Skip to content

GDPR

Privacy policy

How we process personal data submitted via the contact form and email — in plain language, per Article 13 GDPR.

Updated:

Data controller

The controller of your personal data is Semitora (Polish tax ID/NIP 7842231011). For any matter concerning personal data, write to kontakt@semitora.com.

What data we process and where it comes from

We process only the data you give us yourself: via the contact form (name, company, email address, industry and the message) or by writing directly to our email address. Providing data is voluntary, but without an email address we cannot reply.

We do not collect data about you from other sources and we run no marketing analytics on this site.

Purposes and legal bases

We process form data to answer your enquiry and continue the correspondence — including steps taken before a potential contract (Article 6(1)(b) GDPR).

We may also process data under our legitimate interest (Article 6(1)(f) GDPR): protecting the form against abuse and establishing or defending potential legal claims.

By ticking the consent box next to the form you consent to the processing of your data in order to answer your enquiry (Article 6(1)(a) GDPR). You can withdraw consent at any time — by email to kontakt@semitora.com — without affecting the lawfulness of processing before its withdrawal.

On-site chat

The site runs an AI-based chat that answers questions about our services. The conversation content is sent to our AWS cloud infrastructure solely to generate a reply. The chat session identifier is kept in the browser session storage (sessionStorage) and disappears when the tab is closed. Please do not enter personal data in the chat — use the form or email to get in touch.

Who we entrust data to

A form message is processed in our AWS cloud infrastructure (Frankfurt region, eu-central-1) and delivered to our mailbox operated by an external email provider. The form is protected against bots by Cloudflare Turnstile, which processes technical browser data for that purpose; Cloudflare may also process that data outside the EEA, relying on standard contractual clauses and the EU-US Data Privacy Framework.

We do not sell data, do not share it with other parties for marketing, and make no automated decisions or profiling about you.

How long we keep data

We keep correspondence for as long as needed to handle the enquiry and the conversation that follows, and afterwards no longer than the limitation period for potential legal claims.

Your rights

You have the right to access your data, rectify it, erase it, restrict processing, data portability, to object to processing based on legitimate interest, and to withdraw consent at any time. An email to kontakt@semitora.com is enough.

You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (uodo.gov.pl).

Cookies and local storage

The site uses no analytics or marketing cookies. We store your language preference: the "slang" cookie (valid 12 months, used to pick the language version) and a "semitora-lang" entry in your browser's local storage, plus — when you use the chat — a technical session identifier in session storage, removed when the tab closes. On the contact page, Cloudflare Turnstile may set its own technical cookie required for bot verification.