Privacy Policy
Last updated: 24.03.2026
1. Data controller
The controller of personal data is 3 Stupid Men Sp. z o. o., with a contact address at: Aleja Niepodległości 777/1, 81-805 Sopot, Poland.
For matters related to personal data, you can contact us at: hello@3stupidmen.com.
2. Scope of this policy
This Privacy Policy describes the rules for processing personal data in connection with the use of the website https://3stupidmen.com and when contacting us through the contact form or by email.
3. What data we process
Depending on how you use the website, we may process the following data:
a) Data provided through the contact form
- first name,
- last name,
- phone number,
- email address,
- message category,
- message content.
b) Correspondence-related data
If you contact us by email, we may process the data contained in your message, signature, email headers and further correspondence.
c) Technical and operational data
When using the website, basic technical data may be processed, in particular:
- IP address,
- date and time of the request,
- information about the browser and operating system,
- data necessary for the proper display of the website and to ensure its security.
d) Data related to the use of maps
We use Google Maps on the website. As a result, the provider of this service may receive technical information related to the display of the map or interaction with the embedded map.
4. Purposes and legal bases for processing
We process personal data for the following purposes:
a) Handling the contact form and correspondence
We process data in order to receive messages, respond to them and continue further contact.
The legal basis for processing is:
- Article 6(1)(f) GDPR - our legitimate interest in handling correspondence and enquiries,
- Article 6(1)(b) GDPR - to the extent that the contact concerns taking steps prior to entering into a contract or carrying out cooperation.
b) Ensuring the security, availability and proper operation of the website
We process selected technical data in order to maintain the website, detect errors, protect against abuse and ensure the security of the infrastructure.
The legal basis for processing is:
- Article 6(1)(f) GDPR - our legitimate interest in ensuring the security and proper functioning of the website.
c) Establishing, pursuing or defending against claims
Where necessary, we may also process data in order to protect our rights.
The legal basis for processing is:
- Article 6(1)(f) GDPR - our legitimate interest in defending against claims or pursuing claims.
5. Whether providing data is mandatory
Providing data in the contact form is voluntary. However, in practice, failure to provide some data may make it impossible for us to respond or contact you regarding your message.
6. Data recipients
Data may be transferred to entities we use in operating the website and handling contact, in particular:
- hosting and technical infrastructure provider - Vercel,
- provider of the email sending service used by the form - Resend,
- email service provider - Google / Gmail,
- provider of embedded maps on the website - Google Maps,
- providers of fonts used on the website - Google Fonts,
- entities providing IT, security or system maintenance services - only to the extent necessary for the purposes indicated above.
Data may also be disclosed to authorised public authorities if required by applicable law.
7. Transfer of data outside the EEA
Due to the use of certain external services, data may be transferred outside the European Economic Area, in particular to countries where the providers of these services maintain their infrastructure or affiliated entities.
Such transfers are carried out only in accordance with applicable law and with appropriate safeguards, in particular on the basis of standard contractual clauses or other lawful transfer mechanisms.
8. Data retention period
We process data for no longer than necessary to achieve the purpose for which it was collected.
In practice:
- data from the contact form and correspondence is stored for the time necessary to handle the matter and maintain contact, and then for a period of up to 24 months after the end of the correspondence, unless longer retention is necessary due to the defence against claims, the pursuit of claims or legal obligations,
- technical and operational data is stored for the period resulting from security needs, diagnostics, system logs and infrastructure operation,
- data processed by external providers may be retained by them in accordance with their own rules and retention periods.
9. Your rights
You have the right to:
- access your data,
- rectify your data,
- erase your data,
- restrict processing,
- object to processing based on our legitimate interest,
- data portability - where provided by law,
- withdraw consent at any time - where processing is based on consent.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) if you believe that the processing of your data violates the law.
10. Source of data
As a rule, we receive data directly from you - when you complete the form, send an email or use our website.
Some technical data may be collected automatically by the systems operating the website and by external services used on the website.
11. Automated decision-making
We do not make decisions concerning you solely by automated means, including profiling, based on the data provided through the website, where such decisions would produce legal effects concerning you or similarly significantly affect you.
12. Contact
For matters related to privacy and personal data protection, you can contact us at:
hello@3stupidmen.com
13. Changes to this Privacy Policy
We may update this Privacy Policy, in particular in the event of changes in the law, the way the website operates, the tools used or the ways in which data is processed.
The current version of the Privacy Policy is always published on this page.