Ši privatumo politika šiuo metu pateikiama anglų kalba. Privaloma yra lenkiška versija. Klausimus siųskite adresu hi@limonfy.com.
We respect your privacy and collect only the data we need. This website does not use cookies or any analytics, advertising or tracking tools, and all of its resources (including fonts) are loaded from our own server — with no connections to third-party servers.
Below we explain what personal data we process when you visit limonfy.com or contact us by e-mail or phone — in line with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR). In case of discrepancies, the Polish version prevails.
01Data controller
The controller of your personal data is LIMONFY sp. z o.o., ul. Paprotna 14/B, 51-117 Wrocław, Poland, entered in the National Court Register (KRS) under no. 0001182928, tax ID (NIP) 895 229 00 73, REGON 542199631 (“Limonfy”, “we”).
For any matters concerning personal data, contact us by e-mail at hi@limonfy.com, by phone at +48 792 355 613, or by post at our registered address marked “Personal data”.
We have not appointed a data protection officer, as we are not required to do so (Art. 37 GDPR).
02What data, for what purpose and for how long
We process data only for the purposes below, on the legal bases set out in the GDPR:
| Purpose | Data | Legal basis | Retention period |
|---|---|---|---|
| Responding to an enquiry sent by e-mail (including via the “Write to us” button) or made by phone | data you provide: name, e-mail address, phone number, position, company, industry, number of locations, message | Art. 6(1)(f) GDPR — our legitimate interest in responding to enquiries and business contact; where the enquiry concerns entering into a contract with you — Art. 6(1)(b) GDPR | until the matter is closed, then no longer than 12 months from the last contact, unless we start cooperating |
| Preparing an offer or pilot and performing a contract with the company you represent | business contact details of persons representing a client or partner | Art. 6(1)(f) GDPR — contact with representatives of a counterparty; Art. 6(1)(b) GDPR — where the contract is with you | for the duration of the cooperation, then until claims become time-barred |
| Compliance with legal obligations (e.g. accounting and tax) | data in accounting documents | Art. 6(1)(c) GDPR | 5 years from the end of the year in which the tax payment deadline expired |
| Establishing, exercising or defending legal claims | data needed to prove or defend a claim | Art. 6(1)(f) GDPR | until the limitation period expires — generally 3 years for claims related to business activity (Art. 118 of the Polish Civil Code) |
| Ensuring the operation and security of the website (server logs) | IP address, date and time, page visited, server response code, browser and operating system, referring page | Art. 6(1)(f) GDPR — security and proper operation of the website | for a short period set by the hosting provider, solely for security and diagnostics |
Server logs are kept automatically by the hosting provider acting as our processor. We do not combine them with other data or use them to identify visitors.
04Who we share data with
We do not sell personal data. Only authorised members of our team have access to it. We may entrust data to service providers — only to the extent necessary and under data processing agreements (Art. 28 GDPR):
- hosting and server infrastructure providers for the website,
- e-mail and office tool providers we use for correspondence,
- providers of a customer enquiry and relationship management (CRM) system, if we use one,
- providers of IT, accounting and legal services.
Data may also be disclosed to public authorities where required by law.
05Transfers outside the EEA
As a rule, we process data within the European Economic Area (EEA). If any of our providers transfers data outside the EEA (e.g. to the USA), this takes place only with appropriate safeguards: on the basis of a European Commission adequacy decision (including the EU-U.S. Data Privacy Framework) or standard contractual clauses adopted by the European Commission (Art. 45–46 GDPR). On request, we will provide information about the safeguards applied.
06Where we get your data from
Usually from you — when you write or call. If we contact you as a representative of a company we work with or are discussing cooperation with, we may have received your business contact details (name, position, e-mail, phone) from your employer or from publicly available sources, such as the company’s website.
07Your rights
You have the right to:
- access your data and receive a copy (Art. 15 GDPR),
- rectification (Art. 16 GDPR),
- erasure (Art. 17 GDPR),
- restriction of processing (Art. 18 GDPR),
- data portability — for data processed on the basis of a contract (Art. 20 GDPR),
- object to processing based on our legitimate interest (Art. 21 GDPR) — after an objection we will stop processing unless we demonstrate compelling legitimate grounds or the data is needed for legal claims,
- lodge a complaint with the President of the Polish Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl) or with the supervisory authority in your EU country of residence.
To exercise your rights, write to hi@limonfy.com. We will respond without undue delay and within one month at the latest (Art. 12(3) GDPR). We may ask for information needed to confirm your identity.
08Do you have to provide data
Providing data is voluntary. However, without basic contact details we will not be able to respond to your enquiry. Requirements arising from a contract or the law (e.g. invoice details) will be indicated when the contract is concluded.
09Automated decisions and profiling
We do not make decisions about you based solely on automated processing, including profiling (Art. 22 GDPR).
10Data security
We apply technical and organisational measures appropriate to the risk (Art. 32 GDPR), including an encrypted connection to the website (HTTPS), restricting access to data to authorised persons and minimising the data we collect. We are implementing an information security management system in line with ISO/IEC 27001.
11Data in Limonfy Platform
This policy covers the website and contact with us. Data processed in systems deployed for clients (e.g. Limonfy Platform) is processed under separate agreements with clients, including data processing agreements, which set out the applicable rules.
12Changes to this policy
We update this policy when the law or the way the website works changes — in particular before introducing new tools (e.g. analytics or cookies). The current version and its effective date are always shown at the top of this page.