Privacy and cookie policy
1. Who the controller is
The data controller is Konik System Sp. z o.o., registered office in Gdańsk, ul. Jaśkowa Dolina 29 lok. 31, 80-286 Gdańsk, entered in the register of entrepreneurs of the National Court Register (KRS) under number 0001144320 (Sąd Rejonowy Gdańsk-Północ w Gdańsku, VII Wydział Gospodarczy KRS), NIP 9571182157, REGON 540418046, share capital PLN 5,000.00. The company runs the KONIK, mrtiq and X.PUNKT (Xpunkt) brands.
Contact on personal data matters: rodo@koniksystem.com (or ihaha@koniksystem.com), or by post to our registered office. The company has not appointed a data protection officer.
2. Purposes, legal bases and periods of processing
| When we process data | Purpose | Legal basis (GDPR) | How long |
|---|---|---|---|
| Contact form, request for a free audit or a quote, email, phone | replying and preparing an offer | Art. 6(1)(b) (steps prior to a contract) or (f) (legitimate interest: replying to an enquiry) | up to 12 months with no further contact; after a conversation or an offer, up to 24 months from the last contact |
| Conclusion and performance of a contract | providing services, invoicing | (b) and (c) | for the term of the contract, then until claims become time-barred and for the period required by tax law |
| Commercial information and newsletter (only with consent) | marketing | consent ((a)) and consent under Art. 398 of the Polish Electronic Communications Law (Prawo komunikacji elektronicznej) | until consent is withdrawn |
| Server logs (IP address, date, page address, browser) | website security, detecting abuse | (f) | for a short period, according to the hosting provider's settings |
| Contact with people at companies (B2B) | starting a business relationship | (f); information under Art. 14 at first contact | up to 12 months with no reply |
| Claims | establishing, pursuing and defending claims | (f) | until claims become time-barred |
3. Who we share data with
We share data with providers who process it on our behalf under data processing agreements:
- website hosting: Hetzner Online GmbH (Germany), with the server in a data centre in Nuremberg (European Union);
- our CRM system and automation tools, which receive submissions from the form;
- our email provider;
- our accounting firm.
Data may also be received by a law firm and by public authorities where the law requires it. We will send the full list of providers on request to rodo@koniksystem.com (or ihaha@koniksystem.com).
4. Transfers of data outside the European Economic Area
The website and the form run on a server in the European Union. Some providers (for example email) may be based in the USA or have access to data from the USA. We transfer data only on the basis of:
- a European Commission adequacy decision (for the USA, the EU-US Data Privacy Framework, if the recipient is on the official list),
- or standard contractual clauses.
You can obtain a copy of the safeguards by writing to rodo@koniksystem.com (or ihaha@koniksystem.com).
5. Your rights
You have the right to:
- access your data;
- have it rectified or erased;
- restrict processing;
- data portability;
- object to processing based on legitimate interest (an objection to marketing always takes effect);
- withdraw consent at any time (without affecting the lawfulness of processing before withdrawal);
- lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warszawa.
We reply within one month.
6. Do you have to provide data
Providing data is voluntary. Without the data marked as required, we cannot reply to your enquiry or conclude a contract.
7. Artificial intelligence and automated decisions
We do not make decisions about you based solely on automated processing that produce legal effects or similarly significantly affect you. If a chat or AI assistant is added to the website, it will say so at the start of the conversation and let you ask to speak to a person.
8. Where we get data from (when not from you)
Contact details of people at companies come from public sources, such as company websites and public registers. We tell you this when we first contact you.
9. Security
We use encrypted connections (HTTPS) and access control for the systems where we store data.
10. Cookies and similar technologies
The website may store small files and data on your device (cookies, localStorage).
- Strictly necessary and functional: they make the website work and remember the settings you choose. They do not require consent (Art. 399(3) of the Polish Electronic Communications Law).
- Analytics and marketing: xpunkt.pl does not use them today. If we switch them on, we will do so only after you give consent in the banner, and you will be able to change your consent at any time.
The website does not load analytics tools or advertising pixels, and fonts are served from our own server (with no connection to Google servers).
| Name | Type | Purpose | Duration | Consent |
|---|---|---|---|---|
xpunkt-theme (localStorage) | functional | remembers the light or dark theme chosen by the user | until deleted by the user | no |
You can also delete cookies and site data, or block them from being stored, in your browser settings. Blocking strictly necessary data may make the website harder to use.
External content. Some pages contain links to our clients' websites or to social media. Once you go to such a website, its owner processes data according to its own rules.
11. Changes
We announce changes to this policy on this page, together with the date of the update. Website terms: terms.
Controller details
Konik System Sp. z o.o.
ul. Jaśkowa Dolina 29 lok. 31, 80-286 Gdańsk, Poland
Registered with: Sąd Rejonowy Gdańsk-Północ w Gdańsku, VII Wydział Gospodarczy KRS
KRS 0001144320 · NIP 9571182157 · REGON 540418046
Share capital: PLN 5,000.00
Email: ihaha@koniksystem.com · tel. +48 502 417 719