Privacy policy

Version dated 28 July 2026.

1. Controller and contact

The controller of personal data is Espresso Media Karol Szałapski, ul. Hausbrandta 32/70, 80-126 Gdańsk, Poland (the “Controller”).

For privacy matters, use the quote form and state that your message concerns privacy. Data included in such a request will be used only to handle it.

2. Data processed and purposes

Standard form and quote enquiries

The form may include your name, email address, optional phone number, project description, pasted script and attachments. The data is processed to:

• handle the enquiry and take steps before entering into a contract — Article 6(1)(b) GDPR;
• send an electronic response and an offer relating to the specific enquiry — consent under Article 6(1)(a) GDPR and the applicable Polish Electronic Communications Law;
• establish, exercise or defend legal claims — the Controller's legitimate interest under Article 6(1)(f) GDPR.

Consent to receive an offer applies only to the response connected with that enquiry. It is not a newsletter subscription or consent to future marketing.

Service delivery and accounting

If an order is placed, data is processed to perform the contract (Article 6(1)(b) GDPR), settle the order and comply with tax and accounting obligations (Article 6(1)(c) GDPR). The data may include contact and company details, invoice data, correspondence, materials supplied for production and payment information.

Security and technical logs

The server may automatically record technical data needed to protect the service, such as request time, IP address, browser type, requested address and response code. The legal basis is the legitimate interest in maintaining security, diagnosing errors and preventing abuse (Article 6(1)(f) GDPR).

Analytics and advertising

Optional analytics or advertising tools launched through Google Tag Manager operate only after the corresponding cookie category has been accepted. The legal basis is consent (Article 6(1)(a) GDPR). Consent can be withdrawn at any time through the cookie settings. See the Cookie policy for details.

3. Quote assistant

The quote assistant is an optional, interactive version of the form. It guides the user through a fixed sequence of questions and does not use artificial intelligence or an external conversation provider.

Until the enquiry is submitted, answers are stored only as a draft in the browser's local storage. After the summary is approved, the data, script and attachments are sent to the Controller through the same endpoint as the standard form and processed under the same rules.

4. Recipients

Data may be disclosed only to recipients necessary to operate the service and fulfil an order:

• hosting and server infrastructure provider;
• email and SMTP infrastructure provider;
• accounting, legal and IT service providers where necessary;
• banks, payment providers and public authorities where required for a contract or legal obligation;
• analytics or advertising providers — only after the relevant cookie consent.

Personal data is not sold.

5. Retention

• assistant draft in the browser's local storage: no more than 24 hours; successful submission removes it;
• enquiries that do not result in an order: no more than 12 months from the last contact, unless earlier deletion is possible and requested;
• completed-order records and correspondence: for the time needed to perform the contract, handle claims and allow limitation periods to expire;
• accounting and tax records: for the period required by law;
• consent-based data: until consent is withdrawn or the purpose is achieved earlier;
• standard server logs: for the period necessary for security and diagnostics under the infrastructure provider's configuration.

6. Local storage and cookies

The assistant stores a structured draft in the device's localStorage so an accidental page closure does not erase your work. The draft may contain entered contact details and script text, but it does not contain files or consent choices. It is removed after 24 hours or after a successful submission. You can remove it earlier by clearing this site's data in your browser.

Necessary local data is also used to remember cookie preferences. Other cookies and external tools are activated according to the user's choice.

7. Your rights

Depending on the legal basis and circumstances, you have the right to:

• access your data and receive a copy;
• rectify your data;
• erase your data;
• restrict processing;
• data portability;
• object to processing based on legitimate interests;
• withdraw consent at any time;
• lodge a complaint with the President of the Polish Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland.

Requests can be sent using the form indicated in section 1. Identity verification may be required before a request is fulfilled.

8. No automated decision-making

The Controller does not make solely automated decisions that produce legal or similarly significant effects and does not profile enquiries to determine price, priority or access to the service.

9. Changes

This policy may be updated when the service, providers or law changes. The date of the current version appears at the beginning.