Privacy Policy

Last updated: 2026-09-07

This policy explains what personal data we collect through this website, why we collect it, how long we keep it and what rights you have. It is written to satisfy Regulation (EU) 2016/679 (the GDPR).

1. Who is responsible for your data

The data controller is HK Group International Sp. z o.o., NIP 6692587408, KRS 0001190634, REGON 542534905.

2. What data we collect

We collect only what the website actually needs to work and to let you contact us.

Source	Data	Why
Contact form	Name, email address, company name, project type, message content	To read your enquiry and reply to it
Anti-spam protection	A one-way hash of your IP address, stored for 20 seconds	To stop the same sender submitting the form repeatedly
Server logs	IP address, time of request, requested address, browser identification	Standard server operation, security and fault diagnosis

We do not run advertising trackers, analytics profiling or behavioural targeting on this site, and we do not buy or enrich data about visitors from third parties.

3. Legal basis for processing

• Article 6(1)(b) GDPR — steps taken at your request before entering into a contract. This covers everything you send us through the contact form.
• Article 6(1)(f) GDPR — our legitimate interest in operating the website securely, preventing abuse of the contact form and keeping a record of business correspondence.
• Article 6(1)(c) GDPR — compliance with legal obligations, where correspondence has to be retained for accounting or tax reasons.

4. How long we keep it

• Contact form messages: for as long as the enquiry is active, and afterwards for up to 3 years for the purpose of establishing or defending legal claims.
• Anti-spam hash: 20 seconds, then discarded.
• Server logs: kept by our hosting provider under its standard retention period, typically no longer than 12 months.

5. Who else sees your data

We keep the number of parties involved deliberately small.

• Our hosting provider, acting as a processor under a data processing agreement, on servers located in the European Union.
• Our email provider, because your enquiry reaches us as an email message.
• Public authorities, only where we are legally required to disclose information.

We do not sell personal data and we do not share it for marketing purposes. Where all processing takes place within the European Economic Area, no international transfer mechanism is required; if that ever changes, this policy will be updated before the change takes effect.

6. Your rights

Under the GDPR you have the right to:

• access your data and receive a copy of it (Article 15);
• have inaccurate data corrected (Article 16);
• have your data erased (Article 17);
• restrict how we process it (Article 18);
• receive your data in a portable format (Article 20);
• object to processing based on our legitimate interest (Article 21).

To exercise any of these, write to contact@hk-group.eu. You also have the right to lodge a complaint with a supervisory authority — in Poland this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa), and you may alternatively complain to the authority in your own country of residence.

7. Automated decision-making and profiling

We do not carry out automated decision-making or profiling within the meaning of Article 22 GDPR. No decision affecting you is made by an algorithm on this website.

8. Cookies and browser storage

This website does not set tracking cookies. The only thing stored in your browser is your answer to the cookie notice, kept in local storage. Details are in our cookie policy.

9. Changes to this policy

If we change how we handle personal data, we will update this page and change the date at the top. Material changes affecting existing enquiries will be communicated directly.