Privacy policy

The controller of your personal data is OUTOFPLACE POLAND sp. z o.o., Zabia 4, 18-400 Lomza, Poland, KRS 0001163427, NIP 7182173789, REGON 541259259.

You can reach the controller in every data matter at contact@levera.pl or by post at the address above. No Data Protection Officer has been appointed, because the controller does not meet the conditions in Article 37(1) GDPR; correspondence goes to the address above.

The site has no contact form, no account, no newsletter and no payment. It does not, by itself, collect personal data from you.

Correspondence: if you write or call, we process what you choose to give us - name, email address, phone number, employer, and the content of the message.

Technical logs: our hosting provider records the request data every web server records - IP address, date and time, the address requested, the referring page, the user agent. This is how a site is served and kept secure; we do not use it to build a profile of you.

Preference storage: your language choice, described in the Cookie policy.

Answering your enquiry and any steps leading to a contract - Article 6(1)(b) GDPR, and Article 6(1)(f) where you write on behalf of a company (our legitimate interest in conducting correspondence).

Operating, securing and maintaining the site, including logs - Article 6(1)(f) GDPR (legitimate interest in a working and secure service).

Establishing, exercising or defending legal claims - Article 6(1)(f) GDPR.

Complying with legal obligations, in particular accounting and tax - Article 6(1)(c) GDPR.

Data may be disclosed to entities that process it on the controller's behalf under a data processing agreement: the hosting and CDN provider, the email provider, and where relevant accounting and legal advisers.

Data is disclosed to public authorities only where required by law.

We do not sell personal data and we do not share it for third-party advertising.

Hosting and email may involve providers whose infrastructure sits partly outside the European Economic Area.

Where that happens, transfers are based on the European Commission's Standard Contractual Clauses or an adequacy decision, together with supplementary safeguards where required. You can request a copy of the safeguards at contact@levera.pl.

Correspondence: for the duration of the exchange and then for up to 3 years, which matches the general limitation period for business claims under Polish law.

Server logs: for as long as the hosting provider retains them for operational and security purposes, typically no more than 30 days.

Accounting records: 5 years from the end of the tax year, as required by tax law.

You have the right to: access your data and obtain a copy; rectify it; erase it; restrict processing; data portability where processing is based on a contract or consent; and object to processing based on legitimate interest.

Where processing is based on consent, you can withdraw it at any time, without affecting the lawfulness of processing before withdrawal.

To exercise any of these, write to contact@levera.pl. We respond within one month, and tell you if we need longer for a complex request.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Urzad Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw.

Providing data is voluntary. Without contact details, however, we cannot answer an enquiry.

We do not take decisions about you by automated means and we do not profile you within the meaning of Article 22 GDPR. The site runs no analytics, no advertising pixels and no visitor tracking.

The site is served over HTTPS with a strict content security policy, HSTS and clickjacking protection. Access to correspondence is limited to the people who need it.

No measure is absolute; please do not send sensitive information, credentials or documents by unencrypted email.

This policy is updated when our processing or the law changes. The current version is always the one published here, with the date of the last change shown at the foot of the page.