Privacy Policy

1. Data Controller

The controller of your personal data is ProcessApp, the owner of the processapp.pl website. For privacy matters, contact us via the form on the /contact page.

2. What data we collect

We collect only the data necessary to provide our services and analyse website traffic:

• Contact form data — name, email, phone number and message content (when you provide them to us).
• Analytics data — anonymised data about how the website is used (Google Analytics 4), only after consent is given in the cookie banner.
• Cookies and similar technologies — details in section 5.

3. Purpose and legal basis

• Responding to enquiries — Article 6(1)(b) GDPR (steps prior to entering into a contract) and (f) (legitimate interest of the controller).
• Marketing of our own services — Article 6(1)(f) GDPR (legitimate interest of the controller).
• Analytics and cookies — Article 6(1)(a) GDPR (user consent given in the banner).
• Legal obligations — Article 6(1)(c) GDPR (e.g. tax and accounting settlements).

4. Your rights

At any time you have the right to:

• access your data and obtain a copy of it,
• rectify (correct) your data,
• erase your data (the "right to be forgotten"),
• restrict processing,
• data portability,
• object to processing,
• withdraw consent at any time (this does not affect the lawfulness of prior processing),
• lodge a complaint with the President of the Personal Data Protection Office (uodo.gov.pl).

To exercise these rights, contact us via the contact form.

5. Cookies

Our website uses cookies to ensure the proper operation of the service and to analyse traffic. Types of cookies:

• Essential — provide the basic functioning of the website (session, preferences). Always active.
• Analytics — Google Analytics 4 with IP anonymisation. Active only after consent is given in the cookie banner.
• Marketing — used to measure campaign effectiveness. Active only after consent is given.

We use Google Consent Mode v2 — by default all categories other than essential are blocked. You can change your consent at any time by clearing your browser storage for this domain.

6. Data recipients

Your data may be shared with the following categories of recipients:

• IT and hosting service providers (including Google analytics services),
• email and communication service providers,
• an accounting office — where relevant to settlements,
• authorised state authorities, where required by law.

Some services (e.g. Google Analytics) may involve transferring data outside the European Economic Area. Such transfers take place in compliance with the European Commission's standard contractual clauses.

7. Data retention period

• Contact form data — for the duration of handling the enquiry and for 3 years after contact ends.
• Analytics data — in accordance with Google Analytics settings (14 months by default).
• Data required by law (e.g. accounting) — in accordance with applicable regulations.

8. Security

We apply technical and organisational data protection measures: SSL/TLS encryption, restricted access to data, regular backups and security monitoring (Cloudflare). We host data in Poland.

9. Changes to the policy

We reserve the right to make changes to this policy. We will inform you of significant changes via the homepage or by email. The current version is always available at this address.

10. Contact

Please direct questions about data processing via the contact form or directly to the email address indicated in the website footer.