Privacy and data

Privacy policy

This notice explains how Arsimo processes data in connection with arsimo.pl, the contact form and direct correspondence.

Information for the Arsimo public website.

Data controller

The controller is ARSIMO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, ul. Augustyna Szamarzewskiego 21 lok. 2, 60-514 Poznań, Poland, KRS 0001254430, NIP 7812114335, REGON 545257197. Contact: hello@arsimo.pl.

Website technical data

To deliver and protect the site, hosting or infrastructure providers may process technical connection data such as an IP address, browser information and the requested resource. This supports site operation, security and troubleshooting. The scope and storage period of infrastructure logs depend on the relevant infrastructure services; we do not state a period that has not been established for those services.

Contact form and email

The form may include your name, email address, selected topic and message. Providing these details is voluntary, but they are needed to respond; you may also contact hello@arsimo.pl directly. Form data is validated on the server and sent through the configured SMTP transport to the contact mailbox. The website does not save submissions in a local database or application-level persistent message store. Retention in the mail system is a separate operational boundary and follows the applicable mail system rules and legal obligations.

Direct email correspondence may include information you choose to provide. Do not send passwords, API keys or other authentication credentials through the form or email.

Purposes and legal bases

We process data to deliver and secure the site, respond to enquiries, conduct correspondence and, where needed, establish, pursue or defend claims. Depending on the circumstances, a basis may be taking steps before entering into a contract or performing a contract (Article 6(1)(b) GDPR), the controller’s legitimate interests such as handling correspondence, security and claims (Article 6(1)(f)), a legal obligation (Article 6(1)(c)), or consent for optional analytics (Article 6(1)(a)).

Recipients and providers

Data may be accessed by hosting and infrastructure providers, the email/SMTP service provider, necessary IT support providers and competent authorities where required by law. Providers process data as needed for their services. Messages handled by the mail system are subject to its separate retention rules.

Optional analytics

Google Analytics 4 may run only when a valid GA4 identifier is present on the site and you have first consented to analytics. Without both conditions, the Google tag is not loaded and this implementation sends no analytics requests. After consent, the tag may send Google the page path without query parameters or a fragment, the page title, and a referrer limited to the referring page's origin, without its path or parameters. Ordinary technical information about the browser, device and connection may also be processed with a request, including an IP address or other network information. Analytics identifiers and browser storage may be created after consent. After a confirmed form submission, the site sends the technical contact_form_sent event without form field values; name, email address and message are not sent as analytics event fields. The page_location field does not contain query parameters. We do not enable advertising features, remarketing, Google Signals, user ID or enhanced conversions. Google receives tag requests and may process data under its own terms: Google Privacy Policy. We do not claim Google-side settings that have not been configured or confirmed.

Transfers outside the EEA

Some service providers, including Google, may process data outside the European Economic Area. Where such a transfer occurs, it is subject to the provider's applicable transfer mechanisms and applicable law; we do not identify a specific Arsimo contractual mechanism here without separate verification. Google's transfer information: Google data transfer frameworks.

Retention

We retain data for the period needed to handle the enquiry and correspondence and, where applicable, establish, pursue or defend claims and meet legal obligations. We do not state unverified numeric periods here. Removing a message from the website does not automatically remove copies handled by a separate mail system or provider.

Your rights

Within the limits set by the GDPR, you may request access, rectification, erasure or restriction, object to processing based on legitimate interests and, where the conditions are met, request data portability. You may withdraw analytics consent at any time in cookie settings; withdrawal does not affect the lawfulness of processing before withdrawal. You may also lodge a complaint with the President of the Polish Personal Data Protection Office (UODO).

Changes and contact

We may update this notice if the site or processing changes. Direct questions about data to hello@arsimo.pl.