website and its infrastructure.
Providing personal data through the contact form is voluntary. Fields marked as required are needed so that we can identify your enquiry and respond to it. If you do not provide the required information, we may be unable to review your request or contact you.
There is no statutory obligation to submit the contact form and submitting it does not, by itself, create a contract with THX.
05 How long we keep personal data
We keep data only for as long as it is reasonably necessary for the relevant purpose:
- Enquiries and correspondence — for the duration of the conversation and afterwards for the period reasonably necessary to follow up the enquiry, maintain business records and establish, exercise or defend legal claims. We may delete data sooner if it is no longer useful or necessary.
- Contract-related correspondence — if an enquiry results in a contract, relevant records may be kept for the duration of the relationship and afterwards for the periods required by tax, accounting or limitation laws.
- Server and security logs — for the operational period set for the relevant system, and longer only where necessary to investigate security events, errors, abuse or legal claims.
- Consent records — for as long as reasonably necessary to demonstrate the consent choice or compliance with applicable requirements.
- Cookie, analytics and marketing data — according to the lifetime and retention settings of the relevant technology, as described in the Cookie Policy and/or consent panel.
We may retain limited information for longer where this is required by law or necessary for legal claims. When continued identification is no longer needed, data may be deleted or irreversibly anonymised.
06 Who may receive personal data
We do not sell personal data. We may make data available to service providers and other recipients only where needed for the purposes described above.
Depending on the services actually enabled on the website, recipients may include:
- website hosting and infrastructure providers;
- WordPress, website maintenance, security and technical support providers ;
- email and communication service providers used to deliver or respond to enquiries;
- cookie consent / consent-management providers , including the technology used to store your privacy choices;
- analytics providers, but only where the relevant optional technology has been enabled in accordance with your consent;
- advertising or marketing-measurement providers , but only where such technology is used and the required consent has been obtained;
- professional advisers, such as legal or accounting advisers, where necessary;
- public authorities or courts, where disclosure is required by applicable law.
Service providers that process personal data on our behalf are required to process it under our instructions and to apply appropriate safeguards where required by law.
07 Transfers outside the EEA
Some technology providers may process or make personal data accessible from countries outside the European Economic Area (EEA). Where this occurs, we use the transfer mechanism applicable to the provider and destination, such as an adequacy decision, participation in an approved framework where legally available, or the European Commission’s Standard Contractual Clauses together with supplementary safeguards where required.
You can contact us if you want information about the safeguards relevant to a particular transfer of your personal data.
08 Cookies and similar technologies
The website uses cookies or similar technologies for functions such as website operation, consent management and, where enabled, analytics or marketing measurement.
Technologies that are not strictly necessary are not intended to be activated before the required consent has been obtained. You can accept, reject or change optional categories through our cookie consent interface.
The current cookie list, providers, purposes and storage periods should be treated as dynamic technical information and are therefore described in our Cookie Policy and consent panel rather than duplicated here.
You may withdraw or change consent for optional cookies at any time using the “Manage consent” / cookie settings control available on the website. Withdrawal does not affect processing that was lawful before consent was withdrawn.
09 Your data protection rights
Subject to the conditions set out in the GDPR, you may have the right to:
- access your personal data and obtain information about how it is processed;
- rectify inaccurate personal data;
- erase personal data in circumstances where the right to erasure applies;
- restrict processing in circumstances provided by law;
- data portability for data covered by that right;
- object to processing based on legitimate interests, including an objection related to your particular situation;
- object at any time to direct marketing, where applicable;
- withdraw consent at any time where processing is based on your consent, without affecting the lawfulness of processing carried out before withdrawal;
- lodge a complaint with a supervisory authority .
If THX is established in Poland, the competent Polish supervisory authority is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych / UODO) . You may also have the right to contact another competent supervisory authority under the GDPR.
Email privacy@thx.marketing . We may ask for information needed to verify your identity where this is reasonably necessary. We respond within the periods required by applicable data protection law.
10 Automated decision-making and profiling
The website’s calculators, comparisons, assessments and illustrative demo tools are designed to provide information or demonstrate interactive buying experiences. They do not, by themselves, make decisions about website visitors that produce legal effects or similarly significantly affect them.
We do not use information submitted through the website contact form for automated decision-making within the meaning of Article 22 GDPR.
If we introduce processing of this type in the future, this policy will be updated and the information required by data protection law will be provided before the processing is used.
11 Security
We apply technical and organisational measures appropriate to the nature of the website and the personal data processed. These measures may include encrypted transmission, access controls, account and permission management, security monitoring, software updates, backups and measures designed to reduce spam or automated abuse.
No online service can guarantee absolute security. If we identify a personal-data breach, we will assess and handle it in accordance with the notification and communication requirements that apply under data protection law.
12 Changes to this policy and contact
We may update this Privacy Policy when our website, services, technologies or legal obligations change. The date at the top of the page shows when this version was last updated.
For privacy questions, requests or concerns, contact: thx.marketing Piotr Burnat , ul. Jeleniogórska 1/3F/47, 60-179 Poznań, Poland , email: privacy@thx.marketing .