Data processing notice
Short, and without pointing you at further documents: what we collect, what for, for how long, and what you can do about it.
Who processes your data
PRIME Q is a project at the concept stage and does not yet have legal personality. The controller of data provided on this site is the project team, acting jointly within an advisory project carried out on an MBA programme at Kozminski University.
For anything concerning personal data, write to kontakt@primeq.pl. We answer every request, including one asking us to delete data that was submitted a moment earlier.
What we collect
We collect only what you provide, plus the basic technical data needed to keep the site running.
- Contact form: your name, e-mail address and the content of your message.
- Survey: answers to the research questions and, if you choose to provide them, your name and e-mail address. The survey can be submitted anonymously.
- Technical data: IP address and browser information, recorded automatically in the hosting provider's server logs.
Why, and on what basis
Survey answers are used solely for the investor needs research carried out within the project. The basis is your consent (Article 6(1)(a) GDPR). You may withdraw it at any time, without giving a reason.
Contact form data is processed in order to reply to your message, also on the basis of consent. Technical data is processed on the basis of a legitimate interest in keeping the site secure and available (Article 6(1)(f) GDPR).
We do not profile visitors and we make no automated decisions about anyone.
How long we keep it
Survey answers and correspondence are kept until the advisory project is completed and settled, and no longer than 24 months from receipt. If consent is withdrawn we delete the data promptly; survey answers then remain in the dataset with identifying details removed.
Hosting server logs are overwritten in line with the provider's policy.
Who we share it with
The site is hosted by Netlify, which also handles form submissions. Netlify acts as a processor, and any transfer outside the European Economic Area takes place under standard contractual clauses.
We do not sell data, we do not share it for marketing purposes, and we do not pass it to third parties other than the hosting provider named above.
Your rights
You can exercise your GDPR rights at any time.
- access to your data and a copy of it
- rectification of inaccurate or incomplete data
- erasure of your data and restriction of processing
- portability of your data to another controller
- objection to processing based on legitimate interest
- withdrawal of consent at any time, without affecting the lawfulness of processing before withdrawal
- a complaint to the President of the Personal Data Protection Office
Cookies and analytics
The site uses no analytics or marketing cookies and shows no consent banner, because there is nothing to consent to. We use no external analytics tools and no tracking pixels.
Typefaces are served from our own server rather than a third-party content delivery network, so simply opening the page does not send your IP address to a font provider. The browser remembers only your language choice, in your device's local storage.