Privacy Policy

1. Data Controller

The controller of personal data processed through the Website is:

Bugstruck sp. z o.o.
Marcika 12, 30-443 Krakow
Tax ID / NIP: 6793231699
E-mail:

If you have any questions regarding the processing of your personal data, you can contact us using the e-mail address above.

2. What Personal Data Do We Collect?

Depending on how you use the Website, we may collect and process the following personal data:

• first name,
• last name,
• e-mail address,
• company name,
• information included in the content of your message,
• other information that you voluntarily provide to us.

When you use the Website, certain technical information may also be collected automatically, such as your IP address, browser type, device information, and information about how you interact with the Website.

3. How Do We Use Your Personal Data?

We may process your personal data for the following purposes:

Contact and handling inquiries

If you contact us through the contact form or by e-mail, we may use your data to:

• respond to your inquiry,
• communicate with you,
• prepare an offer or estimate,
• take steps at your request before entering into a contract.

Providing services and performing contracts

If your inquiry results in entering into a contract with us, we may process your personal data for the purpose of entering into and performing the contract and managing our business relationship.

Compliance with legal obligations

We may process personal data when this is necessary to comply with our legal obligations, including accounting and tax obligations.

Establishing, exercising, or defending legal claims

We may process personal data where necessary to establish, exercise, or defend legal claims.

Website security

Certain technical data may be processed to ensure the security and proper functioning of the Website, prevent abuse, and detect unauthorized access.

4. Legal Basis for Processing

Depending on the circumstances, we process personal data based on one or more of the following legal grounds under Article 6 of the GDPR:

• Article 6(1)(a) GDPR – your consent;
• Article 6(1)(b) GDPR – processing necessary to take steps at your request before entering into a contract or to perform a contract;
• Article 6(1)(c) GDPR – processing necessary for compliance with a legal obligation;
• Article 6(1)(f) GDPR – processing necessary for our legitimate interests, including handling correspondence, maintaining Website security, and establishing, exercising, or defending legal claims.

5. Is Providing Personal Data Mandatory?

Providing personal data is voluntary.

However, certain information may be necessary for us to respond to your inquiry, prepare an offer, or provide our services. If you do not provide the required information, we may not be able to respond to your request or provide the requested service.

6. How Long Do We Keep Your Data?

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected.

Personal data provided as part of an inquiry may be retained for as long as necessary to handle the correspondence and, where applicable, for the period necessary to establish, exercise, or defend legal claims.

Where data is processed in connection with a contract or legal, accounting, or tax obligations, it will be retained for the period required by applicable law.

7. Who May Receive Your Personal Data?

Your personal data may be shared with service providers who support us in operating our business and maintaining the Website, including:

• Website hosting and infrastructure providers,
• Website platform providers,
• e-mail service providers,
• IT service providers,
• accounting and legal service providers,
• analytics or marketing service providers, where applicable,
• public authorities and other entities where required by law.

Where appropriate, such providers process personal data on our behalf and only to the extent necessary to provide their services.

8. International Data Transfers

Some of the services we use may involve the processing of personal data outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we will ensure that the transfer is carried out in accordance with applicable data protection laws and using appropriate safeguards, such as an adequacy decision of the European Commission or appropriate contractual safeguards.

9. Your Rights

Under the GDPR, you may have the following rights regarding your personal data:

• the right to access your personal data;
• the right to obtain a copy of your personal data;
• the right to correct inaccurate or incomplete data;
• the right to request deletion of your personal data;
• the right to request restriction of processing;
• the right to data portability;
• the right to object to certain processing activities;
• the right to withdraw your consent at any time where processing is based on consent.

Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise your rights, please contact us using the contact details provided in Section 1.

You also have the right to lodge a complaint with the relevant data protection supervisory authority. In Poland, this is the President of the Personal Data Protection Office (UODO).

10. Data Security

We use appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or unauthorized access.

The security measures we use are appropriate to the nature, scope, context, and risks associated with the processing of personal data.

11. Children's Privacy

The Website is not specifically directed at children.

We do not knowingly collect personal data from children without an appropriate legal basis. If we become aware that personal data has been provided by a child without the required legal basis, we will take reasonable steps to delete such data.

12. Automated Decision-Making and Profiling

We do not use personal data for automated decision-making that produces legal effects or similarly significantly affects individuals.

Where applicable, certain third-party services may use automated technologies for analytics or marketing purposes in accordance with their own privacy policies.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes in applicable laws, our services, or the technologies used on the Website.

The current version of the Privacy Policy will always be available on the Website and will include the date of the latest update.

14. Contact

If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact us:

Bugstruck sp. z o.o.
Marcika 12, 30-443 Krakow
Tax ID / NIP: 6793231699
E-mail:

Last updated: 25 August 2026