Privacy policy

Effective from 24 September 2026. This is a translation; the Polish version is binding.

1. Who is responsible for your data

The controller of your personal data is Filip Jaszczyk, a sole trader operating under the name Meridian 21, ul. Łopuszańska 55B/156, 02-232 Warsaw, Poland, tax ID (NIP) 522-325-46-68 (“we”, “us”).

Data protection contact: kontakt@meridian21.pl.

2. What data we collect

Data from the contact form on the home page: full name, company and website, email address or phone number, monthly budget range, the type of help you are looking for and your message. Only the email or phone field is required.
Data from the call request form: first name, phone number, company or website, monthly budget range, the type of help you are looking for and, optionally, what you want to improve. Only your first name and phone number are required.
Data from email correspondence and phone calls, if you contact us directly.
Data from forms in our Facebook and Instagram ads (e.g. name, email, phone, company name and your answers to the form questions), if you fill them in.
Messages and comments you send us on Instagram or Facebook, together with your profile name.
Basic technical data (e.g. IP address, browser type), processed by our hosting provider on every visit to display and secure the website.

3. Why we process data and on what legal basis

Replying to your enquiry and preparing a proposal: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
Performing the contract, if we enter into one (Art. 6(1)(b) GDPR).
Handling correspondence, securing the website and establishing, exercising or defending legal claims: our legitimate interests (Art. 6(1)(f) GDPR).
Complying with our accounting and tax obligations, if we work together (Art. 6(1)(c) GDPR).
Measuring ad performance and showing ads to people who visited the website: only with your consent (Art. 6(1)(a) GDPR), see section 7.

Providing your data is voluntary, but we need at least a phone number or email address to reply to you.

4. Who we share data with

We do not sell data. We use providers that process it on our behalf:

Web3Forms: forwards form messages to our inbox,
Google (Google Workspace): the email service we use to send and receive messages,
Meta Platforms Ireland: our Instagram and Facebook profiles, ad forms and, if you consent, the Meta pixel on the website,
Cloudflare: website hosting and security,
Google Fonts: provides the typefaces used on the website (when the page loads, your browser connects to Google servers),
our accounting firm, if we enter into a contract.

Some of these providers may process data outside the European Economic Area, including in the USA. Such transfers are based on a European Commission adequacy decision (EU-US Data Privacy Framework) or on standard contractual clauses approved by the European Commission.

5. How long we keep data

Enquiries that did not lead to working together: up to 12 months from the last contact.
Contract-related data: for the duration of the contract, then until the limitation periods for claims expire and for the period required by tax law (usually 5 years from the end of the tax year).

6. Your rights

You have the right to access, rectify and erase your data, to restrict processing, to data portability and to object to processing based on our legitimate interests. To exercise these rights, write to kontakt@meridian21.pl.

You can also lodge a complaint with the Polish data protection authority, the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw).

We do not make decisions about you based solely on automated processing, including profiling, that produce legal or similarly significant effects. If you consent to the Meta pixel, Meta may use information about your visit to tailor ads (section 7).

7. Cookies and the Meta pixel

The website works without advertising cookies. Our hosting provider may set strictly necessary technical cookies to protect the site against abuse.

If you click “Accept” on the cookie bar, we enable the Meta pixel (Meta Platforms Ireland Ltd.). The pixel stores cookies and sends Meta information about your visit, e.g. the address of the page visited, browser and device data, and the fact that a form was sent (without its content). We use this to measure how well our ads perform and to show them to people who visited the website. The legal basis is your consent (Art. 6(1)(a) GDPR). Meta may combine this information with data from your Meta account and use it to tailor ads; to that extent we are joint controllers with Meta, and the details are described in Meta's privacy policy.

We save your choice in your browser so we don't ask again. You can change or withdraw your consent at any time: open cookie settings. Withdrawing consent does not affect the lawfulness of processing carried out before it was withdrawn.

8. Social media and advertising

We run profiles on Instagram and Facebook. If you message us, comment on a post or fill in a form in an ad, we use that data to reply and present our offer (Art. 6(1)(b) and (f) GDPR). Data from ad forms is retained for the same periods as enquiries from the website.

For profile statistics (Meta provides us with aggregated data on how visitors use our profiles), we are joint controllers with Meta Platforms Ireland Ltd. Meta has agreed to take primary responsibility for handling your rights in this respect; details can be found in Meta's privacy policy.

We may target ads at audiences selected in Meta's advertising tools (e.g. by location and interests) and, if you consent to the pixel, also at people who visited the website. We do not send the content of forms on this website to Meta.

9. Changes

We may update this policy when our services or the law change. The current version is always available on this page.