What happens to what you send us.

The controller for the processing described here, in the sense of Article 4(7) GDPR, is:

COMPANY

Algoforte sp. z o.o.
Szlak 77 / 222
31-153 Kraków, Poland

EMAIL

marcin.fituch@algoforte.com

REGISTRATION

KRS 0001236835 · NIP 6762718325 · REGON 544560574. Full company details are in the imprint.

DATA PROTECTION OFFICER

None appointed. We are not required to appoint one, as our processing is neither large-scale nor systematic monitoring within the meaning of Article 37(1) GDPR.

Everything below comes from you filling in the contact form. We do not buy, enrich or infer anything about you, and we do not build a profile.

FROM THE FORM

Your name, your work email address, and the free text you write in the message field. The message field is yours to fill as you see fit, but please do not put anything in it that you would not want sitting in an email inbox.

ALONGSIDE IT

Whether you ticked the consent box, the time you submitted, and the version of this notice in force at that moment. We keep this to be able to show that consent was given, as Article 7(1) GDPR requires.

SERVER LOGS

Our hosting provider records technical data for every request to this site, including your IP address, the time, and the page requested. This happens at the infrastructure layer and is used to operate and secure the service. The site’s own code neither reads nor stores your IP address.

PAGE VIEW COUNTS

Page views, referrer, approximate location derived from your IP address, and coarse device and browser type. Vercel derives a visitor identifier by hashing request data with a salt that rotates daily, so you cannot be recognised from one day to the next. We strip query strings before anything leaves your browser. Section 07 has the off switch.

WHAT WE NEVER COLLECT

No advertising or cross-site tracking. No tag manager, no tracking pixel, no session recording or heatmap. No accounts, no logins, no newsletter list. The only thing written to your browser is whether you have objected to being counted.

Two purposes, kept apart and resting on different grounds: reading your enquiry and replying to it, and counting which pages get read. We do not use contact form data for marketing, and we pass nothing to anyone outside the processors named in section 04.

ART. 6(1)(A) GDPR · ENQUIRIES

Your consent, given by ticking the box on the form. You may withdraw it at any time by writing to marcin.fituch@algoforte.com. Withdrawal does not affect the lawfulness of what we did before you withdrew.

ART. 6(1)(B) GDPR · ENQUIRIES

Steps taken at your request before entering into a contract. Where your enquiry is about working together, this basis also applies, so a withdrawal of consent does not leave a live enquiry in limbo.

ART. 6(1)(F) GDPR · COUNTING

Our legitimate interest in knowing which parts of this site are read, so we can write more of what is useful. We weighed this against your interests and concluded it is proportionate: the measurement is cookieless, sets nothing that follows you elsewhere, builds no profile, and cannot recognise you from one day to the next. You can object at any time under Article 21: see section 07, or use the link in the footer of any page.

NOT REQUIRED

You do not have to use the form. The email address and postal address in the imprint reach us just as well, and neither is conditional on providing anything beyond what you choose to write.

Three service providers run this site, carry its email and hold the mailbox it lands in. Each acts as a processor under Article 28 GDPR, on our instructions only.

EMAIL DELIVERY

Resend (United States) transmits the form submission to our mailbox and retains a record of the sent message on its platform.

MAILBOX

Microsoft (United States) hosts the mailbox your message arrives in. Mailbox content is held within Microsoft’s EU Data Boundary, so it is stored and processed in the EU and EFTA.

HOSTING

Vercel Inc. (United States) hosts this website and processes the server log data described in section 02. Server-side processing, which on this site means handling your form submission, runs in Vercel’s Frankfurt region.

ANALYTICS

Vercel again, through its Web Analytics product, unless you have objected. The measurement data described in section 02 goes to Vercel and nowhere else.

TRANSFERS OUTSIDE THE EEA

All three are US-headquartered companies, so engaging them involves a transfer to a third country within the meaning of Chapter V GDPR, even where the data itself sits on European infrastructure. Vercel and Resend are certified under the EU-US Data Privacy Framework. Microsoft relies on the Standard Contractual Clauses under Article 46(2)(c) GDPR. We have a data processing agreement in place with each of them.

NO ONE ELSE

We do not sell, rent or share your data. No advertising network, no data broker, no CRM. Disclosure to public authorities happens only where the law obliges us.

We delete enquiries once they have served their purpose, and we do not archive them for their own sake.

CONTACT ENQUIRIES

Deleted six months after the enquiry is concluded, meaning after our exchange ends without a project, or after you tell us you are no longer interested.

IF WE WORK TOGETHER

Where an enquiry leads to a contract, the correspondence becomes part of the project record and is kept for as long as commercial and tax law requires us to keep it.

ON WITHDRAWAL

If you withdraw consent or ask for erasure, we delete the message and our reply thread, unless a statutory retention obligation requires otherwise. We will tell you if that is the case.

SERVER LOGS

Retained by our hosting provider under its own retention schedule.

ANALYTICS

Held by Vercel as aggregated counts under its own retention schedule. Because the visitor identifier is derived from a salt that rotates daily, the data stops being linkable to you well before then.

Write to us at the address in section 01 to exercise any of these. We do not charge for it, and we will answer within one month.

ACCESS · ART. 15

A copy of the personal data we hold about you, and what we do with it.

RECTIFICATION · ART. 16

Correction of anything inaccurate or incomplete.

ERASURE · ART. 17

Deletion, where no legal obligation requires us to keep it.

RESTRICTION · ART. 18

Processing paused while a dispute about accuracy or lawfulness is resolved.

PORTABILITY · ART. 20

Your data in a structured, commonly used, machine-readable format, or sent directly to another controller.

OBJECTION · ART. 21

Objection to processing based on legitimate interests. For the page-view counting you do not need to give a reason and you do not need to write to us: the link in the footer of every page stops it immediately.

WITHDRAWAL · ART. 7(3)

Withdrawal of consent at any time, with effect for the future.

COMPLAINT · ART. 77

A complaint to a supervisory authority. Ours is the Polish authority, Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warsaw. You may also complain to the authority where you live or work.

Page views are counted unless you say otherwise. Saying otherwise takes one click, needs no reason, and takes effect immediately.

STOP COUNTING ME

don't count my visit

WHAT IT DOES

Vercel Web Analytics counts page views so we can tell which parts of this site are worth writing more of. It sets no cookies, does not follow you to other sites, and builds no profile. Section 02 lists exactly what it receives.

WHAT HAPPENS WHEN YOU OBJECT

The measurement script is not loaded at all on your next page load, so nothing about you reaches Vercel. If it had already loaded, every further event is dropped before it is sent.

WHAT WE STORE EITHER WAY

One entry in your browser’s local storage: whether you objected, the date, and a version number. It is never sent to a server. Clearing your browser storage resets it.

FONTS

The typefaces are downloaded when the site is built and served from our own domain. Your browser makes no request to Google Fonts or any other font host, so no data reaches a third party when you load a page.

EMBEDDED CONTENT

No maps, videos, social widgets or iframes. Apart from the measurement script, every asset comes from this domain.

We update this notice when what we actually do changes. Material changes will be reflected in a new version below.

VERSION

2026-07-29

APPLIES TO

This website and the contact form on it. It does not cover sites we link to, which have their own notices.