Last updated: 25 October 2026
1. Controller
The controller of your personal data on this website (Art. 4(7) GDPR) is SAWKA.TECH spółka z ograniczoną odpowiedzialnością, ul. Franciszka Hynka 9 lok. 19, 11-001 Dywity, Poland, entered in the Polish National Court Register under KRS 0001257573, tax ID (NIP) 7394037737, REGON 545359070. WEBATIC is a brand of this company.
For any data protection questions, write to us at info@webatic.de. We have not appointed a data protection officer, as our activities involve neither large-scale processing nor systematic monitoring within the meaning of Art. 37 GDPR.
2. Visiting the website and server logs
When you visit the website, the server writes standard technical logs: IP address, date and time of the request, the requested resource, the response status, the amount of data transferred, browser and operating system details, and the referring page. The legal basis is Art. 6(1)(f) GDPR – our legitimate interest in the security and stability of the website and in diagnosing errors. The logs are deleted after 30 days at the latest.
We serve the fonts from our own server – your browser does not connect to third-party servers for them.
3. Cookies and consent
Only one cookie is strictly necessary: it stores your choice in the cookie banner (cc_cookie, kept for 6 months). The legal basis is Art. 6(1)(c) in conjunction with Art. 7(1) GDPR (proof of consent).
We only set statistics cookies if you consent in the banner (Art. 6(1)(a) GDPR and the national rules implementing Art. 5(3) of the ePrivacy Directive). You can withdraw or change your consent at any time, with effect for the future, via the “Cookie settings” link at the bottom of every page.
4. Google Analytics
With your consent, we use Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics stores cookies in your browser (_ga and _ga_*, kept for up to 2 years) and records how the website is used: pages viewed, the time and length of the visit, your approximate location derived from your IP address, device and browser type, and the referring page. Google Analytics 4 does not store full IP addresses.
The advertising features of Google Analytics are switched off: the data is not used for remarketing or ad personalisation. Google LLC (USA) participates in the EU-U.S. Data Privacy Framework; transfers are additionally based on standard contractual clauses under Art. 46(2)(c) GDPR. How long the statistics are kept depends on the settings of the service.
5. Enquiry form
When you send an enquiry through the form, we process the details you enter: the type of project, your line of business, optionally a link to your current website, your preferred timeline, your first name, your email address or phone number, and whether you'd like to communicate via WhatsApp. We use them to answer your enquiry and make you an offer. The legal basis is Art. 6(1)(b) GDPR (steps taken at your request before entering into a contract) and your consent to being contacted (Art. 6(1)(a) GDPR), which you can withdraw at any time.
Your enquiry reaches us by email (delivery service: Resend) and is automatically passed to our customer relationship management (CRM) system. We keep enquiries while we deal with them and afterwards until the statutory limitation periods expire. To protect the form against automated submissions, we use a hidden field and measure how long the form takes to fill in – we don't use reCAPTCHA or any other external service for this.
6. Contact by email, phone or WhatsApp
If you email or call us, we process the information you give us in order to deal with your request (Art. 6(1)(b) and (f) GDPR). It is kept for the same period as enquiries sent through the form.
For communication via WhatsApp, the privacy policy of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, also applies (whatsapp.com/legal/privacy-policy-eea). We only use WhatsApp if you message us there yourself or choose it as your contact method in the enquiry form.
7. Recipients and transfers outside the EEA
We use the following processors acting on our behalf (Art. 28 GDPR):
- Hosting: Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA – the website's server-side functions run in the Frankfurt am Main region
- Delivery of form enquiries by email: Resend, Inc., USA
- Domain and email delivery for info@sawka.tech: Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA
- Customer relationship management (CRM): the provider of our CRM system
- Visitor statistics (only with your consent): Google Ireland Limited and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Where data is transferred to the USA, this is based on the EU-U.S. Data Privacy Framework (where the provider participates) and on standard contractual clauses under Art. 46(2)(c) GDPR. Beyond this, we only disclose personal data where the law requires us to.
8. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20), and the right to object to processing based on legitimate interests (Art. 21). You can withdraw any consent you have given at any time, with effect for the future (Art. 7(3) GDPR). We do not use automated decision-making, including profiling (Art. 22 GDPR).
You also have the right to lodge a complaint with a supervisory authority. The lead authority is the President of the Polish Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland. You can also contact the authority in the EU country where you live.
