Privacy notice

Data controller

The controller of the personal data described in this notice is:

The company has not appointed a data protection officer, as it is not required to. Privacy questions go to the contact above.

What we collect, why, and on what legal basis

Contact form

• Data: your name and email address; optionally your company and phone number; the topic and your message.
• Purpose: to read and answer your enquiry.
• Legal basis: taking steps at your request before a possible contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering business enquiries (Art. 6(1)(f)).

When you send the form we also record your IP address, the approximate location it indicates and your browser's user-agent string, and we apply a per-address sending limit. This protects the form from spam and abuse — a legitimate interest (Art. 6(1)(f)). Name, email address and message are required: without them we cannot reply.

Visiting the website

• The web server keeps standard access logs (IP address, date and time, the page requested, browser user-agent) to keep the site secure and to find faults — legitimate interest (Art. 6(1)(f)).
• The site is delivered through Cloudflare, which protects it against attacks. Cloudflare may set a strictly necessary security cookie to tell people apart from automated traffic.

Google Analytics — only with your consent

If you click Accept in the cookie banner, Google Analytics 4 is loaded and records how the site is used: pages viewed, time spent, the referring site, approximate location and device type. It sets the _ga and _ga_<ID> cookies, which keep a random identifier for up to two years so that repeat visits can be counted. Advertising features, Google signals and ad personalisation are switched off, and Google Analytics does not log or store full IP addresses.

• Legal basis: your consent (Art. 6(1)(a) GDPR; Art. 4(5) of Romanian Law no. 506/2004 for the cookies).
• Without consent Google Analytics is never loaded and nothing is sent to Google.
• Withdrawing consent: use Cookie settings at the bottom of every page at any time. Declining switches analytics off and deletes its cookies. Withdrawal does not affect processing that took place before it.

Your cookie choice itself is stored in your browser's local storage, not in a cookie, and is never sent to us.

Who receives the data

We do not sell personal data or use it for marketing. It is shared only with service providers that process it on our behalf, under data processing agreements:

• Hosting: the website runs on servers in Poland (European Union).
• Message storage: contact-form messages are stored in the company's own message system, on a managed cloud database hosted in the European Union.
• Cloudflare, Inc.: delivers and protects the website on its global network.
• Google Ireland Limited / Google LLC: Google Analytics, only if you consent.

We may also disclose data where the law requires it.

Transfers outside the European Economic Area

Cloudflare and Google may process data in the United States. Both participate in the EU–U.S. Data Privacy Framework, and transfers are additionally covered by the European Commission's Standard Contractual Clauses.

How long data is kept

• Contact messages: for as long as needed to handle your enquiry and any resulting conversation, then deleted.
• Server logs: rotated automatically and kept for a limited period.
• Google Analytics: event-level data is kept for two months; the cookies expire after up to two years, or as soon as you decline in Cookie settings.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you (Art. 15);
• have it corrected (Art. 16) or erased (Art. 17);
• restrict its processing (Art. 18);
• receive it in a portable format (Art. 20);
• object to processing based on our legitimate interests (Art. 21);
• withdraw your consent at any time, without affecting earlier processing (Art. 7(3)).

Write to [email protected] or to the registered office above. We reply within one month.

You also have the right to lodge a complaint with the Romanian supervisory authority — the National Supervisory Authority for Personal Data Processing (ANSPDCP), dataprotection.ro — or with the authority in the EU country where you live or work.

Other information

We do not use automated decision-making or profiling. This website is aimed at businesses and is not intended for children. If this notice changes, the date at the top of the page will change with it.