Privacy policy

Effective from 30 September 2026.

Data controller

The controller of personal data is TORRE Sp. z o.o., registered office in Kraków, ul. Arcybiskupa Zygmunta Szczęsnego Felińskiego 22/22, 31-236 Kraków, Poland, entered in the National Court Register under KRS number 0001230565, NIP 9452327939, REGON 544312706. For data protection matters, please write to kontakt@torre.pl or to the registered office address.

What data we process and why

  • Contact form and crisis requests: name, organisation, email address, phone and message, to respond to your enquiry and, where relevant, prepare a proposal.
  • Newsletter and Reputation Barometer: email address, to send the newsletter and the report.
  • Job applications: data contained in your CV and message, for recruitment purposes.

The crisis readiness test, crisis simulator, statement generator and stakeholder map run entirely in your browser. Nothing you enter is sent or stored anywhere.

Legal basis

  • Article 6(1)(a) GDPR: consent (forms, newsletter, recruitment),
  • Article 6(1)(b) GDPR: steps taken at your request prior to entering into a contract,
  • Article 6(1)(f) GDPR: our legitimate interest in handling correspondence and establishing or defending legal claims.

Retention

We keep correspondence data for no longer than 12 months after the last contact, unless a contract is concluded, in which case we keep it for the period required by law. Newsletter email addresses are kept until you unsubscribe. Recruitment data is kept for up to 12 months.

Recipients

Data may be entrusted to providers of hosting, email, newsletter delivery and IT services acting on our behalf, solely under data processing agreements and to the extent necessary. We do not sell personal data.

Your rights

You have the right to access, rectify and erase your data, to restrict processing, to data portability, to object, and to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal. You may also lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.

Cookies and analytics

This website does not use cookies or analytics tools. Images are loaded from Unsplash (images.unsplash.com), which means your device's IP address is shared with that service to display them. The LinkedIn share button only shares data with LinkedIn when clicked. To make the crisis card available offline, your browser stores a few files of this site locally.

Voluntary provision of data

Providing data is voluntary but necessary for us to reply, send the newsletter or consider an application. Data is not used for automated decision-making or profiling.