Last updated: January 2025

Privacy Policy

This Privacy Policy describes how BrightHarbor Sp. z o.o. ("we", "our", "the operator") collects, uses, and protects personal data submitted through the website brightharbor.eu. We operate in accordance with Regulation (EU) 2016/679 (GDPR) and the Act of 10 May 2018 on the Protection of Personal Data (Dz.U. 2018 poz. 1000).

Data Controller

BrightHarbor Sp. z o.o.
ul. Marszałkowska 84/92, 00-514 Warsaw, Poland
NIP: 525-000-12-34  |  KRS: 0000123456
Email: info@brightharbor.eu
Phone: +48 22 123 45 67

Data We Collect

We collect personal data only when you voluntarily submit it through the contact form on this website. The data collected includes:

• Full name
• Email address
• Phone number
• Message content

We do not collect personal data through cookies beyond what is described in the Cookies section below.

Purpose and Legal Basis for Processing

Contact form data is processed for the purpose of responding to your enquiry. The legal basis is Article 6(1)(b) GDPR — processing necessary to take steps at your request prior to entering into a contract — and Article 6(1)(f) GDPR — our legitimate interest in responding to communications directed to us.

Data Retention

Contact form submissions are retained for a maximum of 24 months from the date of receipt, or until the purpose for which they were submitted has been fulfilled, whichever is earlier.

Cookies

This website uses a single functional cookie (bh_cookies) to store your cookie consent preference. This cookie contains no personal data beyond the acceptance or rejection of cookies, does not expire automatically, and is stored in your browser's localStorage. No analytics, advertising, or tracking cookies are used on this site.

Your Rights

Under GDPR, you have the right to: access personal data we hold about you; request its correction or deletion; object to or restrict its processing; and lodge a complaint with the President of the Personal Data Protection Office (PUODO), ul. Stawki 2, 00-193 Warsaw, Poland.

To exercise any of these rights, contact us at info@brightharbor.eu. We respond to all valid requests within 30 days.

Third Parties

We do not share, sell, or transfer personal data to third parties for marketing purposes. Data may be shared with processors acting on our behalf (e.g., email hosting), bound by appropriate data processing agreements under Article 28 GDPR.

Changes to This Policy

This policy may be updated to reflect changes in applicable law or our data processing activities. The current version is always available at this URL. The last-updated date at the top of this page indicates when the policy was most recently revised.