Opens in a new tab

Privacy Policy

for peekyagency.com

Last updated: March 2026

I. Data Controller

The controller of personal data collected through the website peekyagency.com (hereinafter: the “Website”) is:

PEEKY Jacek Balczewski ul. Jaśminowa 5A/2
65-012 Zielona Góra, Poland
VAT ID: PL9292075422
Email: contact@peekyagency.com
Phone: +48 509 635 316

hereinafter referred to as the “Controller”.

II. Purposes and legal bases for processing personal data

The Controller processes personal data of Website Users for the following purposes and on the following legal bases:

1. Handling inquiries and contact form

Purpose: responding to messages sent via the contact form or email, preparing quotes, establishing cooperation.

Scope of data: first name, email address, phone number (optional), message content, store URL (if provided).

Legal basis: Art. 6(1)(b) GDPR - processing necessary for the performance of steps at the request of the data subject prior to entering into a contract; Art. 6(1)(f) GDPR - legitimate interest of the Controller (handling correspondence).

Retention period: until the end of correspondence and the applicable statute of limitations (3 years), unless a contract is concluded - in which case data is processed for the duration of the contract and the required archiving period.

2. Contract performance (client cooperation)

Purpose: delivery of services to the client, invoicing, project communication.

Scope of data: identification and contact data of the reporting person (first name, last name, email, phone), company data (name, VAT ID, address), data necessary for service delivery.

Legal basis: Art. 6(1)(b) GDPR - performance of a contract; Art. 6(1)(c) GDPR - legal obligation (accounting, tax).

Retention period: for the duration of the contract and 5 years from the end of the tax year in which the last invoice was issued (accounting obligation).

3. Analytics and statistics

Purpose: analysis of Website traffic, improvement of service quality, content optimization.

Scope of data: data collected automatically by analytics tools (IP address, browser type, screen resolution, traffic source, visit duration, pages viewed).

Legal basis: Art. 6(1)(a) GDPR - User consent (expressed by accepting analytical cookies); Art. 6(1)(f) GDPR - legitimate interest of the Controller (statistics necessary for analytics).

Tools: Google Analytics 4 (GA4), Google Tag Manager (GTM).

Retention period: in accordance with the analytics tool settings (14 months by default in GA4).

4. Marketing (newsletter, marketing contact)

Purpose: sending commercial information, newsletters, service updates - only with the explicit consent of the User.

Legal basis: Art. 6(1)(a) GDPR - consent.

Retention period: until consent is withdrawn.

III. Recipients of personal data

Users' personal data may be shared with the following categories of recipients:

  • hosting and server service providers
  • analytics tool providers (Google LLC - Google Analytics, Google Tag Manager)
  • email and communication service providers
  • accounting firm handling the Controller's bookkeeping
  • project management tool providers (if client data is processed therein)
  • public authorities - solely on the basis of applicable law

The Controller does not sell personal data to third parties.

IV. Data transfers outside the EEA

Due to the use of Google tools (Analytics, Tag Manager), data may be transferred to Google LLC based in the USA. Google LLC is certified under the EU-US Data Privacy Framework, which constitutes an adequate safeguard for the protection of personal data in accordance with Art. 45 GDPR.

In the absence of an adequacy decision, the Controller ensures appropriate safeguards based on Standard Contractual Clauses (Art. 46(2)(c) GDPR).

V. User rights

Every User whose personal data is processed by the Controller has the right to:

  • access their personal data (Art. 15 GDPR)
  • rectification of data (Art. 16 GDPR)
  • erasure of data (“right to be forgotten”, Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • objection to processing based on legitimate interest (Art. 21 GDPR)
  • withdrawal of consent at any time - without affecting the lawfulness of processing carried out before the withdrawal (Art. 7(3) GDPR)

To exercise any of the above rights, please contact the Controller at: contact@peekyagency.com.

The User also has the right to lodge a complaint with the supervisory authority - the President of the Polish Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland (www.uodo.gov.pl).

VI. Voluntary provision of data

Providing personal data is voluntary, but necessary to:

  • use the contact form and receive a response
  • enter into and perform a contract
  • receive marketing communications (newsletter)

Failure to provide data makes it impossible to fulfill the above purposes.

VII. Automated decision-making and profiling

The Controller does not make decisions based solely on automated processing, including profiling, that would produce legal effects or similarly significantly affect the User.

VIII. Data security

The Controller applies appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction or modification, including:

  • SSL/TLS encryption of the connection to the Website
  • regular updates of Website software
  • access control to IT systems
  • regular backups

IX. Cookie policy

1. What are cookies

Cookies are small text files stored on the User's device (computer, phone, tablet) when using the Website. They are used to ensure proper Website functionality, traffic analysis and content personalization.

2. Types of cookies used on the Website

a) Essential (technical) cookies
Ensure basic Website functionality (e.g. remembering cookie consent preferences). Do not require User consent. Legal basis: Art. 6(1)(f) GDPR - legitimate interest of the Controller.

b) Analytical cookies
Allow analysis of how the Website is used (e.g. Google Analytics 4). Collect anonymous statistical data. Installed only after obtaining User consent. Legal basis: Art. 6(1)(a) GDPR - consent.

c) Marketing cookies
Used to track User activity for the purpose of displaying personalized ads (e.g. Google Ads remarketing). Installed only after obtaining User consent. Legal basis: Art. 6(1)(a) GDPR - consent.

3. Managing cookies

On their first visit to the Website, the User is informed about the use of cookies and may give or refuse consent for individual cookie categories via the cookie banner (CMP - Consent Management Platform).

The User may change their cookie preferences at any time by:

  • clicking the “Cookie Settings” link in the Website footer
  • changing browser settings (instructions available in browser documentation)
  • deleting stored cookies from the browser

Disabling analytical and marketing cookies does not affect basic Website functionality. Disabling essential cookies may limit the availability of certain features.

4. Third-party cookies

The Website may use third-party cookies, in particular from:

  • Google LLC (Google Analytics, Google Tag Manager, Google Ads) - analytics and advertising
  • Meta Platforms, Inc. (Facebook Pixel) - advertising (if implemented)

Data processing rules of third parties are set out in their own privacy policies.

5. Cookie retention periods

Session cookies: automatically deleted when the browser is closed.

Persistent cookies: stored for the period specified in the cookie parameters (from a few days to 24 months, depending on type).

Google Analytics cookies: up to 14 months by default (GA4 configuration).

X. Changes to this privacy policy

The Controller reserves the right to amend this Privacy Policy. Users will be informed of significant changes via the Website. The current version of the Privacy Policy is always available at: peekyagency.com/privacy-policy/

XI. Contact

For matters related to the protection of personal data, please contact us:

Email: contact@peekyagency.com
Address: PEEKY Jacek Balczewski, ul. Jaśminowa 5A/2, 65-012 Zielona Góra, Poland