Privacy policy · Version 1 · effective from
The Polish version is binding; the English version is provided for information only.
This policy describes how we process the personal data of people who visit the ProcessCraft website before launch.
1. Controller
The data controller is CRAFT CODE sp. z o.o., ul. Wieniecka 6, 03-634 Warszawa, KRS 0001207722, NIP 5243056931. For personal data enquiries, write to kontakt@craftcode.it. We have not appointed a data protection officer.
2. What data and where it comes from
Each time you visit the site, our server records in its technical logs your IP address, browser information (User-Agent), the page requested and the time (§7). If you email us, we process your email address and the content of your message. We store one strictly necessary cookie, pc_lang (your language choice), in your browser — see the cookie policy.
3. Purposes and legal bases
We process data for the following purposes: (a) site security and correct operation (server technical logs) — legitimate interest (Art. 6(1)(f) GDPR); (b) replying to your email — legitimate interest in handling correspondence (Art. 6(1)(f) GDPR).
4. Recipients and transfers outside the EEA
The following process data on our behalf under data processing agreements: Google Cloud (hosting and technical logs — data stored in the Warsaw region), the provider of the email service behind our contact address (super-host.pl). We store the data in the European Economic Area (EEA). These providers may use their own subcontractors, including outside the EEA (e.g. for technical support). If this involves a transfer of data outside the EEA, it is based on a European Commission adequacy decision (e.g. the EU-US Data Privacy Framework) or on standard contractual clauses adopted by the European Commission. You can obtain a copy of these safeguards by writing to kontakt@craftcode.it.
5. How long we keep data
Server technical logs — no longer than 30 days. We keep email correspondence for the time needed to handle your matter and, where necessary to establish, pursue or defend legal claims, for the limitation period of such claims.
6. Visit statistics
We do not use visit statistics tools or analytics cookies. If that changes, we will update this policy before such processing starts.
7. Server technical logs
Each time you visit the site, the Google Cloud platform records in technical logs your IP address, browser information (User-Agent), the page requested and the time. Logs are used for site security (legitimate interest, Art. 6(1)(f) GDPR). We keep them for no longer than 30 days, in Google Cloud in the Warsaw region.
8. Your rights
You have the right to access, rectify and erase your data, to restrict processing, and the right to object to processing based on legitimate interest. To exercise these rights, write to kontakt@craftcode.it. You have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (UODO).
9. Voluntary provision
Using the site does not require you to provide any data. Technical logs are created automatically on every visit — they are necessary for the site to work and to keep it secure. Emailing us is voluntary.
10. Automated decisions
We do not make decisions based solely on automated processing and do not carry out profiling.
11. Changes to this policy
The version number and effective date are shown at the top of the document; every version is available as a PDF. From the ProcessCraft launch, all versions are publicly available in the archive on this page.
12. Language version
This policy is available in Polish and English. The Polish version is binding; the English version is provided for information only.