Privacy & cookies.

Who is responsible

This notice explains how personal data is handled when you visit summit-vertical.com, contact Summit Vertical or appear in our published portfolio. The controller is Katarzyna Straube-Czyż, NIP 6511641358, operating Summit Vertical.

Business address: Osiedle Pawlikowskiego 18A/18, 44-240 Żory, Poland.
Email: contact@summit-vertical.com
Telephone: +43 676 965 9194. These contact details also apply to privacy requests.

Website hosting and security

The website is hosted by cyber_Folks S.A., ul. Wierzbięcice 1B, 61-569 Poznań, Poland. The hosting infrastructure processes connection data such as IP address, requested pages or files, request time, browser information, response status and the referring page where supplied by your browser.

These records support page delivery, troubleshooting and protection against misuse. The legal basis is Article 6(1)(f) GDPR: our legitimate interest in operating a secure and reliable business website. Hosting providers and authorised technical support receive only the information needed for their tasks.

Enquiries and project discussions

The contact form asks for your name and email address, together with the subject and message you choose to provide. Email and telephone conversations contain the information you share with us. Please include only details relevant to your enquiry.

We use this information to answer questions, prepare an offer and arrange the requested next steps. Article 6(1)(b) GDPR applies to steps you request before your own contract and to performing that contract. General business correspondence and communication with company representatives rely on Article 6(1)(f), reflecting our legitimate interest in handling relevant enquiries. Legal record keeping, where required, relies on Article 6(1)(c).

The form uses WPForms Lite on this website. Its email notification is addressed to contact@summit-vertical.com. Lite Connect entry backups are disabled, and no external CAPTCHA provider is enabled. Providing your details is voluntary, but without a working reply address and enough information about the enquiry we may be unable to respond.

Photographs and films in the portfolio

Identifiable photographs and films are published to present our creative work on the basis of consent to publication, under Article 6(1)(a) GDPR. Production arrangements and permissions are handled for the relevant shoot. This notice does not expand a permission to cover unrelated uses.

You may withdraw your consent by contacting contact@summit-vertical.com and identifying the relevant material, for example with its page address. Withdrawal does not affect the lawfulness of earlier processing. We will stop further use that depends on the withdrawn consent, subject to any separate legal requirement to retain necessary records.

Recipients and international processing

Personal data may be accessed by authorised people handling enquiries and productions, providers supporting website hosting and business email, and technical contractors where access is necessary. Professional advisers or public authorities may receive relevant records when needed to meet a legal obligation or establish, exercise or defend a claim. We do not sell enquiry data.

cyber_Folks is our website hosting provider in Poland. This does not mean that every communication service or external platform operates only in the European Economic Area. Where we engage a provider whose processing requires a transfer outside the EEA, an applicable adequacy decision or appropriate safeguards under the GDPR are required. Contact us for information about safeguards relevant to your data and how to obtain a copy. External platforms you choose to visit are described below.

Cookies and browser storage

The public pages are configured without advertising pixels or optional visitor tracking cookies. Photos and background videos load from this website, rather than an embedded Instagram feed or external video player. WPForms Lite counts form views locally without tracking cookies, recording personal details for those statistics or sending the statistics to an external analytics service.

WordPress uses technical cookies when its login and administration features are used. These are separate from ordinary browsing of the portfolio:

• wordpress_test_cookie: checks whether the browser accepts cookies and normally lasts for the browser session.
• wordpress_sec_* and wordpress_logged_in_*: maintain authenticated access. Standard authentication expires after two days, or up to fourteen days when Remember Me is selected; logging out ends the authenticated session.
• wp-settings-* and wp-settings-time-*: remember an administrator’s interface preferences for up to one year.

You can block or delete cookies through your browser settings. Blocking technical login cookies can prevent administration features from working. Strictly necessary storage is treated under Article 399(3) of the Polish Electronic Communications Law. Optional technologies that require consent must remain inactive until a valid choice is made. If such features are introduced, this notice and the controls for refusing and withdrawing consent will be updated before use.

When you close the privacy notice, we save your preference in this browser’s local storage under sv_privacy_notice_30d_v1. This keeps the notice hidden for 30 days from the time you close it. Browsing or reloading pages does not extend this period. An expired preference is removed on your next visit. It is not used for analytics or advertising and does not provide consent to tracking. You can reset it by clearing this website’s stored data in your browser.

Instagram and external links

Links to @summit_vertical and @lukas_supel are ordinary links. Instagram is not embedded into these pages. Following a link or messaging us on Instagram involves that service’s own processing, which can include processing outside the EEA. Review the destination service’s privacy information before using it.

How long information is kept

• Enquiries: while the matter and resulting negotiations are active, then only while particular records remain necessary for an agreed project, a legal obligation or a relevant claim.
• Contract and accounting records: for the statutory period applicable to the relevant records. An unsuccessful enquiry does not automatically become an accounting record.
• Technical logs: for the time needed for operation, troubleshooting and security monitoring. Records linked to an identified incident may be retained while it is investigated and related claims remain relevant. Backup copies follow the applicable infrastructure backup cycle.
• Portfolio material: while the publication purpose and consent remain valid. Necessary evidence of permissions or the handling of a request may be retained separately where a legal obligation or a relevant claim requires it.

Your rights

Depending on the circumstances and legal basis, you may request access to your personal data and a copy, correction, erasure or restriction. Data portability applies to data you provided that is processed by automated means on the basis of consent or a contract. You can object, for reasons relating to your situation, to processing based on legitimate interests, and withdraw consent at any time.

Send requests to contact@summit-vertical.com. We may ask for proportionate information to confirm your identity. Requests are normally free of charge. We respond within one month; where the GDPR permits an extension, we will explain it within that month.

You can complain to a supervisory authority, particularly in the country of your habitual residence, place of work or the alleged infringement. The Polish authority is the President of the Personal Data Protection Office, ul. Stanisława Moniuszki 1A, 00-014 Warszawa, Poland.

Automated decisions and changes

We do not use solely automated processing to make decisions about you that produce legal or similarly significant effects. Technical spam checks do not determine your eligibility for our services. This notice will be updated when the website, its providers or processing purposes change; information about a new purpose will be provided before further processing begins.