Privacy policy
In force since: 13 October 2026
Please note: this is an English translation provided for convenience. The Polish version is the legally binding one, and if there is any difference between the two, the Polish version prevails. This translation is not legal advice.
Below we explain in plain language who processes your data, why, and what you can do with it. This website has no accounts, shopping basket or payments. You contact us through a form that sends a message to our e-mail inbox, or by ordinary e-mail or phone.
1. Who is the data controller
The controller of your personal data is VD Vidsdeal sp. z o.o., with its registered office in Toruń, Poland, ul. Słodka 1, 87-134 Toruń, tax ID (NIP) 8792746534, KRS 0001027559 (the Vidsdeal brand).
Contact for personal data matters: wiktoria@vidsdeal.pl, phone +48 795 255 063.
2. What data, for what purpose and on what legal basis
| Situation | Data | Purpose and legal basis (GDPR) | For how long |
|---|---|---|---|
| You write to us, call us or send the form | E-mail address, full name, content of the message and whatever else you provide: phone number, link to your brand, what the inquiry is about, date | Replying to your inquiry and preparing a quote. Basis: Art. 6(1)(b) (steps taken at your request prior to entering into a contract) or (f) (our legitimate interest: handling correspondence) | Until the matter is closed, and then for the time needed to defend possible claims (limitation period) |
| We enter into and perform a contract | Identification and address data, tax ID, contact details, content of the order, invoicing data | Entering into and performing the contract (Art. 6(1)(b)), issuing and keeping accounting documents (Art. 6(1)(c)) | For the duration of the contract, and then for the periods required by tax and accounting law |
| Establishing, pursuing or defending claims | Data necessary to establish, pursue or defend claims | Our legitimate interest (Art. 6(1)(f)) | Until the claims become time-barred |
| Simply visiting the website | IP address, date and time, address of the page visited, browser data (standard server logs) | Security and proper functioning of the website. Basis: Art. 6(1)(f) | According to the settings of the hosting provider (OVHcloud) |
| You send the form (spam protection) | An encrypted hash of the IP address, the time of sending and a one-time signed form code (it contains no personal data). We do not store the IP address itself | Limiting spam: we allow a few messages per hour from one device. Basis: Art. 6(1)(f) | The counter file is deleted after 2 hours (the next time the form is sent) |
Providing data is voluntary, but without an e-mail address we cannot reply to your message, and without invoicing data we cannot enter into a contract.
2a. What this website does not have
- We do not use analytics tools (such as Google Analytics) or advertising pixels.
- There is no newsletter, chat, maps or social media plugins. The form sends the message only to our e-mail inbox, without saving it on the website and without external tools.
- Fonts are loaded from our own server, not from external servers, so simply visiting the website does not send your IP address to other companies.
- The background video at the top of the page is stored on our server and does not connect to external services.
- The sample projects are videos from Vimeo. The Vimeo player loads only after you click "play": at that point Vimeo receives your IP address and may store its own cookies. If you do not click, we do not connect to Vimeo.
If further external tools appear on the website, we will update this policy before introducing them.
3. Who we share data with
- OVHcloud, the provider of the hosting on which the website runs,
- Google, the provider of the e-mail service in which we receive messages,
- our accounting firm or accountant and legal and IT advisers, where needed to run the business,
- public authorities, where the obligation results from the law.
4. Transfers of data outside the European Economic Area
Google belongs to an entity based in the USA. If you e-mail us or send the form, the message goes to an inbox operated by this provider. The transfer takes place on the terms provided for in the GDPR (for example an adequacy decision or standard contractual clauses), which the provider describes in its own privacy policy.
5. Your rights
You have the right to: access your data, rectify it, erase it, restrict processing, data portability (where applicable), object to processing based on our legitimate interest, and withdraw consent at any time (withdrawal does not affect the lawfulness of processing carried out before it). Write to wiktoria@vidsdeal.pl.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office in Poland (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl), or with the data protection authority in your own EU country.
6. Automated decisions
We do not make decisions about you in an automated manner and we do not profile visitors to the website.
7. Cookies
We describe the rules on cookies in the cookie policy.
8. Changes to this policy
The current version is always available on this page. The date at the top shows when it came into force.