# Privacy policy

> Text version of https://dinfinit.eu/privacy-policy · Effective from 15 September 2026 · version 1
> English translation; the Polish version prevails: https://dinfinit.pl/polityka-prywatnosci.md

**In short:** this site uses no cookies, stores nothing in the browser, uses no analytics or advertising tools and loads nothing from other companies' servers. The server keeps no visitor log. Personal data is processed when someone emails us, and within the server's technical error log.

## 1. Data controller

The controller is DINFINIT sp. z o.o., registered office: ul. Niedźwiedzia 29 B, 02-737 Warsaw, Poland, entered in the register of entrepreneurs of the National Court Register kept by the District Court for the Capital City of Warsaw, 13th Commercial Division, KRS 0000468269, Tax ID (NIP) 5213651511, REGON 146760500.

Contact for personal data matters: kontakt@dinfinit.pl or by post to the registered office. No data protection officer has been appointed, as the company is not required to appoint one.

This policy covers dinfinit.eu and its Polish version dinfinit.pl. Landeva, DataScope and Medieva have their own privacy policies.

## 2. Cookies and tracking

The site uses no cookies or similar technologies:

- it stores no information on the user's device and reads none,
- it uses no analytics, statistics or advertising tools,
- it loads no fonts, scripts, maps or videos from other companies' servers,
- it contains no forms.

The site therefore does not ask for cookie consent and shows no consent banner (Article 399 of the Polish Electronic Communications Law of 12 July 2024).

## 3. Server error log

The server keeps no visitor log. Only server errors are recorded; an entry may contain an IP address, date and time, and the page requested.

- Purpose: security and correct operation of the site, diagnosing failures.
- Legal basis: the controller's legitimate interest (Article 6(1)(f) GDPR).
- Retention: 90 days, longer only to investigate a specific security incident.

Entries are not combined with other data or used to identify visitors.

## 4. Email correspondence

We process the data provided in a message: email address, name and any other information it contains.

- Purpose: replying, discussing possible cooperation, preparing an offer.
- Legal basis: pre-contractual steps (Article 6(1)(b) GDPR) and legitimate interest in conducting correspondence (Article 6(1)(f) GDPR).
- Retention: until discussions end; without cooperation, no later than 12 months after the last message; if a contract is signed, for the limitation period for claims and the period required by tax law.
- Confidentiality: information about a business and project is confidential from the first message.

## 5. Recipients of data

Data is not sold or shared for marketing purposes. It may only be disclosed to a processor acting on the company's behalf (Article 28 GDPR): the server and email provider OVHcloud (OVH group), and to public authorities where the law requires.

## 6. Transfers outside the EEA

Data is not transferred outside the European Economic Area. The servers running the site and email are located in the European Union.

## 7. Rights of data subjects

Right of access (Article 15 GDPR), rectification (16), erasure (17), restriction (18), portability (20) and objection (21). Reply without undue delay and within one month.

Complaints: President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.

## 8. Voluntary provision and profiling

Providing data in correspondence is voluntary, but a reply requires an email address. Browsing the site requires no data. The company makes no decisions based solely on automated processing, including profiling (Article 22 GDPR).

## 9. Links to other websites

Once you move to another site, its privacy policy applies.

## 10. Changes to this policy

The current version is available at https://dinfinit.eu/privacy-policy. If the site ever starts using cookies or analytics tools, this policy will be changed before they are introduced.