PureSparkPL

Privacy Policy

Last updated: January 15, 2026

PureSparkPL Sp. z o.o. (hereinafter: "the Controller") respects the privacy of users of the puresparkpl.com website. This Privacy Policy sets out the rules for collecting, processing, and protecting personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and the Polish Act of 10 May 2018 on the Protection of Personal Data.

1. Data controller

The controller of your personal data is PureSparkPL Sp. z o.o. with its registered office in Warsaw, ul. Marszałkowska 84/92, 00-514 Warsaw, entered in the National Court Register (KRS) under number 0001025847, NIP: 5252873401, REGON: 524817693. The Controller can be contacted at: kontakt@puresparkpl.com or by phone: +48 22 307 18 56.

2. Scope and purpose of data processing

We process personal data only to the extent necessary for the purposes for which they were collected: • Handling inquiries submitted via the contact form (Art. 6(1)(b) GDPR) — name, email address, message content. • Providing financial advisory services and assistance in obtaining benefits (Art. 6(1)(b) GDPR). • Statistical analysis of website traffic to improve service quality (Art. 6(1)(f) GDPR). • Fulfilling legal obligations incumbent on the Controller (Art. 6(1)(c) GDPR). • Marketing of own services based on legitimate interest (Art. 6(1)(f) GDPR).

3. Data retention period

Personal data is stored for the period necessary to fulfill the processing purposes: • Contact form data — for 12 months from the date of last contact. • Data of clients using services — for the duration of the contract and 5 years after its termination (limitation period for civil claims). • Data processed on the basis of consent — until its withdrawal. • Data required by tax law — for 5 years from the end of the tax year.

4. User rights

You have the right to: • Access your personal data and obtain a copy thereof. • Rectification (correction) of inaccurate data. • Erasure of data ("right to be forgotten"). • Restriction of data processing. • Data portability to another controller. • Object to processing. • Withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To exercise these rights, contact us at: kontakt@puresparkpl.com.

5. Data recipients

Your data may be shared with the following categories of recipients: • Hosting and IT service providers ensuring the technical infrastructure of the website. • Entities providing accounting and legal services to the Controller. • Public authorities, if required by applicable law. We do not transfer personal data to third countries outside the European Economic Area.

6. Data security

We apply appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction, or alteration, including SSL/TLS encryption, regular security audits, and access control.

7. Complaint to a supervisory authority

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, www.uodo.gov.pl).

8. Changes to the Privacy Policy

The Controller reserves the right to amend this Privacy Policy. Users will be informed of any changes by publishing the updated version on puresparkpl.com.