Server logs may include IP address, request time, requested URL, browser or device information, referrer information and technical or security events.
Privacy
Privacy Policy
This policy explains what personal data may be processed when you use funkymedia.eu, contact FunkyMEDIA or use website features such as the free audit.
Last updated: 20 September 2026
IN SHORT
- We do not sell personal data.
- We do not require marketing consent to answer an enquiry.
- Non-essential tracking should not be activated without the required notice and consent.
- You can exercise GDPR rights through the Privacy contact button below.
01 · Controller
Who is responsible for your data?
The controller of personal data processed in connection with funkymedia.eu is:
BIGTECH IT SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ
ul. Mikołaja Kopernika 64A/1, 90-553 Łódź, Poland
KRS 0001188079 · NIP 7272891548 · REGON 54242432900000
FunkyMEDIA is the brand presented on the website. BIGTECH IT sp. z o.o. is the legal entity acting as data controller for the processing described in this policy.
Privacy contact →02 · Data we process
Only the data needed for a specific purpose.
The exact data depends on how you use the website.
If you contact FunkyMEDIA, we may process your name, business contact details, company, website, message and any other information you voluntarily include.
The audit may use the domain or URL you submit, publicly available website content, technical findings and generated audit results. If an email address is requested for delivery of a report, it is used for that requested purpose unless a separate legal basis applies.
Where relevant to an audit or service enquiry, we may review publicly available information about a business, brand, website or professional profile. We do not ask users to submit special-category personal data.
Please do not send sensitive personal data unless it is genuinely necessary.
In particular, do not send health data, government identifiers, passwords or unrelated confidential information through ordinary email.
03 · Purposes & legal bases
Why we process personal data.
We use a legal basis appropriate to the specific processing purpose. Not every basis below applies to every visitor.
PurposeTypical dataLegal basis
Responding to enquiries and taking steps requested before a contract
Contact details, company, website, message
GDPR Art. 6(1)(b), and where appropriate Art. 6(1)(f)
Providing a requested audit or report
Domain / URL, public website data, audit results, delivery details where requested
GDPR Art. 6(1)(b) and/or Art. 6(1)(f)
Operating, securing and troubleshooting the website
Technical logs, IP information, security events
GDPR Art. 6(1)(f) — legitimate interest in secure and reliable operation
Managing contracts, accounting and legal obligations
Business and transaction records where applicable
GDPR Art. 6(1)(b) and Art. 6(1)(c)
Non-essential cookies, analytics or marketing technologies, if introduced
Data described in the applicable cookie / consent notice
Consent where required — GDPR Art. 6(1)(a) and applicable ePrivacy rules
Where we rely on legitimate interests, those interests may include maintaining website security, preventing abuse, handling ordinary business correspondence, documenting requests and improving the reliability of our services. We assess those interests against the rights and reasonable expectations of the person concerned.
04 · Free audit
The audit is a website analysis, not a legal decision about you.
When you submit a website or domain, the audit may analyse public website information and technical or semantic signals in order to produce a visibility assessment.
The audit may produce scores, findings or recommendations automatically. These results are informational and do not constitute automated decision-making that produces legal effects or similarly significant effects concerning an individual.
If the audit asks for an email address to deliver a requested report, that address should not be used for unrelated marketing unless there is a separate legal basis, such as valid consent.
Public website content may contain names or professional information. We aim to process only what is relevant to the requested business / website analysis.
05 · Recipients
Who may process data for us.
Personal data may be made available only where necessary to categories of recipients such as:
- hosting, server and infrastructure providers;
- email and communication service providers;
- IT maintenance and security providers;
- professional advisers such as accountants or legal advisers where needed;
- public authorities where disclosure is required by law.
Service providers acting on our behalf should process personal data only on documented instructions and under appropriate contractual and security safeguards where required by law.
We do not sell personal data to advertisers or data brokers.
06 · International transfers
Transfers outside the EEA require a lawful mechanism.
Some technology providers may process data outside the European Economic Area. Where this happens and a transfer mechanism is required, we use safeguards recognised by applicable data-protection law, such as an adequacy decision, Standard Contractual Clauses or another lawful mechanism.
Where relevant, you may request information about the transfer mechanism used for your personal data through the Privacy contact button.
07 · Retention
We keep data only for as long as there is a reason to keep it.
Because different data serves different purposes, one universal retention period would be misleading.
Website & security logs
Kept for the period reasonably required to operate, diagnose and secure the service. Logs connected with an incident may be retained longer while the incident is investigated or documented.
Contact enquiries
Kept while the enquiry is active and afterwards where reasonably necessary to document the correspondence, protect legal claims or continue a business relationship.
Audit information
Kept only as long as required to provide the requested audit, maintain the relevant result or support a related enquiry, subject to technical and legal needs.
Contract and accounting records
Kept for periods required by applicable accounting, tax, corporate and limitation rules.
When the purpose ends and no legal basis for continued storage remains, data should be deleted or irreversibly anonymised.
08 · Your GDPR rights
You can ask what data we have and what we are doing with it.
Depending on the circumstances and legal basis, you may exercise the following rights.
AccessAsk whether we process your data and obtain a copy where applicable.
RectificationCorrect inaccurate or incomplete personal data.
ErasureRequest deletion where the legal conditions are met.
RestrictionRequest restricted processing in the situations provided by the GDPR.
PortabilityReceive or transfer data where the right applies.
ObjectionObject to processing based on legitimate interests, subject to applicable GDPR conditions.
Withdraw consentWithdraw consent at any time where consent is the processing basis, without affecting earlier lawful processing.
ComplaintLodge a complaint with the competent data-protection authority.
To exercise a privacy right
Privacy contact →
Use the Privacy contact button. We may need to verify identity before disclosing or changing personal data.
09 · Cookies & tracking
Privacy and cookies are related, but not the same thing.
Technical storage that is strictly necessary to provide a service may be used without marketing consent where permitted by law. Non-essential analytics, advertising or similar tracking technologies should be activated only after the required information and consent mechanism are in place.
The current website should not be treated as permission to introduce new advertising pixels, behavioural tracking, newsletter tracking or similar technologies without reviewing this policy and the Cookie Policy first.
Read the Cookie Policy →10 · Security
Reasonable safeguards, not impossible promises.
We use organisational and technical measures intended to protect personal data against unauthorised access, loss, alteration or disclosure. Measures should be appropriate to the nature of the processing and the risks involved.
No internet service can promise absolute security. If a personal-data breach occurs, we will assess it and take the notification or communication steps required by applicable law.
11 · External websites
When you leave funkymedia.eu, another privacy policy may apply.
The website links to third-party services and profiles, including social networks, review platforms and other FunkyMEDIA websites. When you follow an external link, the destination operator may process data under its own rules.
This Privacy Policy does not control independent third-party websites.
12 · Changes to this policy
The policy must change when the data flow changes.
We may update this policy when the website, legal requirements or data-processing practices change. The current version is identified by the “Last updated” date at the top of this page.
Before introducing materially new processing — for example a newsletter, CRM form, advertising pixels, behavioural analytics, account system or new third-party tracking — the relevant privacy information and, where required, consent mechanisms should be updated first.
Privacy request
You do not need a special form to exercise your rights.
Use the privacy contact button and tell us what you need.