Privacy Policy

The controller of your personal data is allclouds.pl sp. z o.o., ul. Jutrzenki 139, 02-231 Warszawa

We will process the information you provide in order to respond to your inquiry on the following legal basis: Article 6(1)(a) GDPR

As a rule, please do not provide us with any sensitive data, such as information about your health or other data referred to in Article 9 GDPR. If you consider that providing such data is necessary, for example because of your particular situation, we will ask you for separate consent to our processing of such sensitive data

Your data may also be disclosed to third parties under Article 6(1)(f) GDPR if the Controller decides to continue its business in another company. You will then be informed of the change in the controller’s details

The data subject’s personal data may be disclosed under Article 6(1)(f) GDPR in order to maintain the proper operation of the Controller’s business, in particular to the following categories of recipients (unless the data subject gives separate consent in connection with another purpose of processing): providers of IT or software development services to the Controller, the administrator of the Controller’s servers and computers, website service providers, and providers of services, tools and scripts used on the website

You have the right to:

• request from the Controller access to your personal data, its rectification, erasure (subject to a legal obligation to retain certain data or the Controller’s legitimate interest) or restriction of processing,
• obtain a copy of the data processed by the Controller,
• request that the Controller transfer your data to another entity indicated by you, where technically feasible,
• lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (Prezes UODO),
• withdraw consent to the processing of personal data that is not necessary for compliance with legal obligations or for the Controller’s legitimate interest; withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal

If data processing is not based on consent, your personal data will be retained for the period necessary to perform the contract and to meet the Controller’s legal obligations, including those relating to tax and accounting. Processing based on your consent will end immediately once consent is withdrawn, and the data will be erased without being retained, unless the circumstances described in the preceding point apply

The Company uses public cloud providers — Microsoft and Asana — and therefore transfers personal data to US entities covered by the Data Privacy Framework, which is permitted under the European Commission Implementing Decision of 10 July 2023, adopted under Regulation (EU) 2016/679 of the European Parliament and of the Council, on the adequate level of protection of personal data under the EU-US Data Privacy Framework

If you have any questions or wish to withdraw your consent to data processing, please contact us at office@allclouds.pl

With your consent, we use Google Analytics 4, an analytics service provided by Google, to measure use of the website. Analytics data may be transferred to Google in accordance with the terms of that service and Google’s privacy policy

Cookie settings can be changed at any time using the “Cookie settings” button in the footer

After analytics consent, we also measure website use with our own system: page visits, clicks, scrolling, active time and form stages (view, start, error, abandonment and acceptance). We do not record field contents, passwords or screen recordings.

We store a random visitor identifier in the browser for up to 90 days and a session identifier that expires after 30 minutes of inactivity. These identifiers do not contain a name or email address. We do not use fingerprinting. Undelivered events may remain in browser storage for up to 24 hours for delivery retry.

Technical IP addresses are protected in logs and masked by default in the console. Revealing a full address requires administrator permission and creates an audit record. Full IP addresses in analytics are masked after 90 days. Browser identifiers are not used to determine a person’s identity.

You can withdraw consent in cookie settings. Withdrawal stops new measurement and removes analytics identifiers and undelivered events from the browser. Refusal does not restrict access to forms or the website.

With analytics consent, we also derive an approximate country, region and city from the IP address using a local DB-IP City Lite database. The visitor IP is not sent to an external geolocation API. Location can be inaccurate, especially with VPNs and mobile networks; we do not store coordinates or a precise address. Device, browser, traffic-source and campaign statistics are not used to identify a person.

If you start a video call with the “Video call” button on the Contact page, we process the name, email address and (optionally) the company name you provide and, during the call, video and audio, to connect and conduct the call and to follow up afterwards (Art. 6(1)(a) and (f) GDPR). The call is not recorded. The connection is handled by Microsoft services (Azure Communication Services and Microsoft Teams) as a processor, with data in the European Union region. Call information (date, duration, name provided) remains in the Microsoft Teams call history, and the notification with your contact details in the office@allclouds.plmailbox, for the period set in our organisation (as with form submissions). You can withdraw consent at any time by ending the call.

Orders in the Gadget shop. If you order allclouds.pl gadgets (downloads or a parcel by post), we process the data given in the form: name, e-mail address, phone number, company or institution and shipping address, to fulfil the order and contact you about it (Article 6(1)(b) GDPR), and to apply the one-per-person-and-company limit on physical gadgets (legitimate interest, Article 6(1)(f) GDPR). We share the shipping address only with the postal operator. We keep the data for 12 months from the order. The form is protected by Cloudflare Turnstile. We send the newsletter only if you tick the separate consent box.