Privacy Policy

1. Introduction

Welcome to Ponad Sp. z o.o. ("Ponad", "we", "us", or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

We are committed to protecting your personal data and respecting your privacy. Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access our website or use our services.

2. Data Controller

The data controller responsible for your personal data is:

3. Information We Collect

We collect information that you provide directly to us, including:

• Contact Information: Full name, email address, company name
• Business Information: Budget range, project requirements, scheduling preferences
• Communication Data: Messages, emails, and other correspondence you send to us
• Technical Data: IP address, browser type, operating system, timezone, and referring URLs

We automatically collect certain technical information when you visit our website, including your IP address, browser type, and pages visited. This information is collected through cookies and similar technologies.

4. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your inquiries and schedule qualification calls
• To provide, maintain, and improve our services
• To send you updates, marketing communications, and promotional materials (with your consent)
• To analyze website usage and optimize user experience
• To comply with legal obligations and protect our rights
• To detect, prevent, and address technical issues or fraudulent activities

5. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Consent: When you submit a contact form or subscribe to our communications
• Contractual Necessity: To perform services you have requested or to take steps before entering into a contract
• Legitimate Interests: To improve our services, ensure security, and conduct business analytics
• Legal Obligation: To comply with applicable laws and regulations

6. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

• Service Providers: Third-party vendors who assist us in operating our website, conducting our business, or providing services to you (e.g., email services, analytics providers)
• Legal Requirements: When required by law, court order, or governmental authority
• Business Transfers: In connection with a merger, acquisition, or sale of assets

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Contact form submissions are retained for up to 3 years unless you request earlier deletion. Technical logs are retained for up to 12 months.

8. Your Rights

Under GDPR and applicable data protection laws, you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restriction: Request restriction of processing of your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at privacy@ponad.dev. We will respond to your request within 30 days.

9. Cookies

We use cookies and similar tracking technologies to enhance your experience on our website. Cookies are small text files stored on your device that help us analyze website traffic and improve our services.

You can control cookies through your browser settings. However, disabling cookies may affect the functionality of certain features on our website.

10. International Data Transfers

Your information may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or other legally recognized mechanisms.

11. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

12. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us, and we will take steps to delete such information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

You also have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement. In Poland, the supervisory authority is the President of the Personal Data Protection Office (UODO).