Skip to content
Legal

Privacy policy in plain language.

This policy explains what personal data is processed when you visit lavabs.com or contact us, why, on what legal basis, and what rights you have. It follows Regulation (EU) 2016/679 (GDPR) and the Polish Act of 10 May 2018 on the Protection of Personal Data. Last updated: 3 November 2026.

1. Who is the controller

The controller of your personal data is LavaBS – Adam Kołakowski, Żużlowa 78, 94-126 Łódź, Poland (“LavaBS”, “we”).

Email for all privacy matters: privacy@lavabs.com. Phone: +48 (42) 6 200 340. We have not appointed a Data Protection Officer.

2. What we process, why and for how long

Visiting the website (server logs)

Data
IP address, date and time of the request, requested URL, HTTP status, amount of data transferred, referring page, and browser and operating-system information (user agent).
Purpose
Delivering the website, keeping it secure, detecting and investigating abuse, and troubleshooting.
Legal basis
Our legitimate interest in the secure and reliable operation of the website, Art. 6(1)(f) GDPR.
Source
Sent automatically by your browser.
Retention
Up to 90 days, then deleted or anonymised. Longer only where needed to investigate a specific security incident, until it is resolved.
Providing data
Not required by law, but technically necessary to display the website.

Contacting us by email or phone

Data
Name, email address, phone number, the content of your message and anything else you choose to share.
Purpose
Answering your enquiry and, if you ask for it, preparing an offer or a contract.
Legal basis
Art. 6(1)(b) GDPR (steps taken at your request before entering into a contract) and Art. 6(1)(f) GDPR (our legitimate interest in communicating with people who contact us and in keeping correspondence).
Retention
While we handle your enquiry, and afterwards for as long as claims may be pursued or defended, until the limitation periods expire. If a contract is concluded, the data processed for it is covered by separate information.
Providing data
Voluntary, but without it we cannot reply.

3. Cookies and tracking

This website does not set cookies and does not use analytics, advertising or tracking tools. It does not load fonts, scripts or images from third parties, so we do not show a cookie banner. If this changes, we will update this policy and ask for consent wherever the law requires it.

4. Who receives your data

We do not sell personal data. Data may be made available only to:

  • providers of IT infrastructure, email and communication services who process it on our behalf under data processing agreements (Art. 28 GDPR);
  • public authorities and other entities, where we are legally required to disclose it.

The website itself is served from a server that we operate.

5. Transfers outside the EEA

We do not transfer personal data collected through this website outside the European Economic Area. If a service provider processes data outside the EEA, we make sure the transfer is covered by an adequacy decision or standard contractual clauses (Art. 44–46 GDPR).

6. Your rights

You have the right to:

  • access your data and receive a copy (Art. 15);
  • have inaccurate data rectified (Art. 16);
  • have your data erased (Art. 17);
  • restrict processing (Art. 18);
  • data portability, where it applies (Art. 20);
  • object, on grounds relating to your particular situation, to processing based on our legitimate interest (Art. 21). We will stop unless we demonstrate compelling legitimate grounds or need the data to establish, pursue or defend claims.

To use these rights, write to privacy@lavabs.com. We will reply without undue delay and within one month (Art. 12(3) GDPR). We do not use automated decision-making or profiling (Art. 22).

You also have the right to lodge a complaint with a supervisory authority: in Poland, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl, or the authority in the EU member state where you live, work or where the alleged infringement took place.

7. Security

The website is delivered over an encrypted HTTPS connection. Access to logs and correspondence is limited to authorised persons, and we apply technical and organisational measures appropriate to the risk (Art. 32 GDPR).

8. Changes to this policy

We will publish any changes on this page and update the date at the top. This policy is also available in Polish: Polityka prywatności.