This policy describes how we process personal data on duonaut.com in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (the “GDPR”).
Data controller
The controller of personal data is MemBee sp. z o.o., with its registered office in Warsaw, al. Jana Chrystiana Szucha 2/4/24, 00-582 Warszawa, Poland, entered in the Register of Entrepreneurs of the National Court Register (KRS) under number 0001129073, NIP (tax ID) 7011224764, REGON 529747399 (the “Controller”), which operates duonaut.com.
For any matters relating to personal data, including exercising your rights, you can contact the Controller at info@duonaut.com or in writing at the registered office address.
Data we process
- Contact form: email address, organisation name (optional field) and the content of the message.
- Email correspondence: email address and the data contained in the message and its signature.
- Technical data: the hosting server records connection data such as the IP address, date and time of the request, the page visited and browser information. When you open the site’s main address, the country of connection is determined from the IP address and the preferred language from the browser headers. This information is used solely to display the appropriate language version and is not stored.
Purposes and legal bases of processing
- Replying to your message and conducting correspondence — Article 6(1)(f) GDPR; the Controller’s legitimate interest is communicating with people who contact it. Where the message concerns entering into a contract, the legal basis is Article 6(1)(b) GDPR (steps taken at your request prior to entering into a contract).
- Displaying the site in the appropriate language — Article 6(1)(f) GDPR; the Controller’s legitimate interest is presenting content in a language the visitor understands.
- Ensuring the security and continuity of the site — Article 6(1)(f) GDPR; the Controller’s legitimate interest is protecting the site against abuse and keeping it stable.
- Establishing, exercising or defending legal claims — Article 6(1)(f) GDPR; the Controller’s legitimate interest is protecting its rights.
Recipients of data
Data may be shared with entities that process it on the Controller’s behalf, under data processing agreements and only to the extent necessary to perform their tasks:
- Vercel Inc. — hosting and site infrastructure,
- Resend — delivery of messages from the contact form,
- providers of email and office software services,
- entities providing IT, legal and accounting services to the Controller.
Data may also be disclosed to public authorities where required by law.
Transfers outside the European Economic Area
Some providers are based in the United States. Data is transferred on the basis of the European Commission’s adequacy decision (EU-U.S. Data Privacy Framework) — for certified entities — or on the basis of standard contractual clauses approved by the European Commission. You can obtain a copy of the safeguards applied by contacting the Controller.
Retention period
- We keep correspondence for as long as needed to reply and conduct discussions, and then until the limitation period for any claims expires.
- Technical connection data is kept for a short period set in the hosting provider’s settings.
- If you object, we stop processing the data for that purpose unless we demonstrate compelling legitimate grounds for further processing.
Your rights
Under the terms of the GDPR, you have the right to:
- access your data and obtain a copy of it,
- rectify your data,
- erase your data,
- restrict processing,
- data portability for data processed on the basis of a contract,
- object to processing based on the Controller’s legitimate interest,
- lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland) or with the supervisory authority in your country of residence.
To exercise these rights, write to info@duonaut.com. We respond without undue delay and in any event within one month.
Voluntary provision of data
Providing data is voluntary. We need your email address to reply to your message.
Automated decision-making
Personal data is not used for automated decision-making, including profiling.
Cookies and browser storage
How information is stored in your browser is described on the Cookies page.
External services
The site contains a link to Duonaut’s LinkedIn profile. Once you go to that service, its operator becomes the data controller, under the terms of its own privacy policy.
Changes to this policy
This policy may be updated following changes to the site or to the law. The date of the last update is given at the top of the page.