How HEAPS collects, uses, and protects personal data when you visit heaps.pl.
Last updated: 29 July 2026
The controller of personal data is HEAPS (heaps.pl), contact: contact@heaps.pl.
If you have questions about this policy or your data, email us at contact@heaps.pl.
Contact form: name, email address, message content, and technical metadata needed to send and secure the form (including anti-spam checks where used).
Website usage: server logs (e.g. IP address, browser type, date/time, requested URL) processed for security, diagnostics, and reliable operation.
Cookies and similar technologies: as described in our Cookie Policy. Analytics tools (such as Google Analytics) run only if you consent to analytics cookies.
Responding to enquiries and preparing cooperation: Art. 6(1)(b) GDPR (steps prior to a contract) and/or Art. 6(1)(f) GDPR (legitimate interest in communicating with potential clients).
Operating and securing the website: Art. 6(1)(f) GDPR (legitimate interest in integrity, security, and availability of the service).
Analytics and measurement: Art. 6(1)(a) GDPR (consent), where you enable analytics cookies.
Compliance with legal obligations: Art. 6(1)(c) GDPR, where applicable.
We may use trusted service providers (hosting, email delivery, security, analytics) who process data on our instructions.
If Google Analytics is enabled with your consent, Google may process usage data as a processor / independent controller according to Google’s terms. Data may be transferred outside the EEA with appropriate safeguards (e.g. Standard Contractual Clauses).
Contact messages are kept for as long as needed to handle your request and for a reasonable follow-up period, unless a longer period is required by law or dispute handling.
Server logs are kept for a limited period needed for security and operations.
Consent choices are stored in your browser (local storage) until you change or clear them.
You may request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interests, subject to GDPR conditions.
Where processing is based on consent, you may withdraw consent at any time (this does not affect prior lawful processing). You can manage analytics cookies via the cookie banner preferences.
You may lodge a complaint with a supervisory authority. In Poland this is the President of the Personal Data Protection Office (UODO).
We apply organisational and technical measures appropriate to the risk, including HTTPS and access controls for systems we operate.
No method of transmission or storage is fully secure; please avoid sending highly sensitive data through the contact form.
We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the latest revision. Material changes may be highlighted on the site.