This policy explains how Aminer sp. z o.o. processes the personal data of people who use aminer.pl and contact us. How we process data obtained from public registers is described separately in the notice on public register data. The Polish version of this policy prevails in case of discrepancies.
1. Controller
The controller is Aminer sp. z o.o., registered office: Dawidy Bankowe, ul. Widok 8, 05-090 Raszyn, Poland, entered in the register of entrepreneurs of the National Court Register (KRS) under number 0000844699.
For personal data matters, write to rodo@aminer.pl. We have not appointed a data protection officer because the scope of our business does not require one.
2. Purposes and legal bases
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Replying to a message sent through the form or by email | Name, email, company, message content | Legitimate interest: answering the enquiry (Art. 6(1)(f) GDPR) | Until the matter is closed, then 12 months |
| Preparing an offer and performing a contract | Client contact persons’ data | Steps prior to entering into a contract and its performance (Art. 6(1)(b) GDPR); for client contact persons, legitimate interest (Art. 6(1)(f) GDPR) | For the term of the contract and the limitation period for claims |
| Accounting and tax obligations | Data on invoices and settlement documents | Legal obligation (Art. 6(1)(c) GDPR) | For the period required by tax and accounting law |
| Website security and protecting the form from bots | IP address, technical browser data, server logs | Legitimate interest: service security (Art. 6(1)(f) GDPR) | Short periods set by the hosting provider |
| Visit statistics | Aggregated technical data, no cookies | Legitimate interest: improving the website (Art. 6(1)(f) GDPR) | In aggregated form |
| Establishing, pursuing and defending claims | Data needed to prove a claim or defence | Legitimate interest (Art. 6(1)(f) GDPR) | Until the limitation period expires |
Providing data in the form is voluntary, but we cannot reply without your name, email address and message.
We do not take decisions about you based solely on automated processing, including profiling. We do not send marketing messages without your consent.
3. Recipients
Data may be received by providers who act on our instructions:
- the hosting, content delivery and bot protection provider (Cloudflare),
- the email provider and the service that sends messages from the form,
- our accounting office and legal and tax advisers, to the extent needed for their services.
We sign data processing agreements with service providers. Legal and tax advisers process data under their own professional obligations.
4. Transfers outside the European Economic Area
Cloudflare, Inc. is based in the United States. Where data is transferred to the US, the transfer relies on the European Commission adequacy decision (EU–US Data Privacy Framework) or standard contractual clauses. You can obtain a copy of these safeguards by writing to rodo@aminer.pl.
5. Your rights
You have the right to:
- access your data and receive a copy,
- have your data rectified,
- have your data erased,
- restrict processing,
- data portability for data processed under a contract,
- object to processing based on legitimate interest,
- lodge a complaint with the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw, Poland).
To exercise these rights, write to rodo@aminer.pl. We will reply within one month.
6. Cookies and similar technologies
The website does not use analytics or advertising cookies and does not track you on other websites, so we do not show a consent banner.
- Statistics. We use Cloudflare Web Analytics, which counts visits without cookies or user identifiers.
- Form protection. The form uses Cloudflare Turnstile. It analyses technical browser signals to tell people from bots and serves only to protect the form.
- Attack protection. The hosting provider may store a file needed to protect the website from bots and attacks. Such files do not require consent because they are necessary for the service to work.
You can delete or block cookies at any time in your browser settings. If we add tools that require consent, we will ask for it before they run.
7. Security
The website is available only over encrypted HTTPS. We apply technical and organisational measures appropriate to the risk, including access control and two-factor authentication on the accounts used to manage the website.
8. Changes
We update this policy when our services or the law change. The current version is always available on this page, dated at the top.