Privacy Policy
Effective date: October 30, 2025
Short version: We collect only what’s needed to reply to your messages and keep the website secure. We do not sell data, do not show ads, and do not profile users.
1) Who we are
2) What personal data we collect
Contact form data
- Name, email address, message content (what you manually submit).
- Optionally: company name or phone if you include them in the message.
Technical & security logs
- Server log entries (IP address, timestamp, URL, user-agent) for availability and abuse prevention.
- Mail server logs for delivery troubleshooting (no message content analysis).
We do not use advertising trackers or behavioral profiling. We currently do not run analytics scripts on this site.
3) Purposes & legal basis (GDPR)
- Replying to your inquiries — when you contact us via the form or email.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual/contract) or Art. 6(1)(f) GDPR (legitimate interest in responding). - Operating and securing the website & mail — uptime monitoring, error diagnosis, spam/abuse prevention.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in security and service continuity). - Legal compliance — fulfilling legal obligations (e.g., accounting, lawful requests).
Legal basis: Art. 6(1)(c) GDPR.
4) Data retention
- Contact form messages: retained for the time needed to reply and manage cooperation; thereafter archived only if necessary to protect rights or comply with law.
- Server and mail logs: typically retained for up to 90 days, unless longer is required to investigate incidents.
6) Security measures
- Transport encryption (HTTPS, TLS for mail where supported).
- Server hardening, firewalling, least-privilege access.
- Monitoring and log review for abuse/spam detection.
No method of transmission or storage is 100% secure, but we apply reasonable technical and organizational measures in line with industry practice.
7) International data transfers
Where data is transferred outside the European Economic Area, we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses (SCCs) to protect your data (Art. 46 GDPR).
8) Your rights (GDPR)
You have the right to request: access, rectification, erasure, restriction, data portability, and to object to processing based on legitimate interests. You may also lodge a complaint with a supervisory authority.
- How to exercise: email us at info@tech-brain.pl. We may verify your identity before actioning the request.
- Supervisory authority in Poland: President of the Personal Data Protection Office (UODO) — uodo.gov.pl.
10) Contact
For privacy requests and questions, contact us:
- Email: info@tech-brain.pl
- Address: al. Marszałka Edwarda Śmigłego-Rydza 40/70, 93-281 Łódź, Poland
- Controller: TechBrain Michał Trepto
TechBrain