PL EN
← Back to app

Privacy Policy

How we protect your personal data in KilnStatistics β€” Virtual Studio

Last updated: April 1, 2026
πŸ”

Right of Access

You have the right to access your personal data

✏️

Right to Rectification

You can correct or update your data

πŸ—‘οΈ

Right to Erasure

You can request deletion of your data

πŸ“¦

Right to Portability

You can receive a copy of your data

β›”

Right to Object

You can object to processing

⏸️

Right to Restriction

You can request restriction of processing

Table of Contents

  1. Data Controller
  2. What Data We Collect
  3. Purposes and Legal Bases for Processing
  4. Data Retention Periods
  5. Data Sharing
  6. Your Rights
  7. Data Security
  8. Cookies and Tracking Technologies
  9. Mobile Application
  10. International Data Transfers
  11. Changes to Privacy Policy
  12. Contact
Art. 1

Data Controller

The controller of personal data of KilnStatistics Service users is:

Koncept-IT Piotr Wawrzyniak
46-320 Praszka, ul. Mickiewicza 3, Poland
E-mail: office@kilnstatistics.com

The Controller processes Users' personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and other applicable laws.

For all matters concerning personal data protection, please contact: office@kilnstatistics.com

Art. 2

What Data We Collect

2.1. Registration Data

2.2. Profile Data (provided voluntarily)

2.3. Usage Data

2.4. Technical Data (collected automatically)

We do not collect sensitive data as defined in Article 9 of the GDPR, such as health data, political views or biometric data.

Art. 3

Purposes and Legal Bases for Processing

PurposeLegal BasisData
Providing Service featuresArt. 6(1)(b) GDPR (contract performance)Registration and usage data
Email address verificationArt. 6(1)(b) GDPR (contract performance)Email address
Payment and license processingArt. 6(1)(b) GDPR (contract performance)Contact data, license data
Service-related communicationArt. 6(1)(b) GDPR (contract performance)Email address, name
License expiry notificationsArt. 6(1)(f) GDPR (legitimate interest)Email address, license data
Complaint handlingArt. 6(1)(c) GDPR (legal obligation)Identity data, service history
Security and fraud preventionArt. 6(1)(f) GDPR (legitimate interest)Technical data, logs
Legal complianceArt. 6(1)(c) GDPR (legal obligation)Financial data, identity data
Art. 4

Data Retention Periods

Data CategoryRetention Period
Account data (active account)For the duration of the account
Account data (after deletion)Up to 30 days after deletion (backups)
Financial and invoice data5 years from document issuance (tax obligation)
System and security logs90 days
Email correspondence3 years
Complaint data3 years from resolution
Verification and password reset tokens24 hours (verification) / 2 hours (password reset)

After the indicated periods, data is permanently deleted or anonymized.

Art. 5

Data Sharing

5.1. Data Processors

User personal data may be entrusted to the following categories of entities:

5.2. Public Authorities

Personal data may be disclosed to public authorities (e.g. law enforcement, courts) solely on the basis of an explicit legal provision and to the extent specified therein.

We never sell, rent or share User personal data with third parties for marketing purposes.

Art. 6

Your Rights

Under the GDPR, you have the following rights:

6.1. Right of Access (Art. 15 GDPR)

You have the right to obtain confirmation of whether your personal data is being processed, and if so, access to that data and information about the processing.

6.2. Right to Rectification (Art. 16 GDPR)

You have the right to request immediate rectification of inaccurate or completion of incomplete personal data.

6.3. Right to Erasure (Art. 17 GDPR)

You have the right to request erasure of your personal data in cases specified in the GDPR, including when the data is no longer necessary for the purposes for which it was collected.

6.4. Right to Restriction of Processing (Art. 18 GDPR)

You have the right to request restriction of processing of your data in certain situations.

6.5. Right to Data Portability (Art. 20 GDPR)

You have the right to receive your data in a structured, commonly used format (CSV, JSON) and transmit it to another controller.

6.6. Right to Object (Art. 21 GDPR)

You have the right to object to processing of your data based on the Controller's legitimate interest.

6.7. Right to Lodge a Complaint

You have the right to lodge a complaint with your national data protection authority. In Poland: President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl).

To exercise the above rights, contact us at: office@kilnstatistics.com. We will respond within 30 days.

Art. 7

Data Security

7.1. Technical Measures

7.2. Data Storage

Data is stored on servers within the European Union (OVH, France), meeting GDPR requirements.

7.3. Data Breaches

In the event of a data breach that may result in risk to User rights and freedoms, the Controller will notify the supervisory authority within 72 hours and affected Users without undue delay.

Art. 8

Cookies and Tracking Technologies

8.1. Technologies Used

KilnStatistics uses the following client-side data storage technologies:

8.2. No Tracking Cookies

KilnStatistics does not use analytical, advertising or third-party cookies (e.g. Google Analytics, Facebook Pixel). We do not track Users for marketing purposes.

8.3. Managing Cookies

You can manage cookie and localStorage settings through your browser settings. Disabling localStorage may prevent the Service from functioning correctly (inability to log in).

Art. 9

Mobile Application

9.1. Data Collected

The KilnStatistics mobile application (Android) collects and processes:

9.2. Synchronization

At the User's request, data from the mobile application can be synchronized with the KilnStatistics Service over an encrypted HTTPS connection.

9.3. App Permissions

None of the above permissions are used without explicit User action.

9.4. Local Storage

Data in the mobile application is stored locally in a SQLite database on the User's device. Uninstalling the application results in deletion of local data.

Art. 10

International Data Transfers

User data is principally stored on servers in the European Union. In exceptional cases (e.g. use of external technical services), data may be transferred to third countries, with appropriate safeguards such as:

For questions about international data transfers: office@kilnstatistics.com

Art. 11

Changes to Privacy Policy

The Controller reserves the right to amend this Privacy Policy. Users will be notified electronically with at least 14 days' notice of significant changes.

The current version of the Privacy Policy is always available at kilnstatistics.com/privacy_en.html.

Art. 12

Contact

The Controller responds to inquiries within 30 days of receipt. For complex matters, this period may be extended by a further 60 days, of which you will be informed.

Remember, you have the right to lodge a complaint with your national supervisory authority if you believe your data is being processed unlawfully.