Privacy Policy
Last Updated: 21 July 2026
This Privacy Policy describes how Kafigu Zotoyo collects, uses, and protects personal data obtained through the website kafigu-zotoyo.info and related program communications. We are committed to full compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council (the General Data Protection Regulation, "GDPR") and the Polish Act of 10 May 2018 on the Protection of Personal Data (Dz.U. 2018 poz. 1000, as amended).
1. Data Controller
The data controller responsible for personal data processed through this website is:
Kafigu Zotoyo
Energetyków 3
Szczecin, Poland
Email: [email protected]
Phone: +48 508 341 446
If you have questions or concerns about how your personal data is handled, you may contact us directly using the information above. We will respond to data-related inquiries within the timeframe required by applicable law.
2. Scope of Application
This policy applies to all personal data collected through:
- The website at kafigu-zotoyo.info and all its subpages
- Contact form submissions sent via the website
- Direct email correspondence sent to addresses at the kafigu-zotoyo.info domain
- Telephone inquiries made using the number listed on this website
- In-person or remote participation in the educational program
This policy does not apply to third-party websites that may be linked from our pages. We encourage you to review the privacy policies of any external sites you visit.
3. Data We Collect
Depending on how you interact with us, we may collect the following categories of personal data:
Contact data: Name, email address, and any information you voluntarily include in a contact form message or direct email.
Technical data: IP address, browser type, operating system, referring URL, and pages visited. This data is collected automatically when you browse the website and is used in aggregate for site performance and security purposes.
Cookie data: Data stored via cookies placed on your device, as described in Section 9 and in our separate Cookie Policy.
Program participation data: If you participate in the educational program, we may collect your name, contact details, and information about your agricultural business relevant to program administration.
We do not collect special categories of personal data (as defined in Article 9 GDPR) and do not process data relating to children under 16 years of age.
4. Legal Basis for Processing
We process personal data only when a valid legal basis under Article 6 GDPR exists. The applicable bases are:
- Consent (Art. 6(1)(a) GDPR): When you tick the privacy checkbox on the contact form, you consent to us processing your submitted data for the purpose of responding to your inquiry. You may withdraw consent at any time.
- Legitimate interests (Art. 6(1)(f) GDPR): We process technical and analytical data on the basis of our legitimate interest in maintaining website security, understanding how the site is used, and improving user experience. These interests do not override your fundamental rights and freedoms.
- Legal obligation (Art. 6(1)(c) GDPR): Where processing is required to comply with Polish law or European Union regulations applicable to our activities.
5. Purposes of Processing
Personal data is processed for the following purposes:
- Responding to inquiries submitted through the contact form or by email
- Administering participation in the Kafigu Zotoyo educational program
- Maintaining the technical operation and security of the website
- Analyzing aggregate usage patterns to improve the website and program materials
- Complying with applicable legal obligations
We do not use personal data for automated decision-making or profiling as defined in Article 22 GDPR.
6. Data Retention
We retain personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable law.
Contact form inquiries and correspondence are retained for a period not exceeding 24 months from the date of last contact, unless a longer period is required for legal or administrative reasons.
Technical log data is retained for a maximum of 12 months for security and diagnostic purposes. Cookie data is retained in accordance with the durations specified in the Cookie Policy.
Upon expiry of the applicable retention period, data is securely deleted or anonymized.
7. Sharing of Data
We do not sell, rent, or trade personal data to third parties. Data may be shared in limited circumstances:
- Service providers: We may engage processors such as hosting providers and email service providers who process data on our behalf under data processing agreements that meet the requirements of Article 28 GDPR.
- Legal requirements: We may disclose data to competent authorities when required by Polish law or European Union law, including in response to lawful requests from public bodies.
- Business continuity: In the event of a reorganization or transfer of the program, data may be shared to the extent necessary, subject to the same protections described in this policy.
Where data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place as required by Chapter V GDPR.
8. Your Rights
Under GDPR and Polish data protection law, you have the following rights with respect to your personal data:
- Right of access (Art. 15 GDPR): You may request confirmation of whether we hold personal data about you and obtain a copy of that data.
- Right to rectification (Art. 16 GDPR): You may request correction of inaccurate or incomplete personal data.
- Right to erasure (Art. 17 GDPR): You may request deletion of your personal data where the legal basis for processing no longer applies.
- Right to restriction (Art. 18 GDPR): You may request that we limit processing of your data in certain circumstances.
- Right to data portability (Art. 20 GDPR): Where processing is based on consent and carried out by automated means, you may request your data in a structured, machine-readable format.
- Right to object (Art. 21 GDPR): You may object to processing based on legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
- Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, contact us at [email protected]. We will respond within one month of receiving your request, or inform you of any extension of that period.
9. Cookies and Tracking
This website uses cookies to ensure proper functionality and to understand how visitors interact with content. Cookies are small text files placed on your device when you visit the site.
Essential cookies are placed without requiring consent as they are strictly necessary for the website to operate. Non-essential cookies (analytics, marketing) are placed only with your explicit consent, which you provide through the cookie consent interface on this website.
You may manage or withdraw cookie consent at any time by accessing the cookie settings panel available on this website. Full details of the cookies used, their purposes, and their durations are provided in our Cookie Policy.
10. Security Measures
We implement appropriate technical and organizational security measures to protect personal data against unauthorized access, loss, alteration, or disclosure. These measures include:
- Secure HTTPS transmission for all web traffic
- Access controls limiting data access to authorized personnel only
- Regular review of data handling procedures
- Processor agreements requiring equivalent security standards from third-party service providers
While we take reasonable precautions, no method of electronic transmission or storage is entirely secure. If you believe your personal data has been compromised, please contact us immediately.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our data practices or applicable law. The updated version will be published on this page with a revised "Last Updated" date. We encourage you to review this page periodically.
Where changes are material, we will take reasonable steps to notify users, such as by displaying a notice on the website.
12. Supervisory Authority
If you believe that our processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority. In Poland, this is:
Urząd Ochrony Danych Osobowych (UODO)
ul. Stawki 2
00-193 Warsaw, Poland
Website: uodo.gov.pl
We encourage you to contact us directly in the first instance, as we are committed to resolving any concerns promptly and fairly.