Privacy policy

1. Controller

The controller of your personal data is AQIRO sp. z o.o., registered office: ul. Świeradowska 47, 02-662 Warsaw, Poland, KRS 0000856495, NIP (tax ID) 8952220919, REGON 386838913, share capital PLN 50,000.

Contact: www@aqiro.pl or by post to the registered office.

Data protection officer: Przemysław Niekrasz.
Contact: gdpr@aqiro.pl.

2. Purposes, data and legal bases

We process the data you give us in the contact form or in an e-mail (your name, e-mail address, phone number, company details and the content of your message) in order to:

• reply to your message and correspond with you;
• take steps before a possible contract;
• establish, pursue or defend claims.

The legal basis is Art. 6(1)(b) or (f) GDPR.

Messages sent through the form are stored in the WordPress admin panel.

Giving your data is voluntary, but without an e-mail address or another way to reach you we may not be able to reply.

3. Technical data and logs

Technical data such as your IP address, the date and time of the connection and information about your browser are processed to keep the site secure and working properly, on the basis of Art. 6(1)(f) GDPR.

The Wordfence security plugin, running on our server, records the IP addresses of failed logins to the site's admin panel and of blocked requests, and blocks suspicious addresses for a few hours. This protects the site against break-ins (Art. 6(1)(f) GDPR).

Server logs are kept for 12 months and then deleted or overwritten, unless keeping them longer is necessary to handle an incident or a claim.

4. Spam protection of the form (Google reCAPTCHA)

The contact form is protected by Google reCAPTCHA, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). It checks whether the form is filled in by a person rather than a bot. For this, Google processes, among other things, the IP address, browser and device information and data on how the site is used (such as cursor movements and time spent on the page), and may store cookies on the device.

The legal basis is our legitimate interest in protecting the site and the form against spam and abuse (Art. 6(1)(f) GDPR). Data may be transferred to Google LLC in the USA; the transfer is based on the European Commission's decision on the EU–US Data Privacy Framework (Google LLC participates in it).

More: Google Privacy Policy and Google Terms of Service.

5. Recipients and transfers

Data may be shared with:

• cyber_Folks S.A. — hosting and e-mail (Zenbox);
• Microsoft — for Microsoft 365;
• Google Ireland Limited and Google LLC — spam protection of the form (reCAPTCHA);
• companies providing technical support for the site and e-mail;
• authorised public authorities.

Data may be processed outside the European Economic Area in connection with Microsoft 365 or Google reCAPTCHA. Any such transfer is based on a mechanism compliant with Chapter V GDPR.

The site's fonts are stored on our server; the site does not load them from Google.

6. Cookies

The site uses only technical cookies necessary for it to work, including Google reCAPTCHA cookies that protect the form against spam. We do not use analytics or advertising cookies. The site does not offer logging in, registration or comments.

7. Retention

We keep correspondence data for as long as the matter is being handled and then until any claims are time-barred. If a contract is concluded, we keep the data in line with the rules for contract records and our legal obligations.

8. Your rights

You have the right to:

• access your data and receive a copy of it;
• rectification;
• erasure;
• restriction of processing;
• data portability, where the GDPR provides for it;
• object to processing based on legitimate interest.

Send requests to www@aqiro.pl.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa, Poland, uodo.gov.pl.

9. Profiling

We make no decisions about users based solely on automated processing and we do no profiling.

10. Updates

This policy may be updated when the way we process data, our services or the site's features change.

Effective from: 14 October 2026