Privacy policy — VERTIVO Effective 11 September 2026 · Version 1.0 1. Data controller and contact The controller of data provided to VERTIVO in connection with this website and correspondence is VERTIVO sp. z o.o., ul. Grunwaldzka 56 lok. 113, 80-241 Gdańsk. Branch office: ul. Paderewskiego 6 lok. 14, 83-200 Starogard Gdański. NIP: 9571192084 · REGON: 542565159 · KRS: 0001190784. Gdańsk-Północ District Court in Gdańsk, 7th Commercial Division of the National Court Register. For personal data enquiries, write to biuro@vertivo.com.pl (mailto:biuro@vertivo.com.pl) or our registered office address. Phone: +48 455 511 174 (tel:+48455511174). MENTOR, CRAFT, STUDIO and SCRIPT COLLECTIVE are divisions of the same company. 2. Scope This policy covers the VERTIVO information website currently available at vertivo.com.pl and contact with the company. The website presents divisions, projects, artists and publications. It has no checkout, does not process payments and does not create VERTIVO customer accounts. The VERTIVO Platform at ai.vertivo.com.pl and external sellers provide their own information about data processing for purchases. The sign-in required by private Sites hosting is a platform operator feature, not a VERTIVO customer account. 3. Data and purposes of processing Email and telephone contact: we process the name or company name, contact details, enquiry text and materials you voluntarily provide. Depending on the division, these may include class preferences or information about an order, artistic project or publication. We respond to general enquiries and communicate with company representatives on the basis of Article 6(1)(f) GDPR — our legitimate interest in handling correspondence. If you request an offer or pre-contractual steps on your own behalf, the basis is Article 6(1)(b) GDPR. Data needed for complaints and legal obligations is processed under Article 6(1)(c) GDPR, and evidence necessary in relation to claims under Article 6(1)(f) GDPR. Connecting to the website: the infrastructure receives technical data such as your IP address, request time, visited URL, browser information and errors. For VERTIVO, the purpose is to provide and secure the website and identify failures, on the basis of Article 6(1)(f) GDPR. We do not use this data for advertising profiling. Providing data in correspondence is voluntary. Without a reply address or information about your enquiry, we may be unable to respond. Do not send sensitive data or other people’s data unless it is necessary for the matter. 4. How forms work Forms do not send data to a VERTIVO server. They create a message draft in your browser. Its contents reach our inbox only when you send the email yourself. Clicking an email address opens your mail application; it does not send a message. Selecting a file in the contact form only provides its name and size. The file is not uploaded or automatically attached to an email. To send it to us, attach it yourself in your email application. The website code does not save drafts in localStorage or sessionStorage. The copy command writes text to your device’s clipboard. Your browser or operating system may restore form fields and retain clipboard history according to your settings. 5. Recipients and external services Authorised staff handling the relevant division and email, IT support and hosting providers may access correspondence as necessary to perform their tasks. Where needed, data may be shared with advisers handling claims or authorities legally entitled to receive it. We do not sell contact data. The website runs on Sites/OpenAI infrastructure. The operator also manages access to the private version. Its own services, technical data and accounts are covered by the OpenAI privacy policy (https://openai.com/policies/eu-privacy-policy/). The Montserrat font is downloaded from fonts.googleapis.com and fonts.gstatic.com. Your browser connects to Google for this purpose, sharing connection data including your IP address and browser information. Details are set out in the Google privacy policy (https://policies.google.com/privacy?hl=pl). Maps, music services, social media and shops are external links. We do not embed their feeds. Once you visit an external website, its operator’s rules apply. The Cormorant Garamond font is served directly by the VERTIVO website. 6. Processing outside the EEA International providers’ infrastructure may process data outside the European Economic Area, including in the USA. The linked OpenAI and Google policies describe processing locations and transfer mechanisms, including adequacy decisions or standard contractual clauses, depending on the service and circumstances. Information about recipients in a specific matter and safeguards for transfers by VERTIVO is available at biuro@vertivo.com.pl. This document does not mean that all data is stored exclusively in Poland or the EU. 7. How long we retain data We retain correspondence for as long as needed to clarify and conclude the matter. Where it is evidence relating to a contract, complaint or dispute, relevant data may be kept until the applicable limitation period expires or proceedings end. Documents subject to a statutory retention obligation are kept for the period required by law. Technical data is needed for handling connections, ensuring security and investigating a specific failure or incident. Retention periods for infrastructure operators’ own services and platform accounts follow their rules. You can ask the controller about the period for a particular data category. 8. Your rights Under the conditions set out in the GDPR, you may request access to your data, a copy, rectification, erasure or restriction of processing. Data portability applies to data processed automatically on the basis of consent or a contract. You may object to processing based on legitimate interests on grounds relating to your particular situation. Where processing is based on consent, you may withdraw it without affecting the lawfulness of earlier processing. Send your request to biuro@vertivo.com.pl. We respond without undue delay, generally within one month. In cases allowed by the GDPR, this period may be extended, and we will inform you. Where justified, we may request information needed to verify your identity. You have the right to lodge a complaint with the President of the Polish Personal Data Protection Office: uodo.gov.pl (https://uodo.gov.pl/). Information about your rights is also available on the European Commission website (https://commission.europa.eu/law/law-topic/data-protection/information-individuals_en). 9. Analytics, marketing and changes We have not implemented marketing analytics, advertising pixels, a newsletter or automatic social media imports in the website code. VERTIVO does not make decisions with legal effects based solely on automated processing of data from this website. Browser technologies are described in the cookie policy (/en/cookies/). We update this policy when features, providers or processing arrangements change. New versions receive an effective date. Enabling form submission or new tools will require the information to be updated before they are used.