Privacy Policy

Data Controller

The controller of your personal data is:

OPEN8 Michał Krawczak
ul. Bratkowa 2/2, 71-804 Szczecin, Poland
Tax ID (NIP): PL857-181-83-76
Contact: office@open8.co

What data we collect

Using open8.co involves limited technical data collection. Specifically:

• Cloudflare (CDN and DDoS protection) - IP address, browser headers, request technical metadata. Cloudflare is our processor; full scope is described in their privacy policy.
• Google Analytics - traffic statistics with IP anonymization (session duration, traffic source, device type, clicks). Details: Google privacy policy.
• Email - if you write to us, we process the content of your message and your email address to respond.

We don't collect data via forms, newsletter, or user accounts - because there aren't any on the site.

Purpose and legal basis

• Cloudflare - site security and availability. Basis: legitimate interest of the controller (Art. 6(1)(f) GDPR).
• Google Analytics - analysis and improvement of the site. Basis: your consent (Art. 6(1)(a) GDPR). You may withdraw it at any time.
• Email - handling your inquiry or contract performance. Basis: legitimate interest or contract necessity (Art. 6(1)(f) or (b) GDPR).

Retention period

• Cloudflare logs and data - per the provider's policy, typically up to 30 days.
• Google Analytics data - 14 months.
• Email correspondence - for the period necessary to handle the matter, no longer than 3 years from last contact (unless a longer period is required by accounting or legal obligations).

Data recipients

Your data may be processed by:

• Cloudflare, Inc. (USA) - CDN and security infrastructure provider.
• Google Ireland Limited / Google LLC (EU/USA) - Google Analytics provider.

Transfers outside the EEA are made on the basis of EU Standard Contractual Clauses (SCCs) concluded with the providers.

Cookies

The site uses the following categories of cookies:

• Technical (Cloudflare) - necessary for security mechanisms and load balancing.
• Analytics (Google Analytics - _ga, _gid and related) - used to measure traffic and improve the site.

You can manage cookies in your browser settings. Disabling analytics cookies does not affect site functionality.

Your rights

Under GDPR, you have the right to:

• access your data,
• rectify your data,
• erase your data ("right to be forgotten"),
• restrict processing,
• data portability,
• object to processing,
• withdraw consent at any time (where processing is based on consent).

To exercise these rights, write to: office@open8.co.

You also have the right to lodge a complaint with the Polish Personal Data Protection Office (uodo.gov.pl) if you believe we process your data unlawfully.

Changes to this policy

We may update this policy. The current version is always available at this address.

Last updated: 28 May 2026.