Privacy policy.

2. What data we collect

Through this website's contact form:

• name (required)
• email address (required)
• message content

The hosting provider, Netlify, also records technical server logs: IP address, user agent, request time and path. We do not use these data to profile users.

3. Purposes and legal bases

• Responding to a quote enquiry and preparing a potential contract (Article 6(1)(b) GDPR, pre-contractual steps).
• Following up on an enquiry (Article 6(1)(f) GDPR: the controller’s legitimate interest in maintaining business relationships).
• Issuing and retaining invoices (Article 6(1)(c) GDPR: a legal obligation under the Accounting Act).
• Server security (Article 6(1)(f) GDPR: a legitimate interest in protection against attacks).

4. Who processes data on our behalf

• Netlify, Inc. (San Francisco, USA): website hosting and receipt of form submissions. Transfers to the USA are based on Standard Contractual Clauses and the Data Privacy Framework. Netlify's policy.
• The email provider serving hello@lertigo.com, solely for correspondence.
• Umami Software, Inc.: anonymous website traffic statistics. The tool does not collect personal data and processes events on servers in the European Union. Umami privacy policy.
• Data may be shared with entities authorised by law, such as public authorities.

5. How long we keep data

• Sales enquiries: up to 24 months after the last contact.
• Client data after signing a contract: 5 years from the end of the financial year (tax obligations).
• Server logs: in line with Netlify’s policy (usually 30 days).

6. Your rights

You have the right to access, rectify and erase your data, restrict processing, receive your data in a portable format, object to processing and lodge a complaint with the President of the Polish Personal Data Protection Office.

A full description of these rights is available on the GDPR.

7. Cookies and analytics

Website does not use cookies for marketing or analytics. We do not use Google Analytics, Meta Pixel or similar tracking tools.

We measure visits using Umami. It stores nothing on your device and does not identify you. We see aggregate information about pages visited, referral sources, device types and the number of form submissions. Umami anonymises data when collecting it and processes it on servers in the European Union, so these statistics do not require your consent or a cookie banner.

The website itself does not store any cookies on your device, including technical cookies: its anti-spam protection works without storing anything in your browser. That is why we do not display a cookie banner. The consent requirement under Article 399 of Poland’s Electronic Communications Law applies to websites that store information on a user’s device, which we do not do.

8. Changes to this policy

We may update this policy when the data we handle or the tools we use change. Each significant change is reflected in the version number and date at the start of this document.