Privacy policy

01. Data controller

The controller of your personal data is Lukasz Bandurski, running a sole proprietorship under the name Lukasz Bandurski Hardenix, ul. Piłsudskiego 27B/8, 62-028 Koziegłowy, Poland, VAT ID (NIP) 7772385506.

Contact for personal data matters: lukasz.bandurski@hardenix.io

No data protection officer has been appointed. In all matters related to the processing of personal data you can contact the controller directly at the e-mail address above.

02. Purpose and legal basis of processing

Contact form

Data provided in the contact form is processed for the following purposes:

• Replying to the inquiry and conducting further correspondence. Legal basis: Art. 6(1)(b) GDPR: taking steps at the request of the data subject prior to entering into a contract.
• Contacting persons interested in cooperation and defending against potential claims. Legal basis: Art. 6(1)(f) GDPR: the legitimate interest of the controller.

Data required to send the form: full name, company, e-mail address and the content of the inquiry. Additional optional information: company size and the systems or technologies the problem concerns. Providing data is voluntary, but without the required fields it is not possible to reply to the inquiry.

The data is not used for automated decision-making or profiling. It is also not used for sending marketing materials without separate consent.

Google Analytics

Google Analytics is used to produce statistics on how the website is used. It is activated only after explicit consent to analytics. Before consent, analytics scripts are not loaded and analytics cookies are not set. After consent, Google Analytics may collect information about the use of the website, including session data, device and browser information, and an approximate location. The legal basis for processing by Google Analytics is your consent (Art. 6(1)(a) GDPR).

03. Retention period

Data from the contact form is kept for the duration of the correspondence, and then for 24 months from the last contact, to handle potential follow-up questions and to defend against claims.

If the contact leads to a contract, the data related to its performance is kept for the period required by tax and accounting regulations.

The analytics consent preference is stored locally in the browser (localStorage) until you change it. No expiry period is set. The data stays in the browser until it is manually removed or the privacy settings on the site are changed.

04. Rights of the data subject

You have the following rights:

• the right to access your data and receive a copy of it (Art. 15 GDPR),
• the right to rectify inaccurate or incomplete data (Art. 16 GDPR),
• the right to erasure (Art. 17 GDPR),
• the right to restrict processing (Art. 18 GDPR),
• the right to data portability, in the cases where the conditions of Art. 20 GDPR are met,
• the right to object to processing based on the legitimate interest of the controller (Art. 21 GDPR),
• the right to withdraw consent at any time, where processing is based on consent. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. This applies in particular to the Google Analytics consent. Its withdrawal does not affect the processing of contact form data, which is based on a different legal basis.

To exercise any of these rights, write to lukasz.bandurski@hardenix.io. You will receive a reply without undue delay, no later than within one month of receiving the request.

You also have the right to lodge a complaint with a supervisory authority, which in Poland is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa.

05. Data recipients

Your data may be entrusted to the following processors acting on behalf of the controller:

• OVH SAS, based in France: the hosting provider for the website and e-mail, to the extent necessary to run the server and handle the form.
• Google: the provider of Google Analytics, only after consent to analytics.

The data may also be disclosed to entities entitled to receive it under applicable law.

The data is not sold or shared with third parties for marketing purposes.

Transfers outside the European Economic Area

Contact form data and e-mail are processed on servers located in the European Union and are not transferred outside the European Economic Area.

The exception is Google Analytics, which runs only after you consent to analytics. Using it may involve a transfer of data to Google LLC in the United States. Such transfers rely on the European Commission implementing decision of 10 July 2023, which recognizes an adequate level of protection for organizations participating in the EU-US Data Privacy Framework, supplemented by standard contractual clauses. Participation of a specific organization can be verified on the list maintained by the US Department of Commerce. If you do not consent to analytics, no such transfer takes place.

06. Cookies and similar technologies

Privacy preference (localStorage)

The site uses the browser's local storage (localStorage) to remember your privacy decision. Key: hardenix-consent. It records whether you have consented to analytics. This mechanism is necessary for the privacy choice to work and does not require separate consent. No expiry period is set. The preference stays in the browser until it is changed in the settings on the site or manually removed.

Google Analytics

Google Analytics is optional and requires your prior consent. Before consent is given, analytics scripts are not loaded and analytics cookies are not set. After consent, Google Analytics may set cookies that collect information about the use of the website for statistical purposes.

You can change or withdraw your analytics consent at any time using the "Cookie settings" link in the site footer. Withdrawing consent is as easy as giving it. You can also manage cookies in your browser settings.

List of technologies

The default validity period of Google Analytics cookies (_ga) is 2 years. Exact values may depend on the configuration of the analytics account.

07. Contact

In all matters related to the protection of personal data, including exercising your rights, contact: lukasz.bandurski@hardenix.io

Requests are answered without undue delay, no later than within one month of receipt.