This document is provided for transparency and general information. It does not constitute legal advice. If you need advice about your specific situation, consult a qualified professional.
1. Data controller
The controller of your personal data is NEUTION Studio, operating from Katowice, Poland. You can contact us about privacy matters at hello@neution.studio or by phone at +48 530 207 677.
We are not currently required under applicable law to appoint a Data Protection Officer (DPO). Privacy-related requests should be sent to the contact details above. If this changes, we will update this section.
2. Categories of personal data
Depending on how you interact with us, we may process:
- Contact and enquiry data: name, email address, message content, language preference, and any other information you voluntarily include in forms or emails.
- Technical and usage data: IP address, browser type, device information, approximate location derived from IP, timestamps, and similar data recorded in server or application logs when you use our website or submit a form.
- Communication metadata: identifiers needed to send email notifications (e.g. message routing), in line with our email infrastructure.
We do not aim to collect special categories of data (“sensitive data”) via the website. Please do not send us health, biometric, or other sensitive information unless strictly necessary and lawful for your request.
3. Purposes and legal bases (GDPR)
We process personal data for the following purposes and on the following bases:
- Responding to enquiries and pre-contractual steps (Art. 6(1)(b) GDPR) — handling messages sent through the contact form or email.
- Operating and securing the website (Art. 6(1)(f) GDPR — legitimate interests) — hosting, security, abuse prevention, troubleshooting, and limited analytics necessary to run the service.
- Compliance with legal obligations (Art. 6(1)(c) GDPR) — where applicable, e.g. tax, accounting, or responding to lawful requests from public authorities.
- Direct marketing related to our own similar services — only if you have given consent (Art. 6(1)(a) GDPR) or where soft opt-in is permitted by law; we do not use the contact form to add you to marketing lists without a clear opt-in.
4. How long we keep data
We retain personal data only as long as necessary for the purposes above, including:
- Enquiry data: typically for the duration of the conversation and any follow-up business relationship, unless a longer period is required for legitimate interests (e.g. dispute resolution) or by law.
- Logs and security records: for a limited period consistent with industry practice and our hosting configuration.
- Legal / financial records: as required by applicable Polish or EU retention rules.
5. Recipients and subprocessors
We use trusted service providers who process data on our behalf under appropriate agreements (including GDPR Article 28 where required), such as:
- Hosting and infrastructure — to deliver the website and related services (e.g. deployment platform, CDN).
- Database and backend services — to store form submissions and related records securely.
- Email delivery — to send and receive messages (including transactional notifications related to your enquiry).
We may also disclose data if required by law or to protect our rights, users, or the public, where such disclosure is proportionate and lawful.
6. Transfers outside the European Economic Area (EEA)
Where personal data is transferred to countries not covered by an EU adequacy decision, we ensure appropriate safeguards under GDPR Chapter V (for example EU Standard Contractual Clauses and supplementary measures where required). You may request further information about such transfers by contacting us.
7. Your rights
Under GDPR, you have the right to:
- Access your personal data and obtain a copy (Art. 15);
- Rectify inaccurate data (Art. 16);
- Request erasure (“right to be forgotten”) in certain cases (Art. 17);
- Restrict processing in certain cases (Art. 18);
- Data portability, where applicable (Art. 20);
- Object to processing based on legitimate interests (Art. 21);
- Withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal (Art. 7(3)).
You may exercise these rights by emailing hello@neution.studio. You also have the right to lodge a complaint with a supervisory authority. In Poland, this is the President of the Personal Data Protection Office (UODO) — uodo.gov.pl.
8. Cookies and similar technologies
Our website may use cookies, local storage, or session storage for essential functions (for example remembering language-related preferences during your visit) and, where applicable, for analytics or performance measurement. You can control cookies through your browser settings; blocking some cookies may affect site behaviour.
Where non-essential cookies or similar tools are used, we will rely on consent or another valid legal basis as required by the ePrivacy rules and national implementation.
9. Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or alteration. No method of transmission over the Internet is 100% secure; we encourage you to use secure channels when sending confidential information.
10. Children’s data
Our services are not directed at children under 16 (or the age required by local law). We do not knowingly collect children’s personal data through the website. If you believe we have received such data, please contact us and we will delete it where required.
11. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The current version will always be published on this page with an updated effective date. We encourage you to review it periodically.
12. Contact
For any questions about this Privacy Policy or our processing of personal data, contact us at hello@neution.studio.