Controller and contact
The controller is GSDG Spółka z ograniczoną odpowiedzialnością, ul. Stanisława Staszica 10/18, 05-800 Pruszków, Poland, KRS 0001065790. For personal-data enquiries: contact@gsdgpub.com.
Information collected
The form includes your name, organisation, work email, enquiry category, message and form language. Required fields are needed to submit an enquiry. Providing information is voluntary; without the required information the form cannot be submitted. Do not include sensitive personal data or information unnecessary for your enquiry. Hosting may also process technical request information, such as IP addresses, to deliver and secure the website.
Purposes and legal bases
Proposed rules: handling correspondence and business enquiries relies on the controller’s legitimate interest in communication and business relationships (GDPR Article 6(1)(f)). If an individual requests steps towards a contract in their own name, Article 6(1)(b) may apply. Security and the defence of claims may rely on Article 6(1)(f). This form does not subscribe you to newsletters or marketing. The applicable bases must be approved against GSDG’s actual processes.
Service providers and recipients
Netlify Forms handles the form. Submissions are stored in Netlify and notifications are sent to contact@gsdgpub.com, hosted on Microsoft 365. Netlify uses Akismet for spam detection. Netlify’s DPA covers processing, confidentiality, safeguards and subprocessors. Microsoft describes processing customer data on documented instructions in its service terms and Data Protection Addendum (DPA). Access within GSDG should be limited to authorised people handling the enquiry.
Transfers outside the EEA
Data may be processed outside the EEA, including in the USA. Netlify’s DPA provides for the EU–US Data Privacy Framework and, where it does not apply, standard contractual clauses. Provider documents are linked below. The specific contractual arrangements and transfer safeguards for GSDG’s Microsoft 365 account still require verification; EEA-only storage has not been confirmed. Questions about applicable safeguards can be sent to contact@gsdgpub.com.
Retention
We retain enquiries that do not lead to collaboration for 6 months after the last contact, then delete them. This rule covers submissions in Netlify Forms and correspondence copies in Microsoft 365. If collaboration begins, relevant data is retained for as long as needed to perform the contract, comply with legal obligations and establish, exercise or defend legal claims, limited to what is necessary for each purpose.
Your rights
Depending on the legal basis and circumstances, you have rights of access, rectification, erasure, restriction, portability and objection to processing based on legitimate interests. Where consent is the basis, you may withdraw it without affecting the lawfulness of earlier processing. You may complain to the President of the Polish Personal Data Protection Office (UODO). Send requests to contact@gsdgpub.com.
Cookies and similar technologies
The reviewed website implementation does not set its own cookies, store language preferences in browser storage or include analytics or advertising tools. The URL determines the language. Fonts, images and videos are served from the same domain. Reviewing code and sample server responses is not a complete audit of every provider service. Configuration changes require further checks; introducing technologies unnecessary for the requested service requires appropriate information and, where legally required, prior consent.
Automation and updates
Netlify Forms automatically checks submissions for spam using Akismet; the form also includes a hidden spam-trap field (honeypot). Messages may be rejected or classified as spam. This does not decide eligibility for services or business partnerships. The reviewed code contains no marketing profiling or automated decisions producing legal or similarly significant effects on users. This document must be updated when GSDG approves its rules or changes the services used.