Privacy policy

The controller of personal data collected through soft-solid.net is SoftSolid, ul. Sportowa 14, 62-090 Rokietnica, Poland, VAT ID PL8421361047. For any matter concerning personal data write to office@soft-solid.net or call +48 661 661 964. We have not appointed a data protection officer, so all requests are handled at the same address.

The same company runs the cs-cart.pl site. It is a single legal entity with the same VAT ID, but each site has its own privacy policy because each collects data differently. This document covers soft-solid.net only.

The contact form asks for your name, e-mail address, optionally a company name, and the message itself. That data goes into a single e-mail sent to our company address. We do not store it in any database on the site and we do not build a mailing list from it. We reply to the address you provide, and processing ends there unless the exchange turns into a business conversation.

The form is protected against spam without any third-party service, but that protection requires a few technical details. The limit on submissions from one address relies on a hash of the IP address kept in a temporary file for ten minutes. Submissions rejected by the filters go into a diagnostic log together with the IP address, the browser header and a shortened fragment of the message; the log is deleted once it exceeds 256 kilobytes and exists only so we can check that the filter is not eating genuine enquiries.

If you write to us directly by e-mail or call us, we process whatever data you include in that correspondence. The server hosting the site also keeps standard access logs with the IP address and browser header, as every web server does.

Answering your enquiry and any further conversation about a deployment rests on Article 6(1)(b) GDPR, that is steps taken at your request before entering into a contract. Spam protection, server logs and defence against abuse rest on Article 6(1)(f) GDPR, our legitimate interest in keeping the site working and secure. Traffic and advertising measurement runs solely on your consent under Article 6(1)(a) GDPR, which you can withdraw at any time.

We keep enquiry correspondence for as long as the conversation lasts and afterwards for the limitation period of possible claims, no longer than three years from the last contact. Data from the anti-spam mechanisms is short-lived: the IP hash for ten minutes, the rejection log until it exceeds its size limit. If you become our client, accounting documents are kept for the period required by tax law.

The site itself is static and needs no cookies to work. Google Analytics 4 and Google Ads scripts are loaded only after you accept them in the banner at the bottom of the screen. Until then no Google script is loaded, so no analytics or advertising cookies are created either.

Your choice is stored in the browser's local storage under the key ss-consent. It is not a cookie and it is never sent to our server; it exists only so the banner does not ask the same question on every visit. You can withdraw consent by clearing site data in your browser settings, which restores the state from before your decision and shows the banner again.

While consent is active we measure traffic and advertising performance, including the event of clicking a phone number or an e-mail address. We do not combine that data with the content of your enquiry and we do not profile visitors in a way that would produce legal effects concerning them.

We do not sell data and we do not share it for marketing purposes with anyone. By the nature of things it is accessible to the providers without whom the site and the mailbox would not run: the company hosting the server that carries the site and the company mailbox, and our accounting office if the contact turns into paid work and an invoice. Each of them operates under a data processing agreement.

If you consent to analytics, Google Ireland Limited also becomes a recipient, and data may be transferred to the United States under the Data Privacy Framework. Without your consent that channel is never activated. Beyond the cases listed above, data does not leave the European Economic Area.

You have the right to access your data and receive a copy of it, to rectify inaccurate data, to erasure, to restriction of processing and to data portability. You may object to processing based on our legitimate interest, and you may withdraw consent to analytics at any time without affecting the lawfulness of what happened before.

To exercise any of these rights, a message to office@soft-solid.net is enough. We respond without undue delay and at the latest within one month. If you believe we process data unlawfully, you may lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland.

Providing data in the form is voluntary, but without a name, an e-mail address and a message we have no way to answer an enquiry. We do not make decisions based solely on automated processing.

If we change the way data is collected on this site, for instance by launching a new measurement tool or altering how the form works, we will update this document and the date at the top. We do not publicly archive previous versions, so if you need the wording in force on a specific day, write to us and we will reconstruct it.