1. Data controller
The controller of your personal data is RedPulse Innovations Dawid Adamski, based at al. Ratuszowa 14 lok. 2, 88-100 Inowrocław, Kuyavian-Pomeranian Voivodeship, Poland, Tax ID (NIP): 5562805527, Business registry (REGON): 526676500 (hereinafter: "Controller" or "RedPulse Innovations").
For any matters related to personal data processing you can reach us at kontakt@redpulse.tech.
2. Scope of collected data
We only collect data necessary to deliver our services:
- Contact data — when you email kontakt@redpulse.tech or book a consultation through Calendly: first name, last name, email, optionally company name and message content.
- Server log technical data — standard nginx access logs (IP address, User-Agent, requested URL, date and time, response code). Logs are not written to a file — they go to the Docker container's stdout and are kept only within the container's lifecycle. They are discarded on the next deployment or container restart. They are not exported, not analyzed with any analytics tools, and not combined with other data. We use them only for ad-hoc security and stability diagnostics.
3. Purposes and legal basis for processing
- Answering inquiries / running consultations — Article 6(1)(b) GDPR (performance of a contract or pre-contractual steps).
- Direct marketing of our own services — Article 6(1)(f) GDPR (legitimate interest of the Controller).
- Compliance with legal obligations (accounting, tax) — Article 6(1)(c) GDPR.
4. Recipients of data
Your data may be shared with trusted processors:
- Calendly, Inc. — scheduling service (server in the USA, transfer based on Standard Contractual Clauses).
- mikr.us — service operated by UW-TEAM.ORG Jakub Mrugalski (Polish tax ID 6821639338, Słomniki, Poland); hosting of the website and email inbox. Servers are physically located in Finland (Helsinki), i.e. within the European Economic Area.
- LinkedIn Ireland Unlimited Company — if you contact us via LinkedIn.
With each processor we have a Data Processing Agreement (DPA) in place as required by Article 28 GDPR.
5. Retention period
- Inquiry data that did not lead to an engagement — up to 12 months.
- Client data — for the duration of the contract and 6 years afterwards (tax obligations).
6. Your rights
Regarding our processing of your data you have the right to:
- access your data and obtain a copy,
- rectify inaccurate data,
- erase your data ("right to be forgotten"),
- restrict processing,
- data portability,
- object to processing,
- withdraw consent at any time (without affecting the lawfulness of processing before withdrawal),
- lodge a complaint with the Polish Data Protection Authority (uodo.gov.pl).
To exercise these rights, email us at kontakt@redpulse.tech.
7. Cookies
This site uses only strictly necessary cookies required for the site to work (e.g., remembering your cookie choice). They do not require consent and are not used for profiling.
We currently do not use any analytics or marketing cookies. If we introduce them in the future, we will update this policy and ask for your consent through the cookie banner — you will be able to withdraw it at any time from the cookie settings available in the footer.
8. Data transfers outside the EEA
Most of your data is processed in Poland (by RedPulse Innovations) and in Finland (mikr.us hosting servers) — both locations are within the European Economic Area, so full GDPR guarantees apply.
The exception is Calendly, Inc., based in the USA. For that transfer outside the EEA we rely on Standard Contractual Clauses approved by the European Commission.
9. Automated decision-making
We do not make automated decisions or profile you in ways that significantly affect your legal situation.
10. Changes to this policy
This policy may be updated. The current version with the last update date is always available at redpulse.tech/en/privacy-policy.