PRIVACY POLICY
Last updated: 24/09/2026
This Privacy Policy explains how Good Bad Data, operating as a sole trader under the laws of Poland, processes personal data in connection with the website and the provision of Project Documentation & Reporting services.
1. DATA CONTROLLER
The data controller is:
Good Bad Data Monika Fasula
Business name: Good Bad Data
Registered address: Nowogrodzka 64/43 02-014 Warsaw, Poland
Tax identification number (NIP): 5542876464
Email: direct@goodbaddata.com
For questions regarding personal data, please contact:
2. WHAT PERSONAL DATA WE PROCESS
Depending on how you interact with us, we may process:
name and surname;
business position and company details;
company name;
business email address;
telephone number;
billing and invoicing information;
information included in enquiries and correspondence;
project-related information provided by the client;
information necessary to prepare project documentation and reports;
technical information relating to website use;
information contained in documents or files provided for the purpose of performing the service.
We process only data that is necessary for the relevant purpose.
3. PURPOSES AND LEGAL BASES
Personal data may be processed for the following purposes:
Contract performance
We process personal data when necessary to prepare quotations, enter into contracts and provide requested services.
Communication
We may process contact details to respond to enquiries, communicate with clients and coordinate project activities.
Accounting and legal obligations
We process information necessary to issue invoices, maintain accounting records and comply with applicable legal obligations.
Legitimate interests
Where applicable, we may process data to protect our business interests, establish or defend legal claims, maintain business records and ensure the security of our services.
Marketing
Personal data may be used for direct marketing only where a lawful basis exists under applicable data protection and electronic communications legislation.
4. PROJECT DATA
As part of Project Documentation & Reporting services, clients may provide information relating to projects, employees, suppliers, production processes, schedules, technical documentation or other business activities.
Such information may contain personal data.
Where we process personal data on behalf of a client, the client may act as the data controller and we may act as a data processor. In such cases, processing will be carried out only in accordance with the client's documented instructions and, where required, under a separate Data Processing Agreement.
5. DATA RECIPIENTS
Personal data may be disclosed only where necessary and may be shared with:
accounting and tax service providers;
IT and hosting providers;
email and communication service providers;
cloud storage providers;
professional advisers;
public authorities where required by law;
subcontractors or service providers where necessary to perform the agreed services.
Where third parties process personal data on our behalf, appropriate contractual and organisational safeguards are applied.
6. INTERNATIONAL DATA TRANSFERS
Some service providers may process personal data outside the European Economic Area.
Where such a transfer occurs, we will take appropriate measures required by applicable data protection law to ensure that personal data remains adequately protected.
7. DATA RETENTION
Personal data is retained only for as long as necessary for the relevant purpose.
Data relating to contracts, invoices and accounting records may be retained for the period required by applicable law.
Project-related information is retained for the period necessary to perform the service, meet contractual obligations, resolve disputes and comply with legal requirements.
8. DATA SECURITY
We apply appropriate technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration or disclosure.
The level of security measures is adapted to the nature and risk of the processing.
9. YOUR RIGHTS
Subject to applicable law, you may have the right to:
access your personal data;
request correction of inaccurate data;
request deletion of personal data;
request restriction of processing;
object to certain processing;
request data portability where applicable;
withdraw consent where processing is based on consent;
lodge a complaint with the competent data protection supervisory authority.
Requests may be submitted to:
direct@goodbaddata.com
10. COOKIES
The website may use cookies and similar technologies necessary for its operation.
Where analytics, marketing or other non-essential cookies are used, the website may request consent where required by applicable law.
11. CHANGES TO THIS POLICY
This Privacy Policy may be updated when necessary to reflect changes in our services, technology or applicable legal requirements.
The current version will always be published on this website.
12. CONTACT
For any questions concerning this Privacy Policy or the processing of personal data, please contact:
Good Bad Data
direct@goodbaddata.com
Nowogrodzka 64/43
02-014 Warszawa