Last updated: 10 September 2026

We respect your privacy. Below we explain what data we collect, why, and what rights you have. The site does not use cookies for analytics or advertising.

1. Data controller

The controller of your personal data is WELLCORE GROUP SP. Z O.O., based in Warsaw, Nowy Świat 54/56, 00-363 Warszawa, entered in the Polish register of entrepreneurs (KRS) under number 0001202625, NIP 5253066316.

For personal data matters, write to [email protected], call +48 888 752 020, or send a letter to our registered address. We have not appointed a data protection officer.

2. What data we collect and why

Contact form

We collect: your first name (or full name), e-mail address, phone number (optional), the content of your message, and the language version of the site the form was sent from. We send an automatic confirmation of receipt to the e-mail address you provide.

Purpose: replying to your message, preparing an offer, and pre-contract discussions.

Legal basis: Art. 6(1)(b) GDPR (steps taken at your request before entering into a contract) and Art. 6(1)(f) GDPR (our legitimate interest in responding to enquiries).

Providing your data is voluntary, but without an e-mail address and message content we cannot reply.

E-mail, phone, Messenger and WhatsApp

If you contact us directly, we process the data you provide us with, e.g. your name, e-mail address, phone number and the content of the conversation. The purposes and legal bases are the same as for the contact form.

Server logs

On every visit, the server records the IP address, date and time, the address of the page visited, the browser type, and the address of the page you came from.

Purpose: website security and troubleshooting. Legal basis: Art. 6(1)(f) GDPR. We do not combine this data with other data and do not use it to identify you.

3. How long we keep your data

  • Contact form messages and correspondence: 12 months from the last contact.
  • If we enter into a contract: for its duration, and afterwards until the statute-of-limitations periods for claims and the periods required by tax and accounting regulations expire.
  • Server logs: 14 days.

4. Who we share data with

We do not sell your data. We use service providers who process data on our behalf and under our instructions:

  • Hetzner Online GmbH (Germany): the server that hosts the site and our e-mail.
  • Cloudflare, Inc.: content delivery network and protection of the site against attacks. Traffic to the site, including the IP address, passes through its servers.

Data may also be disclosed to public authorities where required by law.

Some services act as separate, independent data controllers:

  • OpenStreetMap Foundation: the map on the Contact page loads from OpenStreetMap's servers, which receive your device's IP address. Policy: https://osmfoundation.org/wiki/Privacy_Policy
  • Meta Platforms Ireland Ltd. (Messenger, WhatsApp): if you click the Messenger or WhatsApp button and write to us, your data is also processed by Meta under its own rules. Simply viewing our site does not share any data with Meta.

5. Transfers of data outside the European Economic Area

Cloudflare, Inc. is based in the USA and participates in the EU-U.S. Data Privacy Framework, for which the European Commission has found an adequate level of data protection. It additionally applies standard contractual clauses approved by the European Commission.

OpenStreetMap Foundation is based in the United Kingdom. The European Commission has found that the United Kingdom ensures an adequate level of data protection.

6. Your rights

You have the right to:

  • access your data and receive a copy of it,
  • rectify your data,
  • erase your data,
  • restrict processing,
  • port the data processed under a contract or steps taken before entering into one,
  • object to processing based on our legitimate interest.

To exercise these rights, write to [email protected]. We will respond within one month.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland, https://uodo.gov.pl

We do not make automated decisions about you and do not profile you.

7. Cookies

Our site does not use cookies or similar technologies for analytics, advertising or tracking. We do not use Google Analytics or advertising pixels, and we load fonts and scripts from our own server. That is why we do not show a cookie consent banner.

In exceptional situations, e.g. when automated traffic is suspected, Cloudflare may set a technical cookie in your browser that is necessary to protect the site. Such a cookie does not require consent.

8. Changes to this policy

We may update this policy, e.g. when we change service providers. The current version is always available on this page, together with the date it was last updated.

Back to top