Privacy policy

Working draft. Before publication it requires legal review – fields marked [TO BE PROVIDED] must be completed and the content confirmed by the person responsible for compliance.

1. Data controller

The controller of your personal data is IndoConnect Paweł Marczak, ul. Suwalska 18/9, 54-104 Wrocław, Poland, VAT ID (NIP) 7342901069, REGON 120122836 – hereinafter „indoconnect”.

For matters concerning personal data you can write to contact@indoconnect.eu or [TO BE PROVIDED: dedicated address for data protection requests, if different].

[TO BE PROVIDED: information on the data protection officer – whether one has been appointed; if so, contact details. If not, delete this paragraph.]

2. What data we collect

Data from the contact form

When you send an enquiry through the form, we process the data you provide yourself:

• full name, company or brand name, e-mail address, enquiry topic and planned timing of the project – required fields,
• phone number, description of your needs and attached files (e.g. brief, moodboard, drawings, specification) – optional fields,
• full name and phone number – if you ask us to call you back through the „Leave your details” form,
• whether you would like to receive the lookbook,
• where the enquiry was sent from (e.g. the form in the menu or on the contact page) – used solely to handle the enquiry.

Technical data

The hosting server records standard technical data related to your visit, such as IP address, date and time of the request, browser type and the referring page. This data is stored in server logs.

The website is hosted by cyber_Folks S.A., ul. Franklina Roosevelta 22, 60-829 Poznań, Poland. [TO BE PROVIDED: server log retention period.]

3. Purposes and legal bases

• Responding to your enquiry and correspondence – Art. 6(1)(b) GDPR (steps prior to entering into a contract) and Art. 6(1)(f) GDPR (our legitimate interest in handling business enquiries).
• Sending the lookbook, if you tick the relevant box – Art. 6(1)(a) GDPR (your consent).
• Ensuring the security and proper functioning of the website – Art. 6(1)(f) GDPR.
• Establishing, pursuing and defending claims – Art. 6(1)(f) GDPR.
• Fulfilling legal obligations, in particular tax and accounting obligations, if cooperation follows – Art. 6(1)(c) GDPR.

Providing data is voluntary, but without an e-mail address or phone number we will not be able to respond to your enquiry.

4. How long we keep data

• Correspondence about enquiries that did not lead to cooperation – [TO BE PROVIDED: proposed period, e.g. 24 months from the last contact].
• Data related to the performance of a contract – for the duration of the cooperation and for the period required by tax and accounting regulations.
• Data processed on the basis of consent – until it is withdrawn.
• Server logs – [TO BE PROVIDED: period indicated by the hosting provider].

5. Who we entrust data to

Your data may be passed to entities that provide services to us under data processing agreements:

• website hosting provider – cyber_Folks S.A., ul. Franklina Roosevelta 22, 60-829 Poznań, Poland; e-mail provider – [TO BE PROVIDED, if different],
• the contact form runs on the website’s own server – submissions are stored in the website database at the hosting provider and are not sent to an external form handling service,
• analytics tool providers, if used – [TO BE PROVIDED],
• accounting and legal service providers – to the extent necessary to perform those services.

We do not sell or share your data with third parties for marketing purposes.

6. Transfers outside the European Economic Area

Indoconnect projects require cooperation with manufacturers and partners in Indonesia. If delivering your order requires passing contact details outside the EEA, this will take place on the basis of an appropriate mechanism provided for in Chapter V of the GDPR – [TO BE PROVIDED: the mechanism used, e.g. standard contractual clauses].

We do not transfer data from the contact form outside the EEA at the stage of responding to an enquiry.

7. Your rights

In connection with the processing of your data you have the right to:

• access your data and receive a copy of it,
• rectification of your data,
• erasure of your data,
• restriction of processing,
• data portability – for data processed on the basis of consent or a contract,
• object to processing based on our legitimate interest,
• withdraw consent at any time – without affecting the lawfulness of processing carried out before its withdrawal.

To exercise these rights, write to contact@indoconnect.eu. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Urząd Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland.

The detailed information notice is available on the GDPR page.

8. Cookies and analytics

In its current version, indoconnect.eu does not use profiling cookies or third-party tracking tools. All resources – fonts, images and scripts – are served from our own domain, so browsing the site does not send requests to third-party servers.

[TO BE PROVIDED: if analytics (e.g. Google Analytics, Plausible, Matomo) or advertising pixels are implemented, this section must be updated and a cookie consent banner added to the site.]

9. Security

We apply technical and organisational measures appropriate to the risk, in particular encrypted connections (HTTPS), restricting access to data to those who need it, and data processing agreements with service providers.

10. Changes to this policy

We may update this policy, for example following changes in the law or the introduction of new tools. The current version is always available on this page, and the date of the last update is given at the top.