Privacy policy
This is an English translation provided for convenience. In case of any discrepancy, the Polish version is binding.
This privacy policy explains what personal data we collect through the velocy.co website, for what purpose, how long we store it, and what rights you have. We apply the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Polish law.
1. Data Controller
The controller of your personal data is VELOCY spółka z ograniczoną odpowiedzialnością (a Polish limited liability company), with its registered office in Warsaw, Aleje Jerozolimskie 109/70, 02-011 Warsaw, Poland, entered in the register of entrepreneurs of the National Court Register (KRS) under number KRS 0001254879, NIP 7011323443 (Polish tax ID), REGON 545299735 (Polish statistical number) (hereinafter: the “Controller” or “we”).
For matters concerning personal data, you can contact us in writing at our registered office address or through contact form.
2. What data we collect
- Data from the contact form: first and last name, e-mail address, phone number (optional), company name or website address (optional), and the content of the message.
- Data from correspondence: data you provide to us in an e-mail message or during a conversation.
- Technical data: IP address, information about your browser and device, recorded automatically in server logs.
- Data from cookies and similar technologies: as described in point 8, only after you give consent where consent is required.
3. Purposes and legal bases for processing
- Responding to your inquiry and contacting you about our offer: Art. 6(1)(b) GDPR (steps taken at your request prior to entering into a contract) and Art. 6(1)(f) GDPR (our legitimate interest, namely responding to your message).
- Entering into and performing a contract, if you decide to work with us: Art. 6(1)(b) GDPR.
- Legal obligations, including accounting and tax obligations: Art. 6(1)(c) GDPR.
- Establishing, pursuing, or defending claims: Art. 6(1)(f) GDPR.
- Ensuring the security and proper functioning of the website: Art. 6(1)(f) GDPR.
- Statistics and marketing (traffic analytics, remarketing, measuring advertising effectiveness): Art. 6(1)(a) GDPR, that is, your consent given through the cookie banner. You may withdraw your consent at any time.
4. Recipients of data
Your data may be shared with entities that process it on our behalf and support us in running our business, in particular:
- hosting and server providers (Hostinger),
- e-mail and office tool providers (Google),
- providers of customer relationship management (CRM) tools and internal communication tools,
- providers of analytics and advertising tools (Google, Meta, TikTok, OpenAI), only to the extent you consent to,
- accounting office and legal advisors, where necessary.
We enter into data processing agreements with entities that process data on our behalf. Data may also be disclosed to public authorities where required by law.
5. Transfer of data outside the European Economic Area
Some tool providers (e.g., Google, Meta) may process data outside the European Economic Area, including in the United States. In such cases, the transfer takes place on the basis of a European Commission adequacy decision (the EU-US Data Privacy Framework) or standard contractual clauses approved by the European Commission.
6. How long we store data
- Data from an inquiry that did not result in a contract: up to 12 months from the last contact.
- Data related to a contract: for the duration of the contract, and afterward until the expiry of the statute of limitations for claims.
- Data required by tax and accounting regulations: for the period specified in those regulations, generally 5 years from the end of the tax year.
- Data processed on the basis of consent: until the consent is withdrawn.
- Server logs: no longer than 12 months.
7. Your rights
You have the right to:
- access your data and receive a copy of it,
- rectify your data,
- erase your data,
- restrict processing,
- data portability,
- object to processing based on our legitimate interest,
- withdraw your consent at any time, without affecting the lawfulness of processing carried out before its withdrawal,
- lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland).
To exercise your rights, contact us as described in point 1.
Providing your data is voluntary, but without it we will not be able to respond to your inquiry. We do not make decisions about you based solely on automated processing, including profiling, that would produce legal effects or similarly significantly affect you.
8. Cookies
The website uses cookies, that is, small files stored on your device. We use them for the following purposes:
- Necessary: ensure the website functions properly and securely, for example by remembering your choices in the cookie banner. These do not require consent.
- Statistical: help us understand how you use the website (e.g., Google Analytics). We use these only after you give consent.
- Marketing: used to display advertisements and measure their effectiveness (e.g., Google Ads, Meta Pixel, TikTok Pixel). We use these only after you give consent.
You can change your choices at any time in the cookie settings available on the website. You can also manage cookies in your browser settings. Disabling necessary cookies may make it difficult to use the website.
9. Changes to the privacy policy
We may update this policy, for example in connection with changes to applicable law or to the tools we use. The current version is always available on this page.
Last updated: September 28, 2026.