Privacy policy

Controller and contact

Coretos is operated by the company identified above. The company controls personal data submitted through this website. For privacy requests use the email or registered address above.

Privacy questions: privacy@coretos.com. Data protection rights: gdpr@coretos.com or rodo@coretos.com for correspondence in Polish. Questions about our published policies: policy@coretos.com.

Data and purposes

The form collects your name, email and message, and, if you provide them, company, project type, scope, budget and timeline. It sends the page and language. Email correspondence includes information you choose to share. Hosting and security systems process technical request data such as IP address, browser, URL and time. We use these data to answer enquiries, discuss projects, operate and protect the website, and address complaints or claims.

Legal bases

Steps towards a contract with you rely on GDPR Article 6(1)(b). Business correspondence with company representatives, site security and protection of claims rely on our legitimate interests under Article 6(1)(f) in running and improving our business and protecting our systems. Legal duties rely on Article 6(1)(c). Sending an enquiry does not subscribe you to marketing.

Recipients and international processing

Vercel hosts the site and provides analytics; Resend delivers form messages; Google handles business email and serves fonts to browsers. Google Fonts receives technical connection data, including IP addresses. Authorised staff, necessary professional advisers and authorities entitled by law may also receive data. Providers may process information outside the EEA, including in the United States. Their data-processing terms provide safeguards such as standard contractual clauses; adequacy decisions may apply where their conditions are met. Contact us for information about the safeguards applicable to your data and a copy.

Analytics and cookies

Audience measurement is optional and runs only after your consent (GDPR Article 6(1)(a)). Vercel Web Analytics measures visits and selected interactions without analytics cookies, using temporary request-derived identifiers. Statistics can include page, referrer, country, browser and device type; we do not send your name, email or message in analytics events. You can reject measurement or withdraw consent at any time through Cookie settings in the footer. The necessary coretos_consent cookie remembers your choice for 180 days. Technical hosting and security logs are separate from optional analytics.

Retention

We keep enquiries while handling the request and related active discussions. Afterwards we retain only records needed to comply with law or establish, exercise or defend claims for the applicable period. Technical records remain as long as needed for operation, incident investigation and security under relevant provider settings. Data are deleted or anonymised when these purposes end.

Your rights and choices

Providing information is voluntary; name, email and message are needed to answer via the form. Other fields are optional. Do not send identity documents, private keys or unnecessary sensitive data. We do not make decisions with legal or similarly significant effects based solely on automated processing of enquiries. Subject to legal conditions, you may request access, correction, erasure, restriction and portability, and object to processing based on legitimate interests. You can complain to your data-protection authority or the Polish President of the Personal Data Protection Office at uodo.gov.pl.

Ask Coretos AI assistant

If you use Ask Coretos, your messages and recent conversation context are sent through Vercel AI Gateway to Google to generate a reply based on our published services. Avoid confidential details, passwords, private keys and sensitive personal data. Answers are automated and may contain mistakes; project scope and pricing are confirmed by our team.

The conversation stays in memory while the panel is open. A necessary, secure session cookie lasts up to 30 minutes. If you choose to continue to the contact form, the conversation is temporarily held in your browser session storage, copied into the message field for your review and then removed. It is not sent to our team until you submit the form. We store limited technical records, including daily pseudonymous identifiers, session markers and budget reservations, to prevent misuse and control costs; these do not contain conversation text or raw IP addresses. Vercel and the AI provider process request data under their applicable service terms and data-processing arrangements.

Changes

We update this notice when our processing changes. The date above identifies this version. See the website terms.

Website terms

Company details