Data controller
The data controller is INBOKS SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, a Polish limited liability company, with its registered office at ul. Jana Heweliusza 11 / 811, 80-890 Gdańsk, Poland. National Court Register (KRS): 0000887914; tax identification number (NIP): 5242915131; business register number (REGON): 388422950.
For personal data enquiries, including requests to correct or delete data, contact info@inboks.eu. You may also send a request to our registered office.
The data we process
The contact form collects your name, email address, telephone number and selected enquiry topic. The language of the form is included with your submission. If you continue the conversation by email or telephone, we also process the information you provide in that correspondence.
Technical service providers may process connection data, such as your IP address, request time and browser information, necessary to deliver the website and protect their services against misuse. Please do not submit sensitive data or information that is unnecessary for handling your enquiry.
Purposes and legal bases
We use contact form and correspondence data solely to communicate with you, respond to your enquiry and understand your requirements. We do not use it for newsletters or marketing.
General enquiries are handled under Article 6(1)(f) of the GDPR: our legitimate interest in responding to correspondence addressed to us. Where your enquiry concerns steps taken at your request before entering into a contract, Article 6(1)(b) of the GDPR applies.
Technical data necessary for the secure operation of the website is processed under Article 6(1)(f) of the GDPR: the legitimate interest in maintaining the availability and security of the website.
Providing data is voluntary
Providing personal data is voluntary. Fields marked as required are necessary to submit an enquiry through the form. Without them, the form cannot be sent. Alternatively, you can email info@inboks.eu directly.
Before submitting the form, you must select the checkbox accepting this privacy policy. This is not marketing consent or a basis for using your data for other purposes. The legal bases for handling your enquiry are explained above.
Retention periods
We retain data provided for contact purposes for the duration of the correspondence and resolution of the enquiry. Once the contact has ended, we delete it from the mailboxes and resources used to handle it. We do not maintain a contact database for marketing.
Deletion of correspondence by INBOKS does not immediately remove every technical copy held by service providers. EmailJS states that data on active accounts is retained for 30 days. Provider logs and technical copies are subject to their deletion cycles and retention policies; we do not use them for further contact or marketing.
If an enquiry results in a contract, information necessary to perform it or required by law is subject to separate purposes and retention periods, which we will explain when the engagement begins.
Who may process your data
We do not sell personal data or disclose it to other organisations for marketing or their own commercial activities. Access is limited to people authorised by INBOKS and providers that operate the website and correspondence services, to the extent necessary to provide those services.
We use EmailJS Pte. Ltd. to deliver form submissions to email, Google Gmail to receive and manage correspondence, and StackBlitz, Inc. Bolt Hosting to serve the website. The form sends data to EmailJS; it does not store submissions in a Bolt application database. Providers may use their own infrastructure suppliers.
Data may be disclosed to competent authorities where required by law. Information about these providers and their policies is available below.
Transfers outside the EEA
Using these providers may involve processing outside the European Economic Area, particularly in the United States. EmailJS identifies the USA as the location of its infrastructure and states that it uses European Commission Standard Contractual Clauses. Google describes its use of adequacy decisions and Standard Contractual Clauses, depending on the transfer concerned.
You can request information about transfer safeguards from info@inboks.eu. EmailJS safeguards are described in the data processing agreement linked above; information about Google is available at the link below.
Your rights and how to exercise them
Subject to the conditions set out in the GDPR, you have the following rights:
- Access your data and obtain a copy.
- Correct inaccurate data and complete incomplete data.
- Request erasure or restriction of processing where the relevant GDPR conditions are met.
- Object to processing based on legitimate interests on grounds relating to your particular situation.
- Receive and transfer data where it is processed by automated means on the basis of a contract or consent and the other GDPR conditions are met.
Send your request to info@inboks.eu. We respond without undue delay, normally within one month of receipt. If the complexity or number of requests requires an extension, we will explain the reasons and the revised deadline within that month. Where justified, we may request information necessary to verify your identity.
You may also lodge a complaint with the President of the Polish Personal Data Protection Office (UODO) if you believe that processing infringes the GDPR. We do not make decisions with legal or similarly significant effects on you solely by automated means, and we do not profile website users.
Policy updates
The current policy is available on this page. We will update it if the website functionality, processing activities or legal requirements change. The revision date is shown at the beginning of this document.
Contact us about your personal data
info@inboks.eu