Privacy Policy

This Privacy Policy sets out the rules for the processing and protection of personal data of users accessing the website operating at infadrive.pl (hereinafter referred to as the "Service"). This document has been created to ensure full transparency of information and legal compliance in accordance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation – GDPR).

1. Scope of Application

This policy applies to personal data processed by InfaDrive within the infadrive.pl website, in particular data collected via the contact form and incidental email correspondence with users.

2. Data Controller

The data controller of the personal data collected through the Service is InfaDrive (a sole proprietorship / advisory practice run by Wiktor Kowalski), operating in Poland.

Controller Contact Details

Email: contact@infadrive.pl

Phone: +48 22 123 45 67

3. Contact Regarding Data Protection

In order to exercise your rights under the GDPR or to obtain further clarifications, users can contact us directly via email at: contact@infadrive.pl.

Tip: It is recommended to include the prefix "[GDPR]" in the subject line of your message to expedite the processing of your request.

4. Scope of Collected Data

For the purpose of handling inquiries submitted through the contact form, we collect

First and last name

Email address

Phone number (optional)

Company name and job title (optional)

The content of the message itself

Selected inquiry routing options (recipient / category / service)

In addition, the Google reCAPTCHA v2 service automatically processes data regarding user interaction with the interface to verify the risk of bot presence.

5. Purposes of Processing

Users' personal data is processed exclusively for the following purposes

Handling correspondence and responding to inquiries submitted via the contact form or sent directly to the project's email address.

Ensuring the IT security of the Service (preventing spam and abuse).

Data is not used for marketing purposes, commercial profiling, or sending newsletters.

6. Legal Basis for Processing

Contact Form and Correspondence: The user's voluntary consent given before sending the message (Art. 6(1)(a) GDPR) or to take steps at the request of the data subject prior to entering into a contract (Art. 6(1)(b) GDPR).

reCAPTCHA System (Security): The legitimate interest of the Data Controller (Art. 6(1)(f) GDPR).

7. Data Recipients

As a rule, the Data Controller does not share personal data with third parties for commercial purposes. Recipients of the data may only be

Trusted IT service providers supporting the technical infrastructure of the Service.

Google Ireland Limited (or Google LLC), processing data within the scope of the implemented reCAPTCHA v2 widget.

The website does not currently use any external analytical tools (such as Google Analytics) or marketing pixels.

8. Data Retention Period

Correspondence / Form Data: Personal data obtained from the contact form and email correspondence is stored for the duration of the conversation, and then for a period of up to 12 months after its conclusion to secure potential claims and for business archiving purposes.

reCAPTCHA Cookies: Technical cookies associated with the reCAPTCHA service are stored for the time specified directly by their provider.

9. User Rights (Data Subject Rights)

Every individual whose data is processed has the right to

Access their data (Art. 15 GDPR)

Rectify/correct their data (Art. 16 GDPR)

Erase their data / "Right to be forgotten" (Art. 17 GDPR)

Restrict processing (Art. 18 GDPR)

Data portability (Art. 20 GDPR)

Object to processing (Art. 21 GDPR)

Withdrawal of Consent: Consent to data processing can be withdrawn at any time without affecting the lawfulness of processing based on consent before its withdrawal.

10. Right to Lodge a Complaint

If you believe that the processing of your personal data violates the provisions of the EU GDPR, you have the right to lodge a complaint with the competent supervisory authority. In Poland, this authority is

Name of Authority: President of the Personal Data Protection Office (PUODO – Prezes Urzędu Ochrony Danych Osobowych)

Address: ul. Stawki 2, 00-193 Warsaw, Poland

Website: uodo.gov.pl

11. Cookies Policy

The Service does not use its own or third-party cookies for analytical, statistical, or marketing purposes. The only technical and security cookies are placed on the user's device by the Google reCAPTCHA v2 service solely when the contact form is rendered, in order to verify whether the request comes from a human.

12. Automated Decision-Making

Within the operation of the Service, the Data Controller does not use automated decision-making algorithms or user profiling within the meaning of Art. 22 GDPR. The interaction analysis conducted by reCAPTCHA is purely technical and security-oriented.

13. Changes to the Privacy Policy

This Privacy Policy may be subject to periodic updates resulting from legal or technical changes. Each new version of the document will be issued with an updated "Last updated" date at the beginning of the page, and continued use of the Service constitutes acknowledgment of the new provisions.

14. Final Provisions

In matters not covered by this Privacy Policy, the relevant provisions of Polish law and the General Data Protection Regulation (GDPR) shall apply. Any disputes will be resolved under the jurisdiction of the competent Polish authorities.

[TBD copy pending] The full content of the privacy policy will be completed after legal review.