1. Who we are
The data controller for personal data processed through this website is CronSoft Maciejewski, Kuptel Spółka jawna (sp.j.), registered in Poland with the following details:
- Address: Praw Kobiet 4, 15-535 Białystok, Poland
- NIP: 9662131332
- KRS: 0000792782
- REGON: 383758190
- Email for data-protection requests: contact@cronsoft.pl
We have not appointed a Data Protection Officer, as we are not required to under Article 37 GDPR. Data-protection enquiries should be sent to the email above.
2. What personal data we collect
2.1 Information you submit through our forms
We operate two contact forms on this website — the Free Triage Plan request form and the general Contact Us form. When you submit either form, we collect the data you provide, which may include:
- your name;
- your email address;
- the message text you write;
- for the triage form: optional technical context you choose to share (target platform, build status, primary pain area, languages, UI stack, repository access model, deadline, NDA preference).
We do not ask for, and do not knowingly collect, special categories of personal data (Art. 9 GDPR) through this website.
2.2 Server access logs
Our hosting provider records standard server access logs as part of normal operations. These logs may include the visitor's IP address, user agent, referring URL, and timestamps of HTTP requests. We do not use this data for profiling or marketing.
2.3 What we do not collect
This website sets no analytics cookies, no tracking pixels, no advertising identifiers, and no third-party trackers. We use no fingerprinting and no cross-site tracking. Web fonts and other assets are served from this domain; no third-party CDNs are loaded by your browser when you visit our pages.
3. Why we process this data (legal basis)
- Form submissions are processed on the basis of Art. 6(1)(b) GDPR — taking steps at your request prior to entering into a contract — and, where applicable, Art. 6(1)(f) GDPR — our legitimate interest in responding to business enquiries directed at us.
- Server access logs are processed on the basis of Art. 6(1)(f) GDPR — our legitimate interest in maintaining the security, integrity, and availability of the website.
4. How long we keep your data
- Form submissions and email correspondence: retained for up to 24 months from the date of last contact, then deleted. If a submission leads to a signed engagement, related correspondence is retained for the duration of the engagement plus any period required by Polish law (typically 5 years for tax and accounting records).
- Server access logs: retained according to our hosting provider's default rotation policy and not extracted for any secondary use.
5. Sub-processors
We use the following service providers to operate the website and our email. All are located in the European Union; no personal data is transferred outside the EEA as part of routine website operation.
- OVH — web hosting and domain email delivery (EU data centres). See ovhcloud.com / personal data protection.
6. Cookies
This website does not set any cookies of its own and does not load any third-party scripts that set cookies. Because there is no cookie processing of personal data beyond strictly technical session handling (none of which is currently used), no consent banner is required under EU ePrivacy rules and the GDPR.
7. International transfers
We do not transfer personal data outside the European Economic Area as part of routine website operation. Should this change in the future (for example, if we add a non-EU service provider), we will update this policy and, where required, put in place appropriate safeguards such as Standard Contractual Clauses and a transfer-impact assessment.
8. Your rights
Under the GDPR you have the following rights regarding your personal data:
- Access — request a copy of the data we hold about you (Art. 15).
- Rectification — correct data that is inaccurate or incomplete (Art. 16).
- Erasure — request deletion of your data (Art. 17), subject to legal retention obligations.
- Restriction — request that we restrict processing in certain situations (Art. 18).
- Portability — receive your data in a structured, machine-readable format (Art. 20).
- Objection — object to processing based on legitimate interest (Art. 21).
- Withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, email contact@cronsoft.pl. We will respond within one month of receiving your request, in line with Art. 12(3) GDPR.
You also have the right to lodge a complaint with the Polish supervisory authority:
- Prezes Urzędu Ochrony Danych Osobowych (UODO)
- ul. Stawki 2, 00-193 Warszawa, Poland
- Website: uodo.gov.pl
9. Automated decision-making
We do not use automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you (Art. 22 GDPR).
10. Children
This service is directed at businesses and is not intended for use by persons under the age of 16. We do not knowingly collect personal data from children. If you believe a child has submitted personal data through this website, please contact us at contact@cronsoft.pl and we will delete the data promptly.
11. Security
We apply reasonable technical and organisational measures to protect personal data against unauthorised access, accidental loss, and unlawful destruction. Submitted form data is transmitted over HTTPS and stored within our regular email mailbox, which is protected by access controls and provider-level security.
12. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes to our practices or to legal requirements. The date at the top of this page indicates when the policy was last updated. Material changes will be highlighted on this page; minor clarifications will not.
13. Contact
For any question about this Privacy Policy or how we handle your personal data, please email contact@cronsoft.pl or write to us at the address listed in section 1.