Privacy Policy

Who is responsible for your data

Codivine sp. z o.o. (“we”, “us”) is the data controller for personal data collected through this website.

What we collect

We collect only what we need, and nothing by accident:

• Contact form submissions. Your name, email address, and optionally company name, phone number, the service categories you selected, your project description, budget and timeline. You choose what to include; only name, email and a description are required.
• Email and phone correspondence. If you contact us directly, we keep the correspondence in order to respond and to maintain a record of the engagement.
• Technical data. Server logs generated by our hosting provider, which may include IP address, browser type and the pages requested. These are used for security and troubleshooting.
• Usage measurement. Aggregate counts of page views and a small number of interactions — which pages get read, and whether the contact form was completed. What this involves depends on which tools are switched on; the analytics section below describes exactly what is running.

Cookies and analytics

The following sets cookies and therefore only runs if you accept when asked. Declining costs you nothing — the site behaves identically either way.

• Google Analytics 4. Measures how the site is used. It sets cookies, so it is not loaded at all until you accept, and advertising features stay switched off even then. Their privacy information.

You can change your mind at any time, and withdrawing is as easy as giving permission was:

We run no advertising cookies, no cross-site tracking and no social media pixels.

Why we process it, and on what basis

• To respond to your enquiry — on the basis of your consent, given when you submit the form, and our legitimate interest in answering people who contact us.
• To perform a contract — where we go on to work together, we process the data necessary to deliver the project.
• To keep the website secure and available — on the basis of our legitimate interest.
• To meet legal obligations — for example retaining invoicing records for the period required by law.

Who we share it with

We do not sell personal data and we do not share it for advertising. We use a small number of processors to run the business — hosting, email delivery, and the systems used to manage enquiries and projects. Each is bound by a data processing agreement and processes data only on our instructions.

International transfers

Where a provider processes data outside the European Economic Area, the transfer is covered by an adequacy decision or by standard contractual clauses. We choose EU hosting regions where a provider offers them.

How long we keep it

• Enquiries that do not lead to a project: kept for up to 24 months, then deleted.
• Client records: kept for the duration of the relationship and for as long as required afterwards by accounting and limitation periods.
• Server logs: kept for a short technical retention period.

Your rights

Under the GDPR you have the right to:

• ask what personal data we hold about you, and get a copy;
• have inaccurate data corrected;
• have data erased where we have no continuing need for it;
• restrict or object to processing;
• receive your data in a portable format;
• withdraw consent at any time, without affecting processing that already happened;
• lodge a complaint with your national data protection authority.

To exercise any of these, contact us using the details on the contact page. We will respond within one month.

Security

Data is transmitted over HTTPS, access to systems is restricted to the people who need it, and credentials are managed through a secret manager rather than shared informally. No system is immune to compromise; if a breach occurs that presents a risk to you, we will notify you and the relevant authority as required.

Changes to this policy

When this policy changes materially we update the date at the top of the page. Continued use of the website after a change means the updated policy applies.