Skip to content
Back to homepage

Privacy Policy

Last updated: 14 March 2026

1. Data Controller

The controller of your personal data is Open Mercato Studio, based in Warsaw, Poland. Email: kontakt@openmercatostudio.pl, website: openmercatostudio.pl.

2. What Data We Collect

We collect the following categories of personal data:

  • Contact form data — name, email address, phone number, message content, and any other information you voluntarily provide through our contact forms.
  • Meeting booking data (Cal.com) — name, email address, meeting date and time. Bookings are processed through Cal.com, which acts as a data processor on our behalf.
  • Technical data (cookies and server logs) — IP address, browser type, operating system, visit time, pages viewed. This data is collected automatically for technical and analytical purposes.

3. Purpose of Data Processing

We process your personal data for the following purposes:

  • Responding to enquiries submitted through the contact form.
  • Scheduling and conducting business consultations.
  • Performing contracts and providing implementation services.
  • Analysing website traffic and improving service quality.
  • Fulfilling legal obligations (e.g. accounting, tax).
  • Establishing or defending legal claims.

4. Legal Basis for Processing (GDPR Art. 6)

  • Art. 6(1)(a) — your consent (e.g. for marketing communications).
  • Art. 6(1)(b) — necessity for the performance of a contract or pre-contractual steps (e.g. responding to a quote request, delivering services).
  • Art. 6(1)(c) — compliance with a legal obligation (e.g. accounting requirements).
  • Art. 6(1)(f) — legitimate interests of the controller (e.g. analytics, legal claims, IT security).

5. Data Retention Period

  • Contact form data — until the correspondence is concluded, or up to 12 months from the last contact, unless the data is required for contract performance.
  • Contractual data — for the duration of the contract and for the period required by law (typically 5 years from the end of the tax year).
  • Analytical data (cookies) — in accordance with the cookie expiry period (maximum 12 months).
  • Data processed on the basis of consent — until consent is withdrawn.

6. Your Rights

Under the GDPR, you have the following rights:

  • Right of access — you can obtain information about the data we process.
  • Right to rectification — you can request correction of inaccurate data.
  • Right to erasure — you can request deletion of your data ("right to be forgotten").
  • Right to restriction of processing — you can request that processing be limited.
  • Right to data portability — you can receive your data in a structured, machine-readable format.
  • Right to object — you can object to processing based on legitimate interests.
  • Right to withdraw consent — at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact us at kontakt@openmercatostudio.pl.

You also have the right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (PUODO), ul. Stawki 2, 00-193 Warsaw, Poland.

7. Cookies and Tracking Technologies

Our website uses cookies for the following purposes:

  • Essential cookies — ensure the website functions correctly (e.g. remembering selected language). These do not require consent.
  • Analytical cookies — help us understand how users interact with the website (e.g. number of visits, popular pages). These are only installed with your consent.

You can manage cookie settings in your browser. Disabling certain cookies may affect website functionality.

8. Data Recipients

Your data may be shared with the following categories of recipients:

  • Hosting and IT service providers.
  • Cal.com — for meeting bookings.
  • Analytics service providers.
  • Public authorities — where required by law.

We do not transfer personal data to third countries (outside the European Economic Area) unless the provider ensures an adequate level of data protection (e.g. European Commission adequacy decision or standard contractual clauses).

9. Contact Regarding Personal Data

For matters related to personal data protection, you can reach us at:

We respond to personal data enquiries within 30 days of receipt.