Legal
Privacy Policy
How HEY Consult processes personal data in connection with this website and business enquiries.
Last updated: 3 September 2026
Data controller
The controller of personal data is:
HEY Consult, Krzysztof Przybyłoul. Głogowska 31/33
60-702 Poznań
Poland
NIP: PL8781219848
REGON: 870484530
christopher.przybylo@hey.com
In the remainder of this policy the business is referred to simply as “HEY Consult”.
What information may be processed
HEY Consult may process personal data provided voluntarily in connection with a business enquiry or subsequent correspondence, including:
- name
- company
- position
- business email address
- company location
- target market
- information contained in the enquiry
- subsequent business correspondence
The contact form on this website does not transmit or store the entered data on a HEY Consult server. It prepares an email in the visitor’s local email application. Personal data is therefore processed by HEY Consult once the visitor sends that email or otherwise makes contact.
Purposes and legal bases
A. Responding to enquiries and conducting business correspondence
Legal basis: Article 6(1)(f) GDPR — legitimate interest in responding to business enquiries and developing professional relationships.
B. Taking steps requested before entering into a contract, or performing a contract
Legal basis: Article 6(1)(b) GDPR.
C. Fulfilling legal, accounting or tax obligations where a business relationship is established
Legal basis: Article 6(1)(c) GDPR.
D. Establishing, exercising or defending legal claims where necessary
Legal basis: Article 6(1)(f) GDPR.
How long data is retained
Personal data is retained only for as long as necessary for the purpose for which it was collected.
Business correspondence may be retained for the duration of the business relationship and, where necessary, afterwards for the period required by applicable legal, tax or limitation rules.
Unsuccessful or preliminary enquiries may be deleted once they are no longer relevant to an ongoing or reasonably expected business relationship.
Who may receive personal data
Access may be provided, only where necessary, to service providers supporting HEY Consult, for example:
- email service providers
- website hosting and technical service providers
- accounting or professional advisers
- authorities, where disclosure is legally required
These providers may process personal data only within the scope necessary to provide their services or to meet legal requirements.
Transfers outside the European Economic Area
Some technology or email service providers may process data outside the European Economic Area. Where such transfers occur, HEY Consult relies on an appropriate lawful transfer mechanism required under the GDPR, such as an adequacy decision or appropriate contractual safeguards.
Your rights
Where applicable, individuals may request:
- access to personal data
- rectification
- erasure
- restriction of processing
- data portability
- objection to processing based on legitimate interests
Where processing is based on consent in a specific situation, that consent may be withdrawn at any time, without affecting processing that took place before withdrawal.
Requests can be made to christopher.przybylo@hey.com.
Right to complain
Individuals have the right to lodge a complaint with the competent data protection authority.
In Poland this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych — UODO).
Automated decision-making
HEY Consult does not use personal data submitted through this website for automated decision-making or profiling.
Changes to this policy
This policy may be updated when the website, the services offered or applicable legal requirements change. The date of the latest update is shown at the beginning of the policy.