PRIVACY
Clear rules for contact.
The first message is used to understand your request. General information and a way to reply are enough; providing data is voluntary and the required scope depends on the contact method you choose.
Service interest list and offers
Joining the interest list requires your email, selected service and contact language. You confirm the address using an email link. Joining is not a reservation, order or newsletter subscription. We use the information to respond to your request for contact about this service. Unconfirmed addresses are removed after 48 hours; interest without an order expires after 180 days. You can leave earlier using the link in your email. If you accept an offer, we collect order and billing information; ING processes payment. Order data follows the transaction-record retention rules described below.
Controller and contact
The data controller is Aleksander Wiśniewski trading as Aleksander Wiśniewski - Best Solutions, NIP 5811873121, REGON 380210510, ul. Kaszubska 26/3, 84-200 Wejherowo, Poland. For privacy questions or rights requests, email biuro@qes.solutions or call +48 789 819 057.
Correspondence: data and purpose
You can contact me by phone, email or the form. A callback request includes your phone number and optionally your name, topic and preferred time. A message requires a topic, email address and text; your name and phone are optional. The request time, language and source page are also included when handling the enquiry. The service configurator also records selected options, the enquiry reference and revisions, an estimated price and any organisation or meeting details you choose to provide. Enquiries are recorded in a private hosting register and forwarded to the office mailbox. Details are used to respond and agree the next steps. Providing data is voluntary; a phone number or email is needed for your chosen reply method. Do not provide identity documents, PINs or access details. An enquiry does not subscribe you to a newsletter.
Legal bases
Enquiries about a service for yourself are handled as steps taken at your request before entering into a contract — Article 6(1)(b) GDPR. Other correspondence and website protection rely on the controller’s legitimate interests in responding and maintaining security — Article 6(1)(f) GDPR.
Providers and recipients
The website uses Hostinger hosting. Email and form handling rely on external infrastructure required to process messages, and forms are protected by Cloudflare Turnstile, which processes technical device and request data to distinguish legitimate users from automated traffic. Infrastructure providers and authorised subprocessors may process data only as needed to provide and secure those services. Data required for a Certum process is transferred only at the appropriate fulfilment stage, not through the ordinary first-contact form.
Retention
Correspondence is retained for as long as needed to handle the enquiry. If it leads to a service, data required to perform that service is handled in a separate process. Longer retention may apply to data needed for legal obligations or establishing, exercising or defending claims, for the duration of those obligations or the applicable limitation period. Technical data is subject to providers’ log and backup cycles.
Technical data and cookies
The server may record IP addresses, request times, requested addresses, server responses and browser information to operate and protect the website. The application does not store form contents in logs or cookies. The Polish checkout may temporarily keep an unfinished submission in the current browser tab and removes it after successful submission. Enquiries and orders are stored in the protected server area. Form protection stores cryptographic hashes and short-lived counters, without enquiry contents or raw IP addresses. The website uses no advertising or analytics tools. Fonts and images are served from the website hosting.
Transfers outside the EEA
Providers may use subprocessors in other countries. Transfers outside the European Economic Area use safeguards recognised by the GDPR, such as adequacy decisions or standard contractual clauses. Provider details and safeguards are described in the documents below; you can also ask the controller for information about your data.
Your rights
You may request access, rectification, erasure or restriction and, where legally applicable, data portability. You may object to processing based on legitimate interests on grounds relating to your situation. You may complain to the Polish data protection authority (UODO). Contact data is not used for solely automated decisions or profiling.
Travel estimate
The calculator sends only a postcode to the website server. Zippopotam.us (GeoNames data) identifies the locality, and OSRM / OpenStreetMap calculates travel from Gdynia to the approximate postcode location. Map providers do not receive your email, phone, full address or your browser IP directly. Route results are temporarily cached on the hosting server. We confirm the final price for the exact meeting location.
Private request page and payments
The email link grants access to your request for 30 days. Do not share it. The register includes offer revisions, acceptance, agreed timing, verified payments and service history. You may upload a transfer receipt privately (PDF, JPG or PNG, up to 5 MB); include only this transaction, without your balance or other transactions. Files are not public, are available only to the authorised operator and are removed from the active register after 90 days. Backups follow hosting retention cycles. A file alone does not verify receipt of funds. Data is used to agree and perform the service; payment records may be retained longer under the rules above.
Availability and request handling
We check availability through Cal.com using connected Google calendars and other bookings. To hold time, we send the request reference, service timing and QES office contact; we do not send transfer receipts or enquiry text. Customers see only proposals for their own request. The operator panel uses an essential session cookie and a login code sent to the office.
ING Pay payments
When you select ING Pay, the data necessary to process the transaction, particularly the order reference, amount, currency and payer contact, is shared with ING Bank Śląski S.A., based in Katowice, Poland, to perform the contract and settle payment. Card details or BLIK authorisation are entered only in the payment system, not in a QES form.
Documents and update
Version dated 20 September 2026, covering the website, email contact, form messages and callback requests.