§ 1. Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings assigned below:

1. Administrator - DEV INDUSTRY Kaj Białas, ul. Smolna 13D/90, 61-008 Poznań, NIP: 6662085145, REGON: 364072463
2. Service - the website operating under the domain dev-industry.com and all its subdomains
3. User - any natural person using the Service
4. GDPR - Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data
5. Personal Data - any information relating to an identified or identifiable natural person

§ 2. Data Controller

The Data Controller within the meaning of Article 4(7) of the GDPR is:

§ 3. Scope of Data Processing

The Administrator processes the following categories of personal data:

1. Website usage data collected through analytical tools and cookies
2. Information about cookie preferences and consent
3. Contact information provided voluntarily by the User
4. Technical data including IP address, browser type, and access logs

§ 4. Purposes of Data Processing

Personal data is processed for the following purposes:

1. Provision and operation of the Service in accordance with its intended functionality
2. Improvement of Service quality and user experience optimization
3. Statistical analysis of website traffic and user behavior patterns
4. Responding to inquiries and maintaining communication with Users
5. Compliance with legal obligations imposed on the Administrator
6. Ensuring security and preventing abuse of the Service

§ 5. Legal Basis for Processing

Personal data processing is based on the following legal grounds under Article 6 of the GDPR:

1. Article 6(1)(a) - User's consent for processing of analytical and marketing data
2. Article 6(1)(b) - Performance of a contract or taking steps at the request of the data subject prior to entering into a contract
3. Article 6(1)(c) - Compliance with a legal obligation to which the Administrator is subject
4. Article 6(1)(f) - Legitimate interests pursued by the Administrator, particularly ensuring Service security and functionality

§ 6. Data Retention Period

Personal data is retained for the following periods:

1. Data processed based on consent - until consent is withdrawn
2. Data processed for contract performance - for the duration of the contractual relationship and 6 years thereafter
3. Data processed for legal compliance - for the period required by applicable law
4. Data processed for establishment, exercise or defense of legal claims - until the expiration of the limitation period

§ 7. Data Subject Rights

Under the GDPR, Users have the following rights:

1. Right of access to personal data (Article 15 GDPR)
2. Right to rectification of inaccurate personal data (Article 16 GDPR)
3. Right to erasure ('right to be forgotten') (Article 17 GDPR)
4. Right to restriction of processing (Article 18 GDPR)
5. Right to data portability (Article 20 GDPR)
6. Right to object to processing (Article 21 GDPR)
7. Right to withdraw consent at any time (Article 7(3) GDPR)
8. Right to lodge a complaint with a supervisory authority (Article 77 GDPR)

To exercise these rights, please contact the Administrator using the contact details provided in § 14 of this Policy.

§ 8. Cookies and Similar Technologies

The Service uses cookies and similar tracking technologies in accordance with applicable law.

The following types of cookies are used:

1. Necessary cookies - essential for Service functionality, stored based on legitimate interest
2. Analytical cookies - for traffic analysis and Service improvement, requiring User consent
3. Marketing cookies - for personalized advertising, requiring User consent (currently not used)

Detailed information about cookies is available in our Cookie Policy

§ 9. Data Recipients

Personal data may be disclosed to the following categories of recipients:

1. Data processors acting on behalf of the Administrator under appropriate data processing agreements
2. Analytics service providers (Google Analytics) for website traffic analysis
3. Hosting service providers (Vercel) for Service operation and maintenance
4. Public authorities when required by applicable law or court orders

§ 10. International Data Transfers

Personal data may be transferred to third countries outside the European Economic Area. Such transfers are conducted in accordance with Chapter V of the GDPR, using appropriate safeguards such as Standard Contractual Clauses or adequacy decisions adopted by the European Commission.

§ 11. Data Security

The Administrator implements appropriate technical and organizational measures to ensure data security:

1. Technical measures: encryption, access controls, and secure data transmission protocols
2. Organizational measures: staff training, access management, and incident response procedures
3. Physical measures: secure server locations and controlled access to data processing facilities

§ 12. Children's Data

The Service is not directed to children under 16 years of age. The Administrator does not knowingly collect personal data from children under 16. If we become aware that personal data from a child under 16 has been collected, we will take steps to delete such information promptly.

§ 13. Policy Changes

This Privacy Policy may be updated from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. Material changes will be communicated through the Service or by other appropriate means.

§ 14. Contact Information

For any questions regarding this Privacy Policy or data protection matters, please contact the Administrator: