VELANTRAStart a project

Legal

Privacy Policy

Last updated: 17 August 2026

1. Who we are

The controller of your personal data is Velantra sp. z o.o., Puławska 145, 02-715 Warsaw, Poland (KRS 0001238175, NIP 5214162926). For any privacy matter, contact us at contact@velantra.co.

2. What data we collect

When you send an enquiry through the contact form, we process:

  • your name and email address;
  • your company name, project type, project stage and budget range, if you choose to provide them;
  • the project description you write;
  • a salted cryptographic hash of your IP address, used solely to prevent abuse of the form. The raw IP address is not stored and the hash cannot be reversed into it.

Browsing this website does not require an account and the public pages set no cookies. We use no analytics, advertising or tracking technologies. A single strictly necessary session cookie is used only in the private administration area, which is accessible only to Velantra staff.

3. Why we process it and on what legal basis

  • Responding to your enquiry and taking steps prior to entering into a contract — Article 6(1)(b) GDPR, and our legitimate interest in communicating with prospective clients — Article 6(1)(f) GDPR.
  • Preventing abuse of the contact form (rate limiting, spam filtering) — our legitimate interest under Article 6(1)(f) GDPR.
  • Complying with legal obligations that may apply to us — Article 6(1)(c) GDPR.

Providing your data is voluntary, but without it we cannot answer your enquiry.

4. How long we keep it

Contact enquiries are kept for up to 24 months from our last exchange with you, after which they are deleted. If the enquiry leads to a contract, data connected with that contract is kept for as long as the law requires (for example, accounting regulations). Abuse-prevention records (the hashed IP entries used for rate limiting) are deleted within 24 hours.

5. Who receives your data

We do not sell personal data and we do not share it for advertising. Your data is handled by a small number of service providers acting on our documented instructions as processors:

  • the hosting and database infrastructure providers that run this website and its enquiry storage;
  • Resend (an email delivery service), used only to notify us of your enquiry by email.

Where a provider processes data outside the European Economic Area, the transfer is protected by an adequacy decision or the European Commission’s Standard Contractual Clauses in accordance with Chapter V of the GDPR.

6. Your rights

Under the GDPR you have the right to:

  • access your data and receive a copy of it;
  • have inaccurate data rectified;
  • have your data erased;
  • restrict processing;
  • receive your data in a portable format;
  • object to processing based on our legitimate interests.

To exercise any of these rights, email contact@velantra.co. You also have the right to lodge a complaint with the Polish supervisory authority: Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.

7. No automated decision-making

We do not use your data for automated decision-making or profiling.

8. Changes to this policy

If we change how we process personal data, we will update this page and revise the date at the top. The current version always applies.

← Back to home