Legal
Privacy Policy
Last updated: 24 October 2026
01 Who we are
This Privacy Policy explains how personal data is processed when you visit veyrensystems.com (the “Site”), submit the feasibility-review form, or write to us by email.
The controller of your personal data is:
Roman Hrabovskyi, sole proprietor trading as Veyren SystemsNIP: 8982318422REGON: 541171352ul. Michała Wrocławczyka 42, 50-380 Wrocław, Poland[email protected]We have not appointed a data protection officer. For any question about your personal data, write to [email protected].
This Policy does not cover images, video or other data that clients provide for a project. That data is governed by the contract with the client.
02 Personal data we process
Feasibility-review form
When you submit the form, we store:
- your name, work email and company;
- the description of your task and the data type you select;
- company website, project timeline and budget range, if you provide them;
- the page language, the referring page, the date of the request and, if present in the link, campaign parameters (utm_source, utm_medium, utm_campaign).
Name, work email, company, task description and data type are required to answer your request. The other fields are optional.
Please describe the task in general terms. Do not include special categories of personal data, such as health or biometric data of identifiable people.
If you write to us by email, we process your email address, your name and the content of the message and its attachments.
Technical data
When you submit the form, Cloudflare Turnstile checks that it was sent by a person. Your IP address and technical browser data are sent to Cloudflare for this check. We do not store your IP address with your request.
Cloudflare hosts the Site and processes IP addresses and request data in its security logs. Cloudflare Web Analytics collects aggregated visit statistics, such as pages viewed, referring site and country, without cookies and without building an advertising profile.
03 Purposes and legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| Answering your request and discussing a possible project | Form and email data | Steps taken at your request before entering into a contract, Art. 6(1)(b) GDPR |
| Keeping a record of correspondence and defending legal claims | Form and email data | Our legitimate interest, Art. 6(1)(f) GDPR |
| Understanding which channel brought the request | Referring page and campaign parameters | Our legitimate interest, Art. 6(1)(f) GDPR |
| Protecting the Site and the form from abuse | IP address, technical data, Turnstile result | Our legitimate interest, Art. 6(1)(f) GDPR |
| Measuring how the Site is used | Aggregated visit statistics | Our legitimate interest, Art. 6(1)(f) GDPR |
| Keeping tax and accounting records if we sign a contract | Data required for invoices | Legal obligation, Art. 6(1)(c) GDPR |
- Purpose
- Answering your request and discussing a possible project
- Data
- Form and email data
- Legal basis
- Steps taken at your request before entering into a contract, Art. 6(1)(b) GDPR
- Purpose
- Keeping a record of correspondence and defending legal claims
- Data
- Form and email data
- Legal basis
- Our legitimate interest, Art. 6(1)(f) GDPR
- Purpose
- Understanding which channel brought the request
- Data
- Referring page and campaign parameters
- Legal basis
- Our legitimate interest, Art. 6(1)(f) GDPR
- Purpose
- Protecting the Site and the form from abuse
- Data
- IP address, technical data, Turnstile result
- Legal basis
- Our legitimate interest, Art. 6(1)(f) GDPR
- Purpose
- Measuring how the Site is used
- Data
- Aggregated visit statistics
- Legal basis
- Our legitimate interest, Art. 6(1)(f) GDPR
- Purpose
- Keeping tax and accounting records if we sign a contract
- Data
- Data required for invoices
- Legal basis
- Legal obligation, Art. 6(1)(c) GDPR
We do not sell personal data, use it for advertising, or add you to a mailing list.
04 Cookies and browser storage
| Name | Purpose | Duration |
|---|---|---|
| veyren-locale (local storage) | Remembers the language you chose | Until you clear it |
| veyren-utm_source, veyren-utm_medium, veyren-utm_campaign (session storage) | Passes campaign parameters from the link to the form | Until the tab is closed |
| Cloudflare security cookies | Bot protection and security of the Site | As set by Cloudflare |
- Name
- veyren-locale (local storage)
- Purpose
- Remembers the language you chose
- Duration
- Until you clear it
- Name
- veyren-utm_source, veyren-utm_medium, veyren-utm_campaign (session storage)
- Purpose
- Passes campaign parameters from the link to the form
- Duration
- Until the tab is closed
- Name
- Cloudflare security cookies
- Purpose
- Bot protection and security of the Site
- Duration
- As set by Cloudflare
Campaign parameters stay in your browser during the visit and reach us only if you submit the form. We do not use advertising or cross-site tracking cookies. If we add any, we will ask for your consent before they are set.
05 Recipients
We use the following service providers. They process personal data on our behalf under data processing agreements:
- Cloudflare, Inc.: hosting of the Site, the request database, notification email, Turnstile and Web Analytics;
- Google (Google Workspace): our email, including [email protected] and notifications of new requests.
We may also disclose data to public authorities when the law requires it.
06 Transfers outside the EEA
Cloudflare and Google may process data in the United States and in other countries outside the European Economic Area. Both are certified under the EU–US Data Privacy Framework, and their data processing terms include the standard contractual clauses approved by the European Commission.
07 How long we keep data
- Requests that do not lead to a contract: 12 months after our last correspondence. We then delete them from our database and mailbox.
- If we sign a contract, the correspondence becomes part of the contract records. We keep it for the duration of the contract and then for the periods required by tax and accounting law and for the limitation of claims.
- Language preference: until you clear your browser storage. Campaign parameters: until the tab is closed.
- Cloudflare security logs and analytics: for the periods set by Cloudflare.
08 Your rights
You have the right to:
- access your personal data and receive a copy (Art. 15 GDPR);
- have inaccurate data corrected (Art. 16 GDPR);
- have your data erased (Art. 17 GDPR);
- restrict processing (Art. 18 GDPR);
- receive your data in a portable format, where processing is based on Art. 6(1)(b) GDPR (Art. 20 GDPR);
- object to processing based on our legitimate interest (Art. 21 GDPR).
To exercise these rights, write to [email protected]. We will reply within one month. If a request is complex, we may extend this by up to two months and will tell you why.
Providing data is voluntary. Without the required form fields we cannot answer your request.
We do not make decisions based solely on automated processing that produce legal or similarly significant effects for you.
09 Complaints
You can lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl, or with the supervisory authority in the EU country where you live or work.
10 Security
Data is transmitted over HTTPS. Access to the request database and to our mailbox is limited to us and protected by account security controls.
11 Changes to this Policy
We may update this Policy. The current version is always published on this page with its date.
This Policy is available in English, Polish, Ukrainian and German. If the versions differ, the English version prevails.