Privacy policy

Effective from: 15 October 2026

This policy explains what personal data we collect on drugastrona.com.pl, why, how long we keep it and what rights you have. The Polish version is available at /polityka-prywatnosci; both versions say the same.

1. Who controls your data

The data controller is Inês Boska, who runs Druga Strona.

Contact for anything about your personal data: kontakt@drugastrona.com.pl

2. What we collect and why

Contact form

Data: full name, work email, company name, your message.

Purpose: to reply to your message and, if relevant, discuss working together.

Legal basis: our legitimate interest in answering your enquiry (Art. 6(1)(f) GDPR) and, if you ask about working together, steps taken at your request before a contract (Art. 6(1)(b) GDPR).

Referee Score assessment ("Are you playing referee in your company?")

Data: your answers and your score. If you choose to see the full result and receive the report: your first name and email address.

Purpose: to show your result, send the full report to your email and prepare for a possible call.

Legal basis: fulfilling your request for the report (Art. 6(1)(b) GDPR) and our legitimate interest (Art. 6(1)(f) GDPR).

The score is calculated automatically, but it has no legal or similarly significant effect on you.

Materials from Druga Strona (only with your consent)

If you tick the consent box on the report form, we will send you materials, tools and workshop news from Druga Strona by email.

Legal basis: your consent (Art. 6(1)(a) GDPR) and your consent to receive marketing by electronic means, as required by electronic communications law.

You can withdraw consent at any time: click the link in any email or write to kontakt@drugastrona.com.pl. Withdrawing consent does not affect the lawfulness of earlier emails.

Free dispute audit (call booking)

Data: what you enter in the booking form (including name, email, company and a description of the situation) and the time of the call.

Purpose: to prepare for and hold the call.

Legal basis: steps taken at your request before a contract (Art. 6(1)(b) GDPR) and our legitimate interest (Art. 6(1)(f) GDPR).

Bookings run through Calendly, which also processes data under its own privacy policy.

Visit statistics

We use Vercel Web Analytics, which counts visits in aggregate, without cookies and without identifying you.

Legal basis: our legitimate interest in improving the site (Art. 6(1)(f) GDPR).

3. Cookies

The site does not use cookies for tracking or advertising.

4. How long we keep data

• Contact form messages: up to 12 months after our last contact, unless we start working together.
• Assessment results and report data: up to 24 months, or less if you object.
• Data processed on the basis of consent: until you withdraw it.
• Contract-related data: for as long as tax and accounting law requires.

5. Who we share data with

We never sell your data. We use providers who process data on our behalf:

• Vercel Inc.: website hosting and visit statistics,
• Resend: sending emails from the site's forms,
• Calendly: call bookings,
• home.pl: the kontakt@drugastrona.com.pl mailbox.

Some of these providers are based in the US. Transfers rely on the European Commission's EU-US Data Privacy Framework decision or on standard contractual clauses approved by the European Commission.

6. Your rights

You have the right to:

• access your data and get a copy,
• have it corrected,
• have it deleted,
• restrict its processing,
• data portability,
• object to processing based on legitimate interest,
• withdraw consent at any time.

To use any of these rights, write to kontakt@drugastrona.com.pl. We reply within one month.

You can also complain to a supervisory authority: in Poland, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw), or the data protection authority in the country where you live or work.

7. Do you have to give us your data?

No, it's voluntary. Without an email address, however, we can't reply to your message or send you the report.

8. Changes to this policy

If we change this policy, we will publish the new version on this page with a new effective date.