This policy explains which personal data we process when you use www.credoinvest.com, for what purpose and on what legal basis, and what rights you have under the GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council).
1. Data controller
The controller of your personal data is Credo Invest P.S.A., with its registered office at ul. Sądowa 2/11, 20-027 Lublin, Poland, entered in the Polish National Court Register (KRS) under number 0000992784, tax ID (NIP) 712-344-17-39, REGON 523149295.
For any matter concerning personal data you can contact us by e-mail at info@credoinvest.com or by post at the address above.
2. What data we process and why
Contacting us (e-mail, phone, contact form)
When you write to us, call us or use the contact form on this website, we process the data you provide: name, e-mail address, phone number, company name and the content of your message.
- Purpose: replying to your enquiry, preparing a quotation and handling correspondence.
- Legal basis: taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in handling correspondence (Art. 6(1)(f) GDPR).
- Retention: until the matter is closed and then for the limitation period of possible claims, no longer than 3 years from the last contact. Messages sent through the form are stored on our server to ensure reliable delivery.
Providing the data is voluntary, but without it we cannot answer your enquiry. The form is protected against abuse (spam); for this purpose the IP address and time of sending are stored for a short time.
Technical data (server logs)
The server hosting the website automatically records standard technical data of every visit: IP address, date and time, address of the page displayed, browser and operating system type, and the referring page.
- Purpose: security and proper operation of the website, detection of errors and abuse.
- Legal basis: our legitimate interest (Art. 6(1)(f) GDPR).
- Retention: according to the hosting provider's settings, no longer than 12 months.
Visitor statistics (Google Analytics)
To measure traffic on the website we use Google Analytics 4, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). The tool is loaded only after you click "Accept" in the cookie banner. Without your consent no data is sent to Google and no cookies of this tool are set.
- Purpose: visitor statistics (number of users, pages visited, country, device type) in order to improve the website.
- Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
- Cookies:
_gaand_ga_*(browser identifier, valid for 2 years). Google Analytics 4 does not store full IP addresses. - Transfers outside the EEA: Google may also process data on servers in the USA. The transfer is based on the European Commission's adequacy decision for the EU-US Data Privacy Framework, to which Google LLC is certified, and on standard contractual clauses.
3. Cookies and browser storage
The website does not use advertising or tracking cookies. The website itself only uses browser storage (localStorage, key ci-consent) to remember your decision from the cookie banner so that we do not ask again on every visit. This entry is not shared with anyone and remains until you clear your browser data or change your decision.
Google Analytics cookies are set only after you give consent (see above). Fonts and all other elements of the website are loaded from our own server, without third-party services.
Changing your decision: the footer of every page contains a "Cookie settings" link. After you click "Decline", Google Analytics will no longer be loaded and its cookies will be deleted. You can also delete or block cookies at any time in your browser settings.
4. Recipients of data
Your data may be accessed by companies that provide services to us and process data on our instructions: the hosting and e-mail provider (OVH SAS, France, servers in the European Union), Google Ireland Limited (statistics only, after your consent) and companies supporting us in IT, accounting and legal matters. Data may also be disclosed to public authorities where required by law.
5. Your rights
In relation to the processing of your data you have the right to:
- access your data and obtain a copy of it,
- rectification of your data,
- erasure of your data,
- restriction of processing,
- data portability (for data processed on the basis of consent or a contract),
- object to processing based on legitimate interest,
- withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal,
- lodge a complaint with a supervisory authority: in Poland the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl), or the supervisory authority in your country of residence.
To exercise your rights, write to us at info@credoinvest.com.
6. Other information
We do not make decisions based solely on automated processing, including profiling. The website contains links to the websites of our brands and partners (including quincysport.com, championsladder.com, iveoutdoor.com, 122labs.com), which have their own privacy policies.
This policy may be updated when the law or the way the website works changes. The current version is always available at this address.
Last updated: 3 September 2026.