1. Data controller
The controller is Flamingo Software Robert Jankowski, Gdańsk, ul. Angielska Grobla 34/35, 80-756, Poland. Contact: info@flamingosoftware.pl.
2. Data we process
When you use the contact form, we process the name, email address, subject, message and any information you voluntarily include. The server may also process limited technical data such as IP address, request time, requested resource, browser identifier and error information needed to deliver and protect the website.
3. Purposes and legal bases
Contact data is used to answer your enquiry and take steps at your request before entering into a contract (Article 6(1)(b) GDPR), or on the basis of our legitimate interest in business communication and establishing or defending claims (Article 6(1)(f) GDPR). Essential technical logs are processed for security, reliability and abuse prevention under Article 6(1)(f) GDPR.
4. Recipients and hosting
Data may be accessible to authorised hosting, server administration and email service providers only where necessary. The website and its email service are operated on infrastructure used by the controller. We do not sell personal data.
5. Retention
Enquiries are kept only as long as necessary to respond, manage the resulting relationship and meet legal or claim-related obligations. Security and rate-limit records are retained for short operational periods. Data may be kept longer where required by law or necessary to establish, exercise or defend legal claims.
6. Contact form security
The form uses validation, a CSRF token, a honeypot and rate limiting. Messages are transmitted over HTTPS and delivered through the server's mail relay. No security measure can provide absolute protection.
7. Cookies and local storage
The site does not use analytics, advertising trackers or marketing cookies. A session cookie is used only to protect and operate the contact form. Your language preference may be stored locally in your browser. These mechanisms are functional and not used for profiling.
8. Your rights
Subject to applicable law, you may request access, correction, deletion, restriction, portability or object to processing based on legitimate interests. You may also lodge a complaint with the President of the Polish Personal Data Protection Office (UODO). Where processing is based on consent, it may be withdrawn without affecting earlier lawful processing.
9. Requirement to provide data
Providing contact details is voluntary, but without a valid return address and message we may be unable to answer. Please do not send special-category data or confidential credentials through the form.
10. Automated decisions and transfers
We do not use personal data from this site for automated decision-making or profiling. We do not intentionally transfer contact-form data outside the European Economic Area.
11. Changes
This policy may change when the website, legal requirements or processing practices change. The effective date above identifies the current version.