Legal

Privacy Policy

Last updated: 24 October 2026

01 Who we are

This Privacy Policy explains how personal data is processed when you visit veyrensystems.com (the “Site”), submit the feasibility-review form, or write to us by email.

The controller of your personal data is:

Roman Hrabovskyi, sole proprietor trading as Veyren SystemsNIP: 8982318422REGON: 541171352ul. Michała Wrocławczyka 42, 50-380 Wrocław, Poland[email protected]

We have not appointed a data protection officer. For any question about your personal data, write to [email protected].

This Policy does not cover images, video or other data that clients provide for a project. That data is governed by the contract with the client.

02 Personal data we process

Feasibility-review form

When you submit the form, we store:

  • your name, work email and company;
  • the description of your task and the data type you select;
  • company website, project timeline and budget range, if you provide them;
  • the page language, the referring page, the date of the request and, if present in the link, campaign parameters (utm_source, utm_medium, utm_campaign).

Name, work email, company, task description and data type are required to answer your request. The other fields are optional.

Please describe the task in general terms. Do not include special categories of personal data, such as health or biometric data of identifiable people.

Email

If you write to us by email, we process your email address, your name and the content of the message and its attachments.

Technical data

When you submit the form, Cloudflare Turnstile checks that it was sent by a person. Your IP address and technical browser data are sent to Cloudflare for this check. We do not store your IP address with your request.

Cloudflare hosts the Site and processes IP addresses and request data in its security logs. Cloudflare Web Analytics collects aggregated visit statistics, such as pages viewed, referring site and country, without cookies and without building an advertising profile.

03 Purposes and legal bases

Purpose
Answering your request and discussing a possible project
Data
Form and email data
Legal basis
Steps taken at your request before entering into a contract, Art. 6(1)(b) GDPR
Purpose
Keeping a record of correspondence and defending legal claims
Data
Form and email data
Legal basis
Our legitimate interest, Art. 6(1)(f) GDPR
Purpose
Understanding which channel brought the request
Data
Referring page and campaign parameters
Legal basis
Our legitimate interest, Art. 6(1)(f) GDPR
Purpose
Protecting the Site and the form from abuse
Data
IP address, technical data, Turnstile result
Legal basis
Our legitimate interest, Art. 6(1)(f) GDPR
Purpose
Measuring how the Site is used
Data
Aggregated visit statistics
Legal basis
Our legitimate interest, Art. 6(1)(f) GDPR
Purpose
Keeping tax and accounting records if we sign a contract
Data
Data required for invoices
Legal basis
Legal obligation, Art. 6(1)(c) GDPR

We do not sell personal data, use it for advertising, or add you to a mailing list.

04 Cookies and browser storage

Name
veyren-locale (local storage)
Purpose
Remembers the language you chose
Duration
Until you clear it
Name
veyren-utm_source, veyren-utm_medium, veyren-utm_campaign (session storage)
Purpose
Passes campaign parameters from the link to the form
Duration
Until the tab is closed
Name
Cloudflare security cookies
Purpose
Bot protection and security of the Site
Duration
As set by Cloudflare

Campaign parameters stay in your browser during the visit and reach us only if you submit the form. We do not use advertising or cross-site tracking cookies. If we add any, we will ask for your consent before they are set.

05 Recipients

We use the following service providers. They process personal data on our behalf under data processing agreements:

  • Cloudflare, Inc.: hosting of the Site, the request database, notification email, Turnstile and Web Analytics;
  • Google (Google Workspace): our email, including [email protected] and notifications of new requests.

We may also disclose data to public authorities when the law requires it.

06 Transfers outside the EEA

Cloudflare and Google may process data in the United States and in other countries outside the European Economic Area. Both are certified under the EU–US Data Privacy Framework, and their data processing terms include the standard contractual clauses approved by the European Commission.

07 How long we keep data

  • Requests that do not lead to a contract: 12 months after our last correspondence. We then delete them from our database and mailbox.
  • If we sign a contract, the correspondence becomes part of the contract records. We keep it for the duration of the contract and then for the periods required by tax and accounting law and for the limitation of claims.
  • Language preference: until you clear your browser storage. Campaign parameters: until the tab is closed.
  • Cloudflare security logs and analytics: for the periods set by Cloudflare.

08 Your rights

You have the right to:

  • access your personal data and receive a copy (Art. 15 GDPR);
  • have inaccurate data corrected (Art. 16 GDPR);
  • have your data erased (Art. 17 GDPR);
  • restrict processing (Art. 18 GDPR);
  • receive your data in a portable format, where processing is based on Art. 6(1)(b) GDPR (Art. 20 GDPR);
  • object to processing based on our legitimate interest (Art. 21 GDPR).

To exercise these rights, write to [email protected]. We will reply within one month. If a request is complex, we may extend this by up to two months and will tell you why.

Providing data is voluntary. Without the required form fields we cannot answer your request.

We do not make decisions based solely on automated processing that produce legal or similarly significant effects for you.

09 Complaints

You can lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl, or with the supervisory authority in the EU country where you live or work.

10 Security

Data is transmitted over HTTPS. Access to the request database and to our mailbox is limited to us and protected by account security controls.

11 Changes to this Policy

We may update this Policy. The current version is always published on this page with its date.

This Policy is available in English, Polish, Ukrainian and German. If the versions differ, the English version prevails.