Privacy Policy (GDPR)
Last updated: 2026-07-01
This policy explains how we process personal data of afina.agency visitors in accordance with the GDPR (EU Regulation 2016/679).
1. Data Controller
The data controller is Afina Digital Agency, Warszawa, Polska.
Contact for data protection matters: info@afina.agency.
2. Data we collect
- Contact form data: name, email or phone, business niche and message content.
- Technical data: IP address, browser type, operating system, referral source.
- Analytics and marketing data collected via cookies (with your consent).
3. Purposes and legal basis (GDPR Art. 6)
- Replying to your enquiry and preparing an offer — Art. 6(1)(b) (pre-contractual steps).
- Site analytics and improvement — Art. 6(1)(a) (consent) or Art. 6(1)(f) (legitimate interest).
- Marketing and remarketing activities — Art. 6(1)(a) (consent).
- Legal and accounting obligations — Art. 6(1)(c).
4. Recipients and third-party services
We use trusted providers that may process data on our behalf:
- Vercel Inc. — hosting and website delivery.
- Google LLC (Google Analytics, Google Ads) — statistics and advertising.
- Meta Platforms Ireland Ltd. (Meta Pixel) — campaign measurement and remarketing.
- Email and messaging providers used for client communication.
5. Transfers outside the EEA
Some providers may process data outside the European Economic Area. Such transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision.
6. Data retention
- Contact form enquiries: up to 24 months after the last contact.
- Analytics data: up to 14 months or until consent is withdrawn.
- Billing records: 5 years, as required by tax law.
7. Your rights
- Right of access and to obtain a copy of your data.
- Right to rectification and erasure (“right to be forgotten”).
- Right to restriction of processing and to data portability.
- Right to object to processing based on legitimate interest.
- Right to withdraw consent at any time, without affecting prior lawful processing.
- Right to lodge a complaint with the Polish Data Protection Authority (UODO) or your local supervisory authority.
8. Cookies
We use cookies that are strictly necessary for the site to work and, subject to your consent, analytics and marketing cookies. You can change your choice at any time by clearing site data in your browser.
9. Contact
For any privacy request, write to info@afina.agency.