Privacy Policy
This policy explains how personal data is processed when you visit the Meaning Makers website or contact us, including through the workshop enquiry form.
Data controller
The data controller is Wojciech Mendyka, conducting business as WOJCIECH MENDYKA 1337 CONSULTING, ul. Kluczborska 5/28, 01-461 Warszawa, Poland, tax ID (NIP) 8951860114. For personal data matters, write to wojtek@meaningmakers.eu.
Data submitted through the form
Required fields are your name, email address, company, at least one topic of interest and a description of your situation. You may optionally provide a phone number, approximate group size and preferred workshop format: in person, online, hybrid or to be decided.
Providing data is voluntary, but the form cannot be submitted without the required fields. Please do not include sensitive data or unnecessary personal data about other people.
The form also sends the page address and site language to validate the submission, without storing them in an enquiry database or the email body. Emails include the date and time in their standard headers.
How your enquiry reaches us
Your browser sends the form data directly to https://form.meaningmakers.eu/. Zenbox hosts the form, validates the submission and sends an email to wojtek@meaningmakers.eu. The email contains the selected topics, optional group size and workshop format, your message, and a signature with your name, company, email and optional phone number.
New enquiries do not pass through a Lovable form server or email delivery service, and their content is not stored in the Lovable database. Correspondence is stored in the mailbox. Earlier enquiry records in Lovable were not deleted as part of the migration and remain subject to the retention criteria below.
Lovable still hosts the website and may process technical visiting data separately from Zenbox handling the form.
Website visits and security
When you visit the site, infrastructure providers may process your IP address, visited URL, request date and time, device and browser information, and server response details. Depending on the service, this information may be processed to serve the request or stored in ordinary server logs.
Zenbox uses the IP address to protect the form from abuse. Submission limits use a pseudonymized identifier and submission times, without storing enquiry content or a plain IP address in this mechanism. Pseudonymized data remains personal data. Ordinary hosting and mail logs may independently contain IP addresses and other technical data.
Purposes and legal bases
We use contact details and enquiry content to respond, prepare an offer and follow up about the request. Submitting the form does not subscribe you to a newsletter and is not a basis for marketing communication.
Art. 6(1)(b) GDPR applies when the data subject requests steps before entering into their own contract or the data is necessary to perform that contract.
Art. 6(1)(f) GDPR applies to communication with company representatives and business correspondence, website operation and security, and, where specifically justified and necessary, the establishment, exercise or defence of claims. These are the controller’s legitimate interests.
Art. 6(1)(c) GDPR applies only to actual legal obligations, such as retaining documentation required by law after a contract is concluded.
Providers and recipients
Zenbox, currently provided by cyber_Folks S.A., handles form hosting, message delivery, email and the recipient mailbox, together with associated backups and logs. It processes the data needed to provide these services.
Lovable hosts the website and may process technical visiting data, including through infrastructure providers listed in its subprocessor directory. Earlier enquiry records from before the migration also remain in Lovable. Lovable no longer handles new enquiry content through the form database or notification delivery service.
Data may be made available to authorized persons or competent authorities where necessary to handle the matter or required by law.
Transfers outside the EEA
Technical visiting data processed through Lovable hosting may be processed outside the European Economic Area. Lovable’s disclosures describe safeguards such as Standard Contractual Clauses (SCCs) or adequacy decisions, depending on the recipient and transfer basis. Website data processing is not limited exclusively to the EEA.
Links to Lovable’s privacy policy and subprocessor directory are provided below. To request information about safeguards applicable to your data, including a copy where applicable, write to wojtek@meaningmakers.eu.
How long we keep data
We keep correspondence while handling the enquiry, preparing an offer and carrying out justified follow-up, until the enquiry is closed. Afterwards, we delete the data unless further retention is justified and necessary for a contract, an actual legal obligation, or the specific establishment, exercise or defence of claims.
In those cases, the scope and retention period depend on the purpose, applicable law and relevant time limits, including limitation periods. These criteria also cover earlier enquiry records. They do not mean that data is automatically deleted at the moment a matter is closed.
Technical logs and backups are retained according to hosting and mail provider rules. Data used to limit submissions is periodically cleaned up. For information about retention of data relating to you, write to wojtek@meaningmakers.eu.
Cookies, browser storage and analytics
Hosting infrastructure may use cookies needed for security and traffic handling, including __cf_bm and _dpl. These are separate from visitor analytics.
The site uses sessionStorage to store a reload timestamp following an error loading files from an earlier site version. This entry contains no form content and is not used for analytics. Fonts are served locally, without requests to Google Fonts.
Lovable Visitor analytics is disabled for this site. This does not disable necessary infrastructure cookies or the processing of technical data needed for website hosting and security.
Your rights
Subject to the conditions in the GDPR, you may request access, rectification, erasure or restriction of processing, and data portability where applicable. You may object to processing based on Art. 6(1)(f) GDPR. To exercise your rights, write to wojtek@meaningmakers.eu. You also have the right to lodge a complaint with the President of the Polish Data Protection Authority (UODO).
Automated decisions
We do not make decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects for you.