Privacy Policy

1. Who is the data controller

The controller of your personal data is the individual running InfinityWebs at infinitywebs.pl (“we”). InfinityWebs is not yet a registered business. Once it is, we will add the business name, address and tax ID here.

For anything related to your personal data, write to kontakt@infinitywebs.pl or call +48 519 462 275.

2. What data we process

• Contact form data — your name, email address, phone number and message, and, if you provide it, your company name. Along with the message we store the date it was sent and your IP address, to protect the form from abuse.
• Correspondence — if you email or call us: the details you share with us then.
• Technical data — the server hosting the site keeps logs that include your IP address, the date and time of your visit, the page you opened and your browser type.

We do not use analytics tools, advertising pixels or profiling.

3. Why we process it and on what legal basis

• Replying to your enquiry and preparing a quote — Art. 6(1)(b) GDPR (steps taken at your request before entering into a contract). If the enquiry isn't about working together — Art. 6(1)(f) GDPR (our legitimate interest in handling correspondence).
• Performing a contract, if we start working together — Art. 6(1)(b) GDPR.
• Spam protection and site security (Cloudflare Turnstile, server logs, storing the IP address with a message) — Art. 6(1)(f) GDPR.
• Legal obligations, e.g. tax rules, if we work together — Art. 6(1)(c) GDPR.
• Establishing, pursuing or defending legal claims — Art. 6(1)(f) GDPR.

Filling in the form is voluntary, but without your name, email address, phone number and project description we can't reply.

4. How long we keep data

• Form messages and correspondence — until the conversation ends, no longer than 12 months after the last contact. Form messages older than 12 months are deleted automatically. If we start working together — for as long as the work lasts.
• Contract and billing data — for the period required by law (usually 5 years from the end of the tax year).
• Server logs — for the period set by the hosting provider, usually a few weeks.

5. Who receives the data

• Hosting provider — the site runs on its server, where form messages are stored.
• Email provider — when we reply to your enquiry.
• Cloudflare (Cloudflare, Inc.) — the Turnstile service in the contact form, which checks that a person is sending the message. When you open the form, Cloudflare receives your IP address and browser details. More: Cloudflare Privacy Policy.
• Public authorities — only where the law requires it.

We do not sell your data.

6. Transfers outside the European Economic Area

Cloudflare may also process data in the USA. This is based on the European Commission's decision on the EU-US Data Privacy Framework or on standard contractual clauses approved by the Commission.

The site's fonts, icons and styles are stored on our own server, so loading them doesn't send data to other companies.

7. Cookies

The site only uses cookies that are necessary for it to work:

• Session cookie (PHPSESSID) — lets us show that your message was sent, or an error message, and keep what you typed. It is deleted when you close the browser.
• Cloudflare Turnstile — may store technical data in your browser in the contact form to tell people apart from bots. It isn't used for tracking or advertising.

We don't use analytics or advertising cookies, so we don't ask for cookie consent. You can delete or block cookies in your browser settings, but the contact form may then not work properly.

8. Your rights

You have the right to:

• access your data and get a copy of it,
• rectify inaccurate data,
• erase your data,
• restrict processing,
• data portability,
• object to processing based on our legitimate interest.

To use these rights, write to kontakt@infinitywebs.pl. You can also lodge a complaint with the President of the Polish Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw).

9. Security

The connection to the site is encrypted (HTTPS). Form messages are only accessible in a password-protected admin panel.