GHSH Privacy Policy
This Privacy Policy describes how the GHSH service collects, processes, and protects users' personal data. This document is for informational purposes only and does not constitute legal advice. We encourage you to read it carefully and contact us if you have any questions about the processing of your data.

Last updated: [DATA_AKTUALIZACJI — do uzupełnienia przez administratora]
What data we collect and for what purpose
Depending on how you use the service, we may collect different categories of personal data. Below we present the main scenarios for collecting such data along with the corresponding processing purposes.
1
Government forms
Data provided in forms used to deliver administrative or regulatory services — processed to perform the service or fulfill a legal obligation.
2
Partner forms
Contact and organizational data shared by business partners — processed to establish and maintain cooperation and communication.
3
Newsletter
Email address and optional profile data — collected based on consent given during signup, for the purpose of sending industry information and service updates.
4
Site analytics
Anonymous or pseudonymous data about activity on the site (e.g., visited pages, time spent) — collected to improve service quality and tailor content to users' needs.
Legal basis for processing
Personal data is processed only when there is an appropriate legal basis. Depending on the nature of the processing, this may include:
User consent
Voluntary, informed consent given, for example, when signing up for a newsletter or accepting analytics cookies.
Performance of a contract or pre-contractual steps
Processing necessary to carry out a service requested by a user or partner.
Legal obligation
Laws may require the collection or retention of certain data.
Legitimate interest of the controller
To the extent that it does not override the rights and freedoms of the data subjects — for example, for site security purposes.
Legal notice
This document contains general information about the legal bases for data processing. Detailed references to applicable regulations (e.g., GDPR, national laws) should be reviewed by a lawyer before publication.
[PLACEHOLDER — weryfikacja prawna wymagana]
Data retention period
We retain personal data for as long as necessary to fulfill the purposes for which it was collected. After that period, the data is deleted or anonymized unless legal regulations require further retention.
Form data
Until the matter is closed or the legal obligation expires — [PLACEHOLDER: podać konkretny okres]
Newsletter
Until consent is withdrawn or the user unsubscribes.
Analytics data
According to the policy of the analytics tool used — usually from several months to 2 years.
Data recipients
In certain cases, users' personal data may be shared with third parties that support the operation of the service. This is done only to the extent necessary to achieve the given purpose and on the basis of appropriate data processing agreements or other relevant legal instruments.
Hosting and infrastructure providers
The service uses external hosting services that provide data storage and platform continuity.
Communication tools
For newsletter management or correspondence — external email marketing platform providers operating under a data processing agreement.
Analytics tool providers
Traffic data on the site may be transferred to analytics tools (e.g., [PLACEHOLDER: tool name]) in accordance with their own privacy policies.
Public authorities
Data may be transferred to public authorities only on the basis of applicable legal provisions and to the extent required by them.
User rights
Every person whose data is processed is entitled to a number of rights related to the processing of personal data. Below we present the most important ones. To exercise any of these rights, please contact us at the address indicated in the section below.
1
Right of access
You may request information about what data we process about you and for what purpose.
2
Right to rectification
You have the right to request correction of data that is inaccurate or incomplete.
3
Right to erasure
In certain cases, you may request deletion of your data ("right to be forgotten").
4
Right to restriction
You may request restriction of data processing in situations provided for by law.
5
Right to data portability
You have the right to receive your data in a structured format and transfer it to another controller.
6
Right to object
You may object to processing based on the controller's legitimate interest.
Cookies and analytics
What are cookies?
Cookies are small text files stored on the user's device when visiting the service. They are used to recognize the browser, remember preferences, and analyze user behavior on the site.
GHSH may use the following categories of cookies:
  • Necessary — required for the proper operation of the service
  • Analytical — enable the collection of statistical traffic data
  • Functional — remember user preferences
Cookie management
The user has the right to change cookie settings at any time through their internet browser settings or — if the service provides such a function — a consent management panel (CMP).
Disabling necessary cookies may prevent some features of the service from functioning properly. Analytical and functional cookies may be disabled without affecting the availability of core services.
[PLACEHOLDER: provide the name of the CMP tool, if used]
Privacy contact
The controller of personal data is GHSH. If you have questions about the processing of personal data, wish to exercise your rights, or wish to raise concerns, please contact:
Email address
[EMAIL_GOV] — dedicated email address for personal data protection matters
Mailing address
[PLACEHOLDER: full name and address of the data controller — for legal review]
Data Protection Officer
[PLACEHOLDER: DPO details, if required or appointed]
We respond to submitted requests without undue delay, and no later than within 30 days of receiving them, unless the complexity of the matter requires an extension of this deadline.

Legal disclaimer
This Privacy Policy is for informational purposes only and does not constitute legal advice. The content of this document should be reviewed by a qualified lawyer before final publication, particularly with respect to compliance with applicable Polish and EU law (GDPR).

[PLACEHOLDER: legal review date]