Privacy Policy

Last updated: July 1, 2026

This Privacy Policy explains how Apptivity sp. z o.o. processes the personal data of users of the website available at www.apptivity.pl (the "Website"), in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the "GDPR").

1. Data controller

The controller of your personal data is:

Apptivity sp. z o.o. ul. Podole 60, 30-394 Kraków, Poland KRS: 0001168563, VAT (NIP): 6762692212, REGON: 541513315

For any matters relating to the protection of personal data, you can contact us at: kontakt@apptivity.pl.

2. Scope and purposes of processing

We process personal data for the following purposes and on the following legal bases:

  • Handling contact form enquiries (name, e-mail address, message content) — to respond and correspond with you. Legal basis: Art. 6(1)(a) GDPR (consent) and Art. 6(1)(f) GDPR (the controller's legitimate interest in handling enquiries).
  • Scheduling meetings and consultations via the Calendly tool — to book a call. Legal basis: Art. 6(1)(b) GDPR (steps taken prior to entering into a contract) and Art. 6(1)(f) GDPR.
  • Analytics and statistics (usage data collected through cookies) — to understand how users interact with the Website and to improve it. Legal basis: Art. 6(1)(a) GDPR (consent given via the cookie banner).
  • Security (protecting the form from spam and abuse using Cloudflare Turnstile) — legal basis: Art. 6(1)(f) GDPR.

Providing your data is voluntary but necessary to use the contact form or to book a meeting.

3. Data recipients

Personal data may be shared with trusted processors that support us in operating the Website, only to the extent necessary and under data processing agreements:

  • Microsoft Corporation (hosting and data storage — Microsoft Azure, sending e-mails),
  • Google Ireland Limited (analytics — Google Analytics 4, only after consent),
  • Calendly LLC (meeting scheduling),
  • Cloudflare, Inc. (form spam protection — Turnstile).

4. Transfers outside the EEA

Some of the providers above are located or process data outside the European Economic Area (including the United States). Such transfers are carried out on the basis of Standard Contractual Clauses approved by the European Commission or other mechanisms ensuring an adequate level of data protection in accordance with Chapter V of the GDPR.

5. Data retention

  • Correspondence data is kept for as long as necessary to handle the enquiry and for the limitation period of any potential claims, no longer than 3 years.
  • Analytics data is retained for the period indicated in the analytics provider's policy, no longer than 26 months.
  • Your cookie consent (and its withdrawal) is remembered for up to 12 months.

6. Your rights

In connection with the processing of your data, you have the following rights:

  • the right to access your data and obtain a copy of it,
  • the right to rectify (correct) your data,
  • the right to erasure ("right to be forgotten"),
  • the right to restrict processing,
  • the right to data portability,
  • the right to object to processing,
  • the right to withdraw consent at any time (without affecting the lawfulness of processing carried out before its withdrawal),
  • the right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).

To exercise these rights, write to us at kontakt@apptivity.pl.

7. Cookies

The Website uses cookies. For detailed information about the types of cookies used and how to manage your consent, please see our Cookie Policy.

8. Automated decision-making

Personal data is not used for automated decision-making, including profiling that produces legal effects.

9. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy. The current version is always published on the Website together with the date of its last modification.