Privacy Policy

Effective date: 28 April 2026  
Last updated: 28 April 2026

Who we are (Controller)

This website (handshakelabs.net) is currently operated by Pawel Sikorski, acting as an individual, as part of a pre‑incorporation project for a future business. Until the business is formally incorporated, Pawel Sikorski is the controller responsible for the processing of personal data described in this Privacy Policy.

Contact: psikorski@handshakelabs.net

Future change

If and when a company is incorporated and assumes operation of this website, this Privacy Policy will be updated to reflect the new controller and any changes in processing activities.

What data we collect

We only collect personal data that you voluntarily submit via the Contact Form on this website.

Depending on what you enter, this may include:
- Name (if provided)
- Email address
- Message content and any information you include in the message
- Technical metadata connected with message delivery (e.g., date/time of submission)

We do not intentionally collect special categories of data (e.g., health data). Please do not include such information in your message.

Why we use your data (purposes)

We use your contact form data only to:
- Receive and respond to your inquiry
- Communicate with you about the subject of your message
- Maintain basic records of correspondence for organizational and security purposes (e.g., to handle follow-ups or demonstrate that we responded)

Legal basis for processing

We process contact form data on the basis of our legitimate interests in:
- operating and maintaining a website,
- receiving and responding to inquiries, and
- ensuring basic communication continuity and security.

If your inquiry is aimed at taking steps prior to entering into a contract (e.g., requesting a quote), the processing may also be considered necessary to respond to your request.

Is providing the data required?

Providing your data is voluntary, but if you do not provide at least an email address (and the content of your request), we may not be able to respond.

Who we share your data with (recipients)

We do not sell your data and we do not share it for advertising purposes.

Your message may be processed by service providers that help us operate the website and communications, such as:
- website platform/hosting provider(s),
- email service provider(s),
- IT and security providers (if used to protect or maintain the website).

These providers act as processors or independent controllers depending on the service and contractual setup.

International data transfers (outside the EEA)

Depending on the location of our service providers, your personal data may be transferred to and processed in countries outside the European Economic Area (EEA).

Where such transfers occur, we take steps to ensure an appropriate level of protection, for example by relying on:
- an adequacy decision (where applicable), or
- appropriate safeguards such as standard contractual clauses.

How long we keep your data (retention)

We keep contact form submissions only for as long as necessary to handle your request and any follow-up correspondence.

As a baseline, we aim to delete or anonymize correspondence within 12 months after the last interaction, unless:
- we need to keep it longer to establish, exercise, or defend legal claims, or
- a longer retention period is required by law.

How we protect your data

We apply reasonable technical and organizational measures to protect personal data against unauthorized access, loss, or misuse. However, no method of transmission over the Internet is fully secure.

Your rights

Subject to applicable law, you have the right to:
- request access to your personal data,
- request rectification of inaccurate data,
- request erasure,
- request restriction of processing,
- object to processing based on legitimate interests,
- request data portability (where applicable).

To exercise your rights, contact us at psikorski@handshakelabs.co. We may ask for information to verify your identity before fulfilling your request.

Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. In Poland, this is:

President of the Personal Data Protection Office (UODO)  
ul. Stanisława Moniuszki 1A, 00-014 Warsaw, Poland  
More information / contact: https://uodo.gov.pl/en/484/874

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top indicates when this policy was last revised.