Privacy and cookies
Last updated: 27 October 2026
1. Controller and contact
AK31 sp. z o.o., registered office: ul. Nowogrodzka 31/330, 00-511 Warszawa, Poland. Registry court: Sąd Rejonowy dla m.st. Warszawy w Warszawie, XII Wydział Gospodarczy Krajowego Rejestru Sądowego. KRS 0001189918 · NIP 7011273900 · REGON 542503916 · Share capital: PLN 5,000. Contact for privacy requests: [email protected] or by post to the company address. AK31 Design is a trade name of this company.
2. What happens when you use the site
Cloudflare delivers and protects this website. Connection data can include your IP address, requested URL, access time, browser and device information and security events. We use these data to provide the site, diagnose errors and prevent abuse, based on our legitimate interests in operating a secure website (Article 6(1)(f) GDPR). No analytics or advertising tools are embedded in the site code.
3. Enquiries and the e-mail draft tool
The contact tool prepares a mailto draft locally in your browser. It does not submit data to a website database or store your entries in cookies or browser storage. Opening a draft passes the entered details to your chosen e-mail application or provider; AK31 receives the message only when you send it. You can instead e-mail us directly. A name is optional; an e-mail address or phone number is needed for a reply. Please do not include unnecessary sensitive information.
4. Purposes and legal bases
We process your contact details, message, property information and subsequent correspondence to answer a request and prepare or perform a contract at your request (Article 6(1)(b) GDPR). General business correspondence and handling or defending specific claims are based on legitimate interests (Article 6(1)(f)); accounting and tax obligations are based on law (Article 6(1)(c)). A business contact who writes on behalf of a company is handled under Article 6(1)(f), rather than as a personal contract party. Sending an enquiry does not subscribe you to marketing. Where consent is the basis of a separate future activity, you may withdraw it at any time without affecting earlier lawful processing.
5. Recipients
Depending on the activity, data may be received by Cloudflare, Inc. (hosting, content delivery and security), Google Ireland Limited / Google LLC (Gmail correspondence), the e-mail service you choose, and providers of professional, accounting, legal or IT support where necessary. Public authorities receive data where required by law. We do not sell personal data. Provider processing for their own purposes is described in their own privacy policies. This website does not embed Tilda forms, WhatsApp, maps, video or audio players.
6. International transfers
Cloudflare and Google operate internationally, including in the United States. Transfers covered by a valid adequacy decision, including the EU–US Data Privacy Framework for participating certified entities, use that mechanism. Where applicable, providers use Standard Contractual Clauses with appropriate safeguards. See Cloudflare privacy information, Cloudflare contractual safeguards and Google transfer frameworks. You may ask us about the safeguards applicable to your data.
7. Retention
Enquiries and related correspondence that do not result in a contract are retained for 12 months from the last contact in the matter and then deleted. If a contract is concluded, documents are kept for the periods required by applicable accounting and tax law. Where a particular dispute or claim requires further retention, only the necessary records are retained for the relevant limitation period and proceedings. Technical and security records are retained only for operation, diagnosis and incident handling, according to the provider’s applicable retention rules; they are not used by AK31 to build visitor marketing profiles. Provider backup and deletion cycles can delay removal of backup copies.
8. Your rights and complaints
Subject to the conditions in the GDPR, you may request access and a copy, rectification, erasure, restriction, and portability for automated processing based on consent or contract. You may object to processing based on legitimate interests for reasons related to your situation. Contact us at [email protected]; we normally respond within one month. You may complain to the President of the Personal Data Protection Office (Prezes UODO), ul. Stanisława Moniuszki 1A, 00-014 Warszawa, Poland, or another competent supervisory authority. Information: uodo.gov.pl.
9. Voluntary provision and automated decisions
Providing enquiry data is voluntary; without a means of contact we cannot reply. Technical connection data are necessary to deliver and secure the website. AK31 does not use enquiry data for automated decisions producing legal or similarly significant effects and does not use them for marketing profiling. Cloudflare may automatically assess traffic to protect the service.
10. Cookies, fonts and external links
The website code does not set cookies, use localStorage or sessionStorage, or load optional advertising or analytics scripts. Fonts, images and site scripts are served from the site’s domain. Cloudflare may use strictly necessary security cookies when protection features require them; these are governed by its security configuration. There are no optional cookie categories to accept in the current version. External policy links load their destination only when clicked. Your e-mail app and external sites apply their own terms and privacy rules.
11. Updates
This notice describes ak31.design and www.ak31.design. If we add a service that changes data processing, we will update the information and obtain consent before loading optional technologies where required. Last updated: 27 October 2026.