Privacy Policy

1. Data controller

The controller of your personal data is Infinitum Code (“we” or the “Controller”).

For any matter concerning personal data, including exercising your rights, email us at the address below or use the contact form. Please mention that it concerns personal data.

Email

info@infinitumcode.com

Contact form

Go to the form

2. What data we process

• Contact form data: full name, email address and, optionally, company or product name, budget range, selected project type and your message.
• Attachments added to the form (PDF, DOC, DOCX) together with any data they contain. Please do not include special categories of data (e.g. health data) or unnecessary third-party data.
• IP address and basic technical request data (e.g. date and time, browser type), processed automatically when you use the website.

3. Purposes and legal bases

• Replying to your inquiry and further correspondence – Art. 6(1)(b) GDPR (steps taken at your request before entering into a contract) or, if you write on behalf of a company, Art. 6(1)(f) GDPR (our legitimate interest in responding to business inquiries).
• Website and form security, including protection against spam and abuse (a limit on submissions per IP address) – Art. 6(1)(f) GDPR.
• Establishing, exercising or defending legal claims – Art. 6(1)(f) GDPR.
• Complying with legal obligations such as tax and accounting rules if the inquiry leads to a contract – Art. 6(1)(c) GDPR.

4. Do you have to provide data

Providing data is voluntary. However, without your name, email address and project description we cannot reply to your inquiry. All other fields are optional.

5. How long we keep data

• Form data and correspondence – for as long as needed to handle the inquiry and then no longer than 12 months after our last contact, unless we sign a contract.
• If we sign a contract – for its duration, then until the limitation period for claims expires and for the period required by tax and accounting law.
• IP address used for the submission limit – temporarily and only in the server’s memory; we do not write it to disk or link it to the content of your inquiry.
• Server logs – for a short period needed to keep the service secure and diagnose errors.

6. Who receives data

We never sell data. Access is limited to providers who support us technically and process data on our behalf under a data processing agreement:

• hosting provider – the servers this website runs on,
• email provider – the mailbox that receives contact form messages,
• accounting or legal advisers – when necessary.

7. Transfers outside the EEA

We do not transfer data outside the European Economic Area. If we ever use a provider outside the EEA, we will do so only with safeguards required by the GDPR (e.g. a European Commission adequacy decision or standard contractual clauses) and we will update this policy.

8. Your rights

You have the right to:

• access your data and receive a copy (Art. 15 GDPR),
• rectification (Art. 16 GDPR),
• erasure (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability – for data processed in connection with a contract (Art. 20 GDPR),
• object to processing based on our legitimate interest (Art. 21 GDPR),
• lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (ul. Stanisława Moniuszki 1A, 00-014 Warsaw, uodo.gov.pl), if you believe we process your data unlawfully.

9. How to exercise your rights

Email us at the address in section 1 or use the contact form. We will reply without undue delay and within one month at the latest. We may ask for information needed to confirm your identity.

10. Automated decisions and profiling

We do not make solely automated decisions about you and we do not profile you.

11. Cookies and third-party resources

This website does not use analytics or marketing cookies and does not use tracking tools.

We use one technical cookie, NEXT_LOCALE, which remembers the language version you chose. It is set only when the chosen language differs from your browser language and it expires when you close the browser. It is strictly necessary for the feature you use, so it does not require consent.

You can delete or block cookies in your browser settings – the website will still work but may not remember your language.

Fonts, scripts and animations are served from our own server. The website does not connect to third-party content providers such as Google Fonts or ad networks.

12. Changes to this policy

We may update this policy, for example when the law or the way the website works changes. The current version is always available at this address and the date of the last change is shown at the top of the page.