Skip to main content
    DB Consulting

    Privacy Policy

    Last updated: March 5, 2026

    This Privacy Policy describes the principles of personal data processing by DB Consulting, based in Kraków, Poland. This document has been prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR) and the Polish Act of 10 May 2018 on the Protection of Personal Data.

    1. Data Controller

    The controller of your personal data is DB Consulting, based in Kraków, Poland.

    • Address: ul. Wielicka 28, Equal Business Park, Building B, Floor III, 30-552 Kraków, Poland
    • Email: info@dbconsulting.cloud
    • Phone: +48 573 900 425

    2. Types of Personal Data Collected

    We collect personal data only to the extent necessary to fulfill the purposes described in this policy. Data is collected through the following forms:

    Contact Form

    • Full name (required)
    • Email address (required)
    • Phone number (optional)
    • Company name (optional)
    • Message content (required)

    Webinar Registration Form

    • Full name (required)
    • Email address (required)
    • Company name (required)
    • Job position (required)
    • Marketing consent (optional)

    Automatically Collected Data

    When using our website, the following data may be automatically collected: IP address, browser type, operating system, visit duration, and pages visited.

    3. Purposes of Data Processing

    We process your personal data for the following purposes:

    • Responding to inquiries submitted through the contact form
    • Webinar registration and delivery of training materials
    • Sending marketing information about future webinars and security alerts (only with your consent)
    • Ensuring the proper functioning of the website
    • Pursuing the legitimate interests of the controller, including protection against claims

    4. Legal Bases for Data Processing

    We process your personal data based on:

    • Art. 6(1)(a) GDPR – Your consent (in particular for marketing communications)
    • Art. 6(1)(b) GDPR – Necessity for the performance of a contract or to take steps at your request prior to entering into a contract (e.g., responding to an inquiry, webinar registration)
    • Art. 6(1)(f) GDPR – Legitimate interests of the controller (e.g., website security, direct marketing, defense against claims)

    5. Data Retention Period

    We retain your personal data for the period necessary to fulfill the purposes for which it was collected:

    • Contact form data – for the duration of the correspondence, then for the limitation period of potential claims (maximum 3 years from the last contact)
    • Webinar registration data – for 12 months from the webinar date or until consent is withdrawn
    • Data processed based on marketing consent – until the consent is withdrawn
    • Automatically collected data (server logs) – for 12 months

    6. Your Rights

    Under the GDPR, you have the following rights:

    • Right of access – you have the right to obtain confirmation whether your personal data is being processed and to access it.
    • Right to rectification – you have the right to request rectification of inaccurate data or completion of incomplete data.
    • Right to erasure (\
    • Right to restriction of processing – you have the right to request restriction of processing of your data in certain cases.
    • Right to data portability – you have the right to receive your personal data in a structured, commonly used format and to transmit it to another controller.
    • Right to object – you have the right to object to the processing of your personal data based on the legitimate interest of the controller, including profiling.
    • Right to withdraw consent – if processing is based on consent, you have the right to withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
    • Right to lodge a complaint – you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates GDPR provisions.

    To exercise the above rights, contact us at: info@dbconsulting.cloud

    7. Supervisory Authority

    The supervisory authority competent for personal data protection matters in Poland is the President of the Personal Data Protection Office (UODO).

    • Address: ul. Stawki 2, 00-193 Warsaw, Poland
    • Phone: +48 22 531 03 00
    • Website: https://uodo.gov.pl

    8. Data Recipients

    Your personal data may be disclosed to the following categories of recipients:

    • Hosting service providers – Netlify, Inc. (processing form data on our behalf; data may be processed in the USA based on Standard Contractual Clauses)
    • IT service providers supporting the operation of the website
    • State authorities or other entities authorized under applicable law

    9. Data Transfers Outside the EEA

    Due to the use of Netlify for form handling, your data may be transferred to the United States. Data transfers are carried out on the basis of Standard Contractual Clauses approved by the European Commission (Art. 46(2)(c) GDPR), ensuring an adequate level of protection for your personal data.

    10. Cookies

    Our website may use cookies for the following purposes:

    • Essential cookies – ensuring the proper functioning of the website (e.g., remembering your language preference)
    • Analytical cookies – helping us understand how users interact with the website

    11. Data Security

    We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes data transmission encryption (SSL/TLS), access controls, and regular security procedure reviews.

    12. Children

    Our website is not directed at individuals under 16 years of age. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us and we will promptly delete it.

    13. Changes to the Privacy Policy

    We reserve the right to amend this Privacy Policy. We will inform you of any significant changes by publishing the updated version on our website. We recommend that you regularly review the content of this policy.

    14. Contact

    If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact us:

    • Address: ul. Wielicka 28, Equal Business Park, Building B, Floor III, 30-552 Kraków, Poland
    • Email: info@dbconsulting.cloud
    • Phone: +48 573 900 425