Privacy and cookies policy

Updated: October 20, 2026

1. Administrator and contact

The data controller is LENDO Andrzej Skrętowski, Cyprysowa 12b, Kruszyn, 59-700 Bolesławiec. For data matters, write to hello@wpquit.pl.

2. What data do we receive?

• In the forms, we ask for your name and surname and e-mail address. When checking and pricing, also ask for the website address. Phone and company name are optional.
• We receive a description of the problem, answers regarding the website and the content of subsequent correspondence. The result of manual review and work findings may also contain personal data.
• The server processes technical connection data, such as IP, request time, address of the visited page and browser information. They are used to provide the website and protect against abuse.
• Forms security uses a technical identifier derived from IP using a secret key, trial times, and one-time challenges. This identifier is pseudonymous. We do not treat it as anonymous.

Do not send passwords, document numbers or health data via the form. At the free checking stage, the public website address is enough. We determine access to work separately.

3. Cele i podstawy prawne

• Checking, offer and arrangements before ordering. When you request a service or an offer for yourself, the basis is the actions taken at your request before concluding the contract, Art. 6 section 1 letter b GDPR.
• Other correspondence and contact with the company representative. The basis is the legally justified interest in providing answers and conducting business-related contacts, Art. 6 section 1 letter f GDPR.
• Order fulfillment. The basis is the performance of the contract, Art. 6 section 1 letter b GDPR. For the data of contact persons representing the company, we use Art. 6 section 1 letter f GDPR.
• Settlements. We store documentation required by law on the basis of a legal obligation, Art. 6 section 1 letter c GDPR.
• Security and Claims. Website protection, blocking mass mailings and establishing, pursuing or defending claims constitute a legitimate interest, Art. 6 section 1 letter f GDPR.

We do not collect separate marketing consent to respond to your request. Providing your telephone number means that you can contact us regarding your application, but you do not agree to unrelated offers.

4. Jak długo przechowujemy dane

• Inquiry without order: until the case is concluded, then removed from current correspondence, notes and working reports within 30 days. If the conversation ends without further arrangements, the deadline is counted from our last substantive response. A new message starting further arrangements extends the processing of the case.
• Order: by the implementation and settlement time. We keep the necessary documentation of the contract until the relevant limitation periods for claims expire. Accounting documents remain for the period required by tax regulations. This does not mean retaining all correspondence without restrictions.
• Complaint or dispute: we may retain the necessary part of the data until the case is concluded and the applicable limitation period expires. This exception applies to specific data needed for the claim.
• Server logs: up to 30 days from registration. The necessary fragment related to the identified incident may be retained for the duration of its investigation or investigation.
• Anti-spam records: the challenge is valid for 10 minutes, the shipping limit is 15 minutes. Expired files are deleted during the next form request or hourly housekeeping task. The files do not contain message content, name, telephone number or e-mail address.

Backups: Data deleted from current systems may remain in isolated copies for up to 30 days after deletion. We do not use the copies to handle ongoing queries. After restoring the system, we redo previous deletions. This means that an inquiry without an order may remain in the last copy for up to 60 days after the end of the conversation.

Simply sending a reply does not immediately delete the message. The 30-day rule also applies to sent messages, attachments, trash, and draft documents.

5. Odbiorcy i miejsce przetwarzania

The website, e-mail and backup copies are hosted in Poland, in the RemoteAdmin infrastructure. LENDO Andrzej Skrętowski remains the administrator of the form data.

Access may be granted to authorized persons operating the infrastructure and providers of server, e-mail, backup and technical support services to the extent necessary to perform them. When ordering, the accounting entity also receives the data required for settlement. We may disclose data to authorized bodies when required by law.

We do not sell data or share it for other people's marketing campaigns. In the configuration described, we do not envisage transferring data outside the European Economic Area. Anti-spam protection works on our infrastructure and does not send notifications to the external captcha operator.

6. Cookies, pamięć przeglądarki i antyspam

The website does not set cookies and does not use analytical or advertising tools. Fonts and anti-spam scripts are provided from the same site. We do not enable external user tracking.

When you choose to move a note from a guide to a ticket, we use the session storage of this browser tab, sessionStorage. It is only used to perform the action you have selected. The entry is deleted when read in the form. The transfer has a validity period of 30 minutes, and the memory itself is related to the card session. The content does not reach the website address or us before submitting the form. The document you downloaded or copied remains under your control.

ALTCHA verification requires JavaScript and a short calculation in your browser. Our server checks the result. We do not store it as a cookie. If verification does not work, use the email address on the contact page.

We store your selected currency in this tab’s sessionStorage to remember your choice while browsing. The record expires with the tab session. When you change domains, only the currency code is passed in the URL, without personal data.

7. Your rights

Under the conditions specified in the GDPR, you can access your data, request its rectification, deletion or restriction of processing. The right to transfer applies to data processed automatically under a contract. You may object to processing based on legitimate interest for reasons related to your particular situation.

A deletion request does not waive your obligation to retain documentation required by law or your ability to retain necessary data for claims. If such an exception occurs, we will explain it in the response. You have the right to lodge a complaint with President of the Personal Data Protection Office.

8. Dobrowolność i automatyczna weryfikacja

Providing data is voluntary. The form requires name and email to identify the submitter and respond. When checking or pricing, you also need the website address. Telephone number and company name are not required to submit an application.

We manually check pages and prepare responses. Anti-spam protection can automatically block suspicious or excessively frequent mailings. We do not make decisions regarding you that produce legal effects or similarly significantly affect you solely on the basis of automatic processing, within the meaning of Art. 22 GDPR.