Privacy policy

Controller

The controller of your personal data is Aseity Karol Drozdowski Jakub Dwojak Spółka Jawna, ul. Goździkowska 10, 18-100 Łapy, Poland, NIP 9662168281, KRS 0000993275, REGON 523221147 (Aseity).

For data protection matters write to [email protected]. The controller has not appointed a data protection officer.

What data and why

We process data in three situations:

• when you write to us through the contact form or by email (described below),
• when you consent to Google Analytics statistics (see the section on analytics and cookies),
• when you visit the site: our servers and content delivery network record your IP address and technical request data (browser, time, page address) in logs. We do this for the legitimate interest of keeping the site secure and stable (Art. 6(1)(f) GDPR).

We do not make automated decisions about you and we do not profile visitors.

Contact form

The form asks for your name, email address, topic, message and, optionally, your company name. You also have to tick a consent to be contacted about your message.

We use this data to reply and to run any conversations that precede a contract. The legal basis is Art. 6(1)(b) GDPR (steps taken at your request before entering into a contract) and our legitimate interest in handling enquiries (Art. 6(1)(f) GDPR). We treat the consent checkbox as your confirmation that you want us to contact you.

Your message goes by email to our mailbox [email protected]. We send it from [email protected], an address used only for this purpose; you will get any reply from office@. We do not send automatic confirmations to your address. In case the mail system fails, we keep a backup copy of the submission on our server and delete it automatically after 90 days.

The form is protected against spam by Cloudflare Turnstile, a hidden bot trap field, a check of the time taken to fill it in, and limits on the number of submissions. The Turnstile check only starts once you begin filling in the form. For these checks Cloudflare may process your IP address and technical browser data. We do not write the content of rejected messages to server logs.

We keep form data until the correspondence ends, and no longer than 12 months after the last contact. If we start working together, we keep the data for the period required by the contract and by law.

Providing the data is voluntary, but without your name, email address and message we cannot reply.

Analytics and cookies

To understand which pages visitors use, we use Google Analytics 4 (provider: Google Ireland Limited). We start it only after you click “Accept” in the banner. Until then the Google script is not loaded and we send no data to Google. The legal basis is your consent (Art. 6(1)(a) GDPR).

Details:

• We use Google Consent Mode v2. Advertising consents (ad_storage, ad_user_data, ad_personalization) are always denied, so we do not use Google Analytics for advertising or remarketing.
• After you consent, Google sets the _ga and _ga_ cookies with our property identifier. Without consent they do not exist.
• We keep Google Analytics data for 14 months.
• Google may transfer data to the United States. The transfer relies on the EU-US Data Privacy Framework.
• We store your choice (granted or denied) in your browser (localStorage, key aseity-consent), because it is needed to remember your decision.
• If you switch the language with the PL/EN switcher, we remember it in your browser (localStorage, key aseity-lang) so the site opens in that language on your next visit.
• These are the only two things we store without consent. Both are needed for the site to work, are never sent to us or anyone else, and are not used for tracking.

You can change your decision at any time through “Cookie settings” in the site footer or the button at the end of this policy. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. You can also reset your choice by clearing the site data in your browser.

Recipients of data

Your data may reach providers that help us run the site and mail:

• OVH (VPS hosting and the email service where form messages arrive),
• Cloudflare (content delivery network, abuse protection, Turnstile),
• Google Ireland Limited (Google Analytics, only with your consent).

These providers act as our processors or as independent controllers, under their own terms and data processing agreements. We may also disclose data to public authorities where the law requires it.

How long we keep data

• Form messages and correspondence: until the matter is closed, no longer than 12 months after the last contact. If we work together: the period required by the contract and by law (for example tax rules).
• Backup copy of a form submission on our server: 90 days, then deleted automatically.
• Google Analytics: 14 months, unless you withdraw consent and delete cookies earlier.
• Your consent choice in the browser: until you change it or clear the site data.
• Server and content delivery network logs: for the period set by their configuration, in practice a short one needed for security.

Your rights

You have the right to access your data, rectify it, erase it, restrict processing, data portability, object to processing based on legitimate interest, and withdraw consent at any time.

To use these rights, write to [email protected].

You may also lodge a complaint with the supervisory authority: the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warszawa, Poland.

Changes to this policy

We may update this policy, for example when we change tools or the law changes. The current version is always on this page, and the date of the last change is shown in the header.