Privacy Policy

1. Data Controller

The Data Controller is:

Appfinity Piotr Chwaleba Antoniówka 12 22-610 Krynice Poland

Email: contact@appfinity.pl Phone: +48 698 162 169

For matters relating to personal data, you can contact us at:

contact@appfinity.pl

2. Personal data we may process

The personal data we process depends on how you use the website.

When you use the contact form, this may include:

• your name,
• email address,
• phone number,
• company name,
• the selected topic of your enquiry,
• the content of your message,
• information about an IT project,
• information about planned manufacturing, such as the product type, approximate quantity, planned deadline and stage of project preparation,
• information about a selected Appfinity solution or partner project,
• information you voluntarily provide when contacting us about work opportunities.

The operation of the website may also involve processing basic technical data, such as your IP address, browser and device information, and events recorded in technical server logs.

Please do not send special categories of personal data through the contact form unless this is genuinely necessary.

3. Why we process personal data

We may process personal data for the following purposes:

Handling messages and enquiries

to read and respond to your message, understand your needs and continue the correspondence.

Preparing for and carrying out our cooperation

if your enquiry concerns potential or existing cooperation, we may need your data to prepare a proposal, take steps prior to entering into a contract or perform a contract.

Contact about work opportunities

if your message concerns opportunities to work with Appfinity, we use your data to handle the relevant correspondence or recruitment process.

Keeping the website secure and working properly

technical data may be used to diagnose errors, prevent misuse and maintain website security.

Establishing, exercising or defending legal claims

where necessary in connection with our correspondence or cooperation.

4. Legal bases

Depending on the circumstances, we process personal data on the following legal bases:

Article 6(1)(b) GDPR — where processing is necessary to take steps at your request prior to entering into a contract or to perform a contract;

Article 6(1)(f) GDPR — where processing is based on our legitimate interests, in particular corresponding with you, handling enquiries, maintaining website security, and establishing, exercising or defending legal claims;

Article 6(1)(c) GDPR — where processing is necessary to comply with a legal obligation;

Article 6(1)(a) GDPR — where processing in a particular situation is based on freely given consent.

For recruitment, the legal bases depend on the type of data provided and the applicable law. Data voluntarily provided beyond what is required by law may be processed on the basis of consent.

5. Whether you need to provide personal data

We need the data marked as required in the form to handle your message.

Providing any other information is voluntary.

Without an email address or other contact details, we may be unable to reply to your message.

6. Who may receive your personal data

We may share personal data with providers that help us operate the website and handle communications, only to the extent necessary for them to carry out their tasks.

These may include:

• hosting and IT infrastructure providers,
• email and message delivery service providers — Mailjet / Sinch Email for technical delivery of contact form enquiries,
• Google as the provider of Google Analytics 4, if you consent to analytics,
• Google as the provider of reCAPTCHA, which protects the contact form against spam and automated abuse,
• technical support and system maintenance providers,
• accounting, legal or administrative service providers, where necessary,
• public authorities, where disclosure is required by law.

7. Transfers outside the European Economic Area

If any of our providers or their subcontractors process personal data outside the EEA, transfers take place in accordance with GDPR requirements, using appropriate legal mechanisms and safeguards.

8. How long we keep personal data

We keep personal data only for as long as necessary for the purpose for which it was collected.

We keep messages and contact details for the time needed to handle your enquiry and continue correspondence, and afterwards — where justified — for as long as necessary to establish, exercise or defend potential legal claims.

Data relating to a contract or cooperation may be kept for the duration of that cooperation and afterwards for the periods required by applicable law and the limitation periods for legal claims.

We keep recruitment data for the relevant recruitment process. It may be used for future recruitment only where there is an appropriate legal basis, such as separate consent.

Technical data and logs are kept for the time needed to maintain website security and proper operation, in line with the configuration of the infrastructure we use.

9. Your rights

To the extent provided for by the GDPR, you may have the following rights:

• the right of access to your personal data,
• the right to rectification,
• the right to erasure,
• the right to restriction of processing,
• the right to data portability,
• the right to object to processing based on legitimate interests,
• the right to withdrawal of consent where processing is based on consent.

Withdrawal of consent does not affect the lawfulness of processing carried out before it was withdrawn.

To exercise your rights, you can write to:

contact@appfinity.pl

You also have the right to lodge a complaint with the President of the Personal Data Protection Office, the Polish supervisory authority.

10. Automated decision-making

Data submitted through the contact form is not used for automated decision-making that produces legal effects concerning you or for profiling that similarly significantly affects you.

11. Cookies and technical data

The website may use cookies and similar technologies needed for its proper and secure operation.

The contact form is protected by Google reCAPTCHA. The mechanism operates only in connection with the contact form and is used to prevent spam and automated abuse.

We use Google Analytics 4 for statistics and analysis of website use. Analytics starts only with your consent and only when configured. You can change or withdraw your choice through “Cookie settings” in the footer. Your choice, its version and date are stored locally in your browser (localStorage). When consent is withdrawn, we stop sending further events and remove identifiable first-party GA cookies (_ga, _ga_*); this does not undo data sent previously. We do not send information or text entered in the contact form to GA4.

12. Security

We use technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration or disclosure.

Only people and providers who need personal data to carry out specific tasks are given access to it.

13. Links to other websites

The Appfinity website contains links to external websites, including our solutions, partner projects and social media profiles.

When you visit an external website, the privacy rules set by its owner or controller apply.

14. Changes to this Privacy Policy

We may update this policy if the way the website operates, the scope of personal data processing, the tools we use or applicable legal requirements change.

The current version is always published on this page with the date it was last updated.