Privacy Policy

1. Data Controller

The controller of your personal data is Aporia Digital, EU VAT: PL5783164311, reachable at contact@aporia.digital. When you use our website or contact us via the contact form, we act as data controller within the meaning of the General Data Protection Regulation (GDPR).

2. What Data We Collect

We may collect and process the following categories of personal data:

• Contact data – name, email address, phone number, company name (provided via the contact form).
• Usage data – IP address, browser type, pages visited, time spent on site (collected automatically via server logs and analytics).
• Communication data – content of messages sent through our contact form.

3. Purpose and Legal Basis for Processing

• Responding to enquiries – Art. 6(1)(b) GDPR (performance of a contract or pre-contractual steps).
• Legitimate business interests – Art. 6(1)(f) GDPR (e.g. website security, fraud prevention, analytics).
• Consent – Art. 6(1)(a) GDPR (where you have given explicit consent, e.g. for cookie-based tracking).

4. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes set out in this Policy or as required by applicable law. Contact form enquiries are typically retained for up to 3 years from the date of the last communication. Analytics data is retained in anonymised form indefinitely.

5. Data Sharing

We do not sell or rent your personal data to third parties. We may share data with trusted service providers acting as data processors on our behalf (e.g. hosting providers, e-mail delivery services, analytics platforms) under appropriate data processing agreements. All processors are required to maintain the confidentiality and security of your data.

6. International Transfers

Some of our processors may be located outside the European Economic Area (EEA). In such cases, we ensure appropriate safeguards are in place (e.g. Standard Contractual Clauses approved by the European Commission) to protect your data in accordance with GDPR.

7. Your Rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of your data ("right to be forgotten").
• Object to or restrict certain processing activities.
• Data portability – receive your data in a structured, machine-readable format.
• Withdraw consent at any time without affecting the lawfulness of prior processing.
• Lodge a complaint with a supervisory authority (in Poland: UODO – uodo.gov.pl).

To exercise any of these rights, contact us at contact@aporia.digital.

8. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include HTTPS encryption, access controls, and regular security reviews.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. We encourage you to review this page periodically.

10. Contact

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at contact@aporia.digital or by phone at +48 515 476 148.