Privacy policy

Data controller

The data controller is KPI Tech Sp. z o.o., seated in Warsaw, ul. Puławska 39 / 78, 02-508 Warsaw, Poland, KRS 0001206088, NIP 5214141344, REGON 543277681.

For anything concerning personal data, write to hi@kpitech.pl. We answer the same business day.

What data we collect and what for

Without your consent the website stores no cookies and collects no personal data. The only thing the browser remembers is your decision about analytics, kept in local storage, not in a cookie.

You give us data only when you book a demo through the Sufler chat: your first and last name, phone number, email address and the slot you chose. We use them for one purpose: to confirm the slot and hold the conversation about the platform. The legal basis is taking steps at your request before entering into a contract (art. 6(1)(b) GDPR) and our legitimate interest in answering an enquiry (art. 6(1)(f) GDPR).

Questions you ask Sufler in conversation mode go to a language model for the sole purpose of generating an answer. We do not ask for personal data in them and we do not link them to your identity.

The server keeps standard technical logs (IP address, request time, page address) for security and abuse prevention. The logs do not contain the content of chat submissions.

Analytics and cookies

If you give consent, we run Google Analytics 4 to know how many people visit the site and which pages they read. The tool then stores cookies and transfers data to Google Ireland Limited, with the IP address truncated. The legal basis is your consent (art. 6(1)(a) GDPR).

Without consent the Google script does not load at all, so no connection to their server is made. You can withdraw consent at any time with the „Analytics consent” link in the footer, exactly as easily as you gave it. Withdrawal works going forward and does not affect the lawfulness of processing before it.

We keep statistical data in Google Analytics for fourteen months. We do not join it with data from demo bookings and we do not use it for advertising or profiling.

Who we pass data to

A demo booking goes into our CRM, where the people responsible for customer contact work. Access is limited to employees and contractors of KPI Tech bound by a duty of confidentiality.

We use hosting and email providers acting on our instructions under data processing agreements. We do not sell data and we do not make it available for other companies marketing.

How long we keep data

We keep the data from a demo booking for as long as it takes to arrange and hold the conversation, and then for 12 months from the last contact, in case of further questions. If we sign a contract, the data moves into the cooperation records and follows their retention periods.

Technical server logs are deleted after 90 days.

Your rights

You have the right to access your data, to rectify it, to erase it, to restrict processing, to data portability, and to object to processing based on legitimate interest. An email to hi@kpitech.pl is enough.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland.

Security

Data sent through the website is encrypted in transit. Access to the CRM requires a company account with multi-factor authentication. How we approach data security in our platform is described on the Security page.

Changes to this policy

We announce changes on this page, with a new effective date. We send previous versions on request.

Language of this document

This is a translation provided for convenience. In case of any discrepancy, the Polish version of this policy, available at kpitech.pl/polityka-prywatnosci, is the binding one.