Privacy Policy & Cookies

This Privacy Policy & Cookie Policy describes how personal data is processed and how cookies are used on the website available at operatoai.tech (the “Site”). It has been prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and the Polish Telecommunications Law of 16 July 2004, insofar as it concerns cookies.

1. Data controller

The controller of personal data processed in connection with the use of the Site is:

SecHome Sp. z o.o.
Email: sabak.ventures@gmail.com

The controller processes personal data in accordance with applicable law, in particular Regulation (EU) 2016/679 (GDPR).

2. Data we collect

Through the contact form available on the Site, we may collect the following data:

• first and last name,
• company/organisation name,
• business email address,
• role within the organisation (optional field),
• the content of the message, including any additional contact details (e.g. a phone number) that the user chooses to include voluntarily in the message.

In addition, in connection with the technical operation of the Site, data such as IP address, browser type, operating system, and the date and time of the visit may be automatically collected and recorded in server logs by the infrastructure providers listed in Section 5.

3. Purpose of processing

Personal data is processed in order to:

• respond to an inquiry submitted through the contact form,
• carry out a free analysis and quote for a project,
• organise an online consultation or phone/email contact,
• issue accounting documents if a contract is concluded,
• ensure the correct and secure operation of the Site (technical data/logs),
• fulfil obligations arising from applicable law.

4. Legal basis for processing

Data is processed on the basis of:

• Art. 6(1)(a) GDPR - the user's consent (e.g. given when submitting the form or through cookie settings),
• Art. 6(1)(b) GDPR - performance of a contract or steps taken at the data subject's request prior to entering into a contract,
• Art. 6(1)(c) GDPR - the controller's legal obligations (e.g. accounting, tax),
• Art. 6(1)(f) GDPR - the controller's legitimate interest (including ensuring the security and correct functioning of the Site, and establishing or defending legal claims).

5. Data recipients

Data may be shared with parties cooperating with the controller only to the extent necessary to provide the services. In particular, in connection with the technical operation of the Site, data (including IP address) may be processed by:

• Netlify, Inc. - the Site's hosting provider and contact form processor,
• Google LLC - provider of web fonts (Google Fonts) loaded when the page is displayed, and provider of the email service used to contact the controller,
• an accounting office - to the extent necessary for bookkeeping,
• IT service providers supporting the Site.

Some of these providers are located outside the European Economic Area (including the United States). In such cases, data transfers are based on Standard Contractual Clauses approved by the European Commission, or another mechanism ensuring an adequate level of protection in accordance with Chapter V GDPR.

Data is not sold and is not shared with unauthorised parties.

6. Retention period

Data is stored for the period necessary to achieve the purpose for which it was collected, and afterwards for the period required by applicable law (e.g. tax and accounting regulations). Data processed on the basis of consent is stored until the consent is withdrawn. Contact-form data that did not lead to a business engagement is deleted no later than 24 months after the last contact.

7. Your rights

Every data subject has the right to:

• access their data,
• rectify their data,
• erase their data,
• restrict processing,
• data portability,
• object to processing,
• withdraw consent to processing at any time, without affecting the lawfulness of processing carried out before its withdrawal,
• lodge a complaint with the President of the Personal Data Protection Office (Poland) or with the supervisory authority of their own EU member state, if they believe the processing of their data infringes the GDPR.

To exercise the rights above, please contact us using the details in Section 10.

8. Cookies

Like most websites, the Site uses cookies - small text files stored on the user's device.

Current state: operatoai.tech does not currently use analytics cookies (e.g. Google Analytics) or marketing/advertising cookies. The only cookies that may be set are strictly necessary and originate from the hosting provider in connection with the secure submission of the contact form.

On a first visit, users are shown a banner allowing them to accept all cookies, limit them to strictly necessary cookies only, or customise consent per category. This choice can be changed at any time via the “Cookie settings” link in the Site's footer.

Regardless of the Site's own settings, users can manage (including block or delete) cookies through their browser settings. Restricting cookies may affect certain functionality of the Site.

9. Data security

The controller applies appropriate technical and organisational measures to protect personal data against loss, unauthorised access, alteration or disclosure, including an encrypted connection (HTTPS) and restricted access to data.

10. Contact

For matters related to the protection of personal data, please contact: sabak.ventures@gmail.com or in writing to the controller's registered office address.

11. Changes to this Privacy Policy

The controller reserves the right to update this Privacy Policy in the event of changes to applicable law, Site functionality, or the way services are provided. The current version of the Privacy Policy is always available at operatoai.tech.