Privacy Policy of the Genearium website
Last updated: September 7, 2026
This Privacy Policy describes how personal data of users of the website available at genearium.pl (the "Website") is processed, in particular data submitted through the contact form.
1. Data Controller
The controller of personal data processed in connection with the use of the Website is:
Genearium – genealogical services Daria Szklarska Daria Szklarska, sole proprietor (registered under Polish CEIDG) Correspondence address: ul. Ceramiczna 10/5, 49-130 Tułowice, opolski county, Tułowice commune, Opolskie voivodeship, Poland Tax ID (NIP): 9910567429 Business registry number (REGON): 545177423 Contact e-mail for data protection matters: kontakt@genearium.pl
For all matters related to the processing of personal data and the exercise of data subject rights, please contact the Controller at the e-mail address above.
2. What data we collect and for what purpose
2.1 Data submitted through the contact form
The Website provides a contact form (the "Contact" section) through which a user may submit the following data to the Controller:
- full name,
- e-mail address,
- phone number (optional field),
- message content.
This data is processed in order to:
- respond to the inquiry submitted,
- establish contact and discuss potential genealogical research services,
- perform a contract, if one is concluded as a result of the correspondence.
Form data is transmitted through the Website's server-side function (a Next.js Route Handler) and sent as an e-mail message using the Resend service (Resend, Inc., USA), which acts as a data processor on behalf of the Controller. The message is delivered to the Controller's mailbox (kontakt@genearium.pl), and the e-mail address provided by the user is set as the reply-to address.
2.2 Technical data related to the Website's language version
The Website stores a small cookie (NEXT_LOCALE) in the user's browser, used solely to remember the selected interface language (Polish/English). See Section 7 for details.
2.3 Analytics and tracking
The Website does not use any analytics or tracking tools (such as Google Analytics, Meta Pixel, Hotjar, or similar), and does not perform profiling or behavioral advertising.
2.4 Newsletter
The Website currently does not offer a newsletter subscription and does not collect marketing consents. Should such functionality be introduced in the future, this Privacy Policy will be updated accordingly, and separate, voluntary consent will be collected from users.
3. Legal basis for processing (Art. 6 GDPR)
Personal data is processed on the basis of:
- Art. 6(1)(b) GDPR – processing is necessary to take steps at the request of the data subject prior to entering into a contract, or to perform a contract (applicable to responding to inquiries and providing genealogical research services);
- Art. 6(1)(f) GDPR – the Controller's legitimate interest in maintaining correspondence with users and retaining it in case it is needed to establish, exercise, or defend legal claims;
- Art. 6(1)(a) GDPR – to the extent processing is based on freely given consent (e.g., a future marketing consent – not currently applicable).
4. Recipients of data / data processors
Personal data may be entrusted to or shared with the following categories of recipients:
| Entity | Role | Scope of data | Location |
|---|---|---|---|
| Resend, Inc. | Provider of the e-mail delivery service for the contact form (data processor) | Contact form message content (name, e-mail, phone, message) | USA |
| Vercel Inc. | Website hosting provider (data processor) | Technical data related to the operation of the Website, including data transmitted as part of HTTP requests | USA |
Transfer of data outside the European Economic Area (EEA)
Because the Controller uses providers based in the USA (Resend, Vercel), personal data may be transferred outside the EEA. Such transfers are carried out with an adequate level of data protection, based on:
- Standard Contractual Clauses (SCC) included in the Data Processing Agreement (DPA) with Resend, Inc. (https://resend.com/legal/dpa, https://resend.com/security/gdpr),
- participation of relevant providers in the EU-U.S. Data Privacy Framework (including the UK Extension), where applicable,
- equivalent legal safeguards applied by Vercel Inc. as part of its GDPR compliance program.
The Controller does not transfer data to any third countries other than those indicated above and does not sell or share personal data with third parties for marketing purposes.
5. Data retention period
- Contact form data (name, e-mail, phone, message content) is retained for 12 months from the conclusion of the correspondence or the matter it concerned, after which it is permanently deleted, unless a longer retention period is necessary to establish, exercise, or defend legal claims, or is required under applicable law (e.g., tax law, in the event a contract is concluded and an invoice is issued).
- The
NEXT_LOCALEcookie is retained according to the expiration period set by the library responsible for handling the Website's language version (next-intl) – see Section 7.
6. Data subject rights
Under the GDPR, data subjects have the following rights:
- the right of access to their data (Art. 15 GDPR),
- the right to rectification of their data (Art. 16 GDPR),
- the right to erasure ("right to be forgotten", Art. 17 GDPR),
- the right to restriction of processing (Art. 18 GDPR),
- the right to data portability (Art. 20 GDPR),
- the right to object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR),
- the right to withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing carried out before its withdrawal,
- the right to lodge a complaint with a supervisory authority – in Poland, the President of the Personal Data Protection Office (PUODO), ul. Stawki 2, 00-193 Warsaw, Poland.
To exercise the above rights, please contact: kontakt@genearium.pl.
Providing data through the contact form is voluntary but necessary to receive a response to the submitted inquiry.
7. Cookies information
The Website uses only one technical (essential) cookie:
| Cookie name | Purpose | Nature | Requires consent? |
|---|---|---|---|
NEXT_LOCALE | Remembers the user's selected language version of the Website (Polish/English) | Technical / functional | No – it is necessary for the language selection feature to work properly |
The Website does not use cookies for analytics, statistics, marketing, or user profiling purposes. No third-party tracking tools are used.
Users may block or delete this cookie at any time via their browser settings; however, doing so may result in the selected language not being remembered on subsequent visits.
8. Contact details for data protection matters
For all matters related to the protection of personal data, including the exercise of the rights listed in Section 6, please contact:
Genearium – genealogical services Daria Szklarska E-mail: kontakt@genearium.pl Correspondence address: ul. Ceramiczna 10/5, 49-130 Tułowice, Poland
Changes to this Privacy Policy
The Controller reserves the right to amend this Privacy Policy, in particular in the event of changes to the Website's functionality, changes of service providers, or changes to applicable law. The current version of the Policy is always available on the Website.