Ladies and gentlemen, using the services of ZAPA Sp. z o.o. you entrust us with your information, including personal data. The privacy policy serves as an aid in understanding what data we collect, for what purpose and for what we use it.

1. Data source

We process data that you leave to us via web forms or provide during telephone or direct contact. We also process data made available from third parties. Data refer to contractors or other physical persons and do not concern employees or co-workers of the company ZAPA Sp. z o.o.

2. Data scope

Providing data is voluntary. These are the data such as: Name, surname, e-mail address, phone number, as well as data that you leave as part of navigating our pages, i.e. cookies, e.g. computer IP. The scope of data processed may vary - information on this can be found on the appropriate website or you can ask our Data Protection Officer (contact details below).

3. Data administrator

The administrator of your personal data is the company ZAPA Sp. z o.o. with registered office in Poland in Kraków, at u. Sołtysowska 12A/4, Tax ID: 677-237-39-68. The Data Administrator on data processing can be contacted in writing via traditional mail to the following address: ul. Ciepłownicza 23, 31-574 Kraków or by email: This email address is being protected from spambots. You need JavaScript enabled to view it.

4. Personal data protection inspector

The administrator has appointed a Data Protection Inspector, with whom you can contact in writing, by traditional mail to the address: ul. Ciepłownicza 23, 31-574 Kraków or by email: This email address is being protected from spambots. You need JavaScript enabled to view it.

5. Purpose of data processing, legal basis and processing period

Purposes of data processing Legal basis Processing period
  • Performing a contract or order, including, for example, regulations that you accept,
  • technical support service
Art. 6 par. 1 let. b) GDPR - indispensability to perform the contract to which the User is a party Until the given contract expires between the User and the Administrator or the period of limitation of claims resulting from the regulations
  • Statistical measurements,
  • direct marketing (including analyzing and profiling data for marketing purposes) of the Administrator's products and services,
  • handling of applications sent to us, for example via e-mail, contact form, by phone.
art. 6 par. 1 let. f) GDPR - justified interest of the Administrator Until the opposition is successfully filed
  • Marketing (including analyzing and profiling data for marketing purposes),
  • sending a newsletter,
  • answers to queries,
art. 6 par. 1 let. a) GDPR - voluntary consent Until the consent is withdrawn
  • Implementation of the legal obligation to prepare and store documentation, e.g. invoices;
  • confirmation of the fulfillment of obligations and pursuing claims or defense against claims
  • complaints service,
art.6 par.1 point c) GDPR - legal obligation For a period resulting from the Administrator's national regulations


  • monitoring the number and type of website visits, collecting statistical data on the number of users and patterns of using the website, including IP number, device, time of the last visit to the website, etc.,
  • recording user preferences, screen layouts, including the preferred language and country of the user,
  • improving the speed and performance of the website,
  • collecting the data necessary to carry out the transaction, collection of data by advertising networks
Art. 6 par. 1 let. a) GDPR - voluntary consent Until the change by the User of the settings for managing cookies in the browser



The data provided by you may be processed in order to profile and adjust the marketing content, offers or other information we send to your interests. At the same time, the data you provide is not processed for automated decision making.

6. Data recipients

Entities processing data on behalf of the Administrator act on the basis of an agreement with the Administrator and only in accordance with its instructions.

7. Rights of persons

In connection with the processing of your personal data in the light of the provisions of the GDPR, you have the right to:

  • requests from the Administrator: access, correction or deletion of your personal data,
  • requests from the Administrator to limit processing,
  • transferring or objecting to the processing of your personal data,
  • lodging a complaint to the supervisory body.

You can use the above rights by contacting the Administrator or the Inspector at the email address: This email address is being protected from spambots. You need JavaScript enabled to view it. The possibility of using the above rights may depend on the legal basis regarding the use of your personal data and the purpose of their processing.

8. Additional information

Data are processed in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27th of April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC ( general regulation on data protection) GDPR and regulations in force in Poland. Administrator makes every effort to provide all means of physical, technical and organizational protection of personal data against their accidental or intentional: destruction, loss, change, unauthorized disclosure, use or access.

9. Protection

This Privacy Policy regarding the processing of personal data by ZAPA Sp. z o.o. is a purely informational document and is published in order to implement the regulations resulting from the provisions of the GDPR. At the same time, the Privacy Policy is a work within the meaning of copyright law, which is protected. It may not be reproduced or used in whole or in part for purposes other than intended.