Privacy policy
The controller of your data is Cafe Media Bartłomiej Skorupa. We collect only what is necessary to carry out a repair, run no marketing activity and use no tracking cookies. You can request access to your data, its rectification or erasure at any time.
1. Data controller
The controller of your personal data is Cafe Media Bartłomiej Skorupa, Wielicka 73 lok. 224, 30-552 Kraków, NIP 8661566168, REGON 361871488, operating a coffee machine repair workshop at Wielicka 73/224, klatka 8, 30-552 Kraków.
For any matter concerning the processing of personal data you can reach us at [email protected] or by phone on 577 313 343.
We have not appointed a data protection officer, as the conditions of Article 37 GDPR do not apply.
2. What data we collect
We collect only the data required to take in and carry out a repair. In practice that means:
We do not collect data we do not need to perform the service. This implements the data minimisation principle of Article 5(1)(c) GDPR.
- your name and phone number — to agree the quote and let you know when the repair is done;
- your email address, if you provide one in the booking form — to send a confirmation and job number;
- the make, model and fault description, with photos if you attach them — so we can prepare for your machine;
- a collection address — only if you choose collection from your address; for drop-off or courier delivery we do not collect an address at all.
3. Purposes and legal bases
Providing your data is voluntary but necessary for us to take on the job. Without a phone number we cannot agree a quote with you or tell you when the repair is finished.
- Performing the repair and communicating about it — Article 6(1)(b) GDPR (necessary to perform a contract or take steps before entering into one).
- Issuing and retaining accounting documents — Article 6(1)(c) GDPR (legal obligation under tax and accounting law).
- Handling complaints and warranty claims — Article 6(1)(b) and (c) GDPR.
- Establishing, pursuing or defending legal claims — Article 6(1)(f) GDPR (legitimate interest of the controller).
4. How long we keep data
After these periods we delete the data. Photos submitted through the form are deleted together with the job data.
- Job data and photos attached to a booking — for the duration of the repair warranty, that is 12 months from completion, and then until the limitation period for any claims expires.
- Accounting documents — 5 years from the end of the calendar year in which the tax obligation arose, as required by Polish tax law.
- Enquiries that did not result in a repair — 12 months from the last contact.
5. Who we share data with
We do not sell or share your data for marketing purposes. We entrust it only to providers necessary to run the workshop:
We have a data processing agreement compliant with Article 28 GDPR with each of these providers.
- the hosting provider whose servers run this site and the jobs database;
- the email service provider through which we send booking confirmations;
- our accounting office — for accounting documents only;
- authorities entitled under applicable law, should they make such a request.
6. Your rights
In connection with the processing of your data you have the right to:
To exercise any of these rights, write to [email protected]. We respond without undue delay and within one month at the latest.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland.
- access your data and obtain a copy of it;
- rectify inaccurate data or complete incomplete data;
- erase your data, unless a legal obligation prevents it, such as the retention of accounting records;
- restrict processing;
- data portability;
- object to processing based on legitimate interest.
8. Changes to this policy
We update this policy whenever the way we process data changes — for example after adding a new feature to the site. The date of the last update is shown in the site footer.