Privacy policy
Last updated: 27 September 2026.
1. Data controller
The controller of personal data submitted through bobusinessoperations.pl is Agata Gołdyn, operating under the BO Business Operations brand. For privacy-related matters, contact agata@bobusinessoperations.pl.
2. Data we process
When you submit the contact form or send an email, we process the information you provide, in particular your name, email address, company name and enquiry. The hosting server may also retain standard technical data, such as an IP address, browser type, request time and visited URL, in logs used for security and diagnostics.
3. Purposes and legal grounds
- responding to your enquiry and taking steps before entering into a contract — Article 6(1)(b) GDPR;
- managing correspondence, establishing or defending legal claims and protecting the website — our legitimate interests under Article 6(1)(f) GDPR;
- maintaining aggregate technical website statistics without storing IP addresses in the BO dashboard — our legitimate interest in evaluating the website under Article 6(1)(f) GDPR.
4. Statistics and cookies
The website does not use advertising or marketing cookies. Its first-party statistics module records aggregate counts only, including page views, language version, general device type and referring domain. The BO dashboard does not store IP addresses or complete referring URLs.
Your browser may use session storage to avoid counting the same page opening repeatedly within one browser session. An essential session cookie may be created when a form is submitted or the protected statistics dashboard is used.
5. Recipients
Data may be processed by providers of hosting, email, technical maintenance and website security services, only to the extent necessary to provide those services. We do not sell personal data.
6. Retention
Enquiry correspondence is retained for as long as necessary to handle the matter and then for no more than 12 months, unless a contract is entered into or a longer period is necessary to establish, pursue or defend legal claims. Aggregate daily statistics are retained for up to 400 days; cumulative totals may be retained for longer.
7. Your rights
You may request access to, rectification or erasure of your data, restriction of processing and — where applicable — data portability. You may object to processing based on legitimate interests. You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (UODO).
8. Voluntary provision of data
Providing data is voluntary, but without your email address, name and message we will not be able to respond to the enquiry.
This policy should be updated if the website adopts additional tools, such as an active chatbot, external analytics, meeting scheduling or marketing cookies.