Privacy Policy

‍
1. Data Controller

The controller of your personal data is Bednarz Ventures spółka z ograniczoną odpowiedzialnością, with its registered office in Warsaw, Poland, at ul. Prosta 51/P.1, 00-838 Warsaw, REGON: 529553838, NIP: 5253015595, entered in the Register of Entrepreneurs under KRS number 0001124780 (hereinafter referred to as the “Controller”).

2. Categories of Data Subjects

The Controller processes personal data of:

• individuals visiting and using the website https://bootstrappie.ai/ (the “Website”);
• individuals following the Controller’s profiles on social media platforms (LinkedIn) and interacting with them;
• individuals who contact the Controller via email, telephone, or contact forms available on the Website or other communication channels;
• job candidates applying to the Controller;
• business partners (advisors, consultants, contractors, and service providers).

3. How Data Is Collected

The Controller obtains personal data directly from individuals when they:

• browse the Website;
• follow or interact with the Controller’s social media channels;
• contact the Controller via email, phone, or contact form;
• apply for employment;
• engage in business collaboration, advisory, or consulting activities, or provide services to the Controller.

4. Purposes and Legal Basis for Processing

Personal data is processed for the following purposes:

Website Visitors

• Ensuring the proper technical operation of the Website (Art. 6(1)(b) GDPR).
• Responding to inquiries (Art. 6(1)(f) GDPR).
• Profiling for statistical and analytical purposes (Art. 6(1)(f) GDPR).

Providing personal data is necessary to use the Website.

Social Media Followers

• Informing about the Controller’s activities and building a positive public image (Art. 6(1)(f) GDPR).
• Responding to inquiries and comments received through social media (Art. 6(1)(f) GDPR).

Providing data is necessary to follow and interact with the Controller’s social media profiles.

Individuals Contacting the Controller

• Responding to messages and handling inquiries (Art. 6(1)(f) GDPR).

Job Candidates

• Conducting recruitment processes and assessing a candidate’s qualifications, skills, and suitability for employment (Art. 6(1)(b) and Art. 6(1)(a) GDPR).
• Storing recruitment documentation for future recruitment (based on consent, Art. 6(1)(a) GDPR).
• Fulfilling legal obligations arising from the Polish Labor Code and related regulations (Art. 6(1)(c) GDPR).

Providing personal data is required to participate in recruitment. Additional data beyond legal requirements is voluntary.

Business Partners

• Contact with representatives of business partners who are legal entities (Art. 6(1)(f) GDPR).
• Contact with business partners conducting sole proprietorships (Art. 6(1)(b) GDPR).
• Pursuing or defending claims related to contractual relationships (Art. 6(1)(f) GDPR).

Providing data is necessary to establish and maintain business cooperation.

5. Categories of Processed Data

Depending on the purpose of processing, the following categories of personal data may be processed:

• Website visitors: IP address, data stored in cookies.
• Social media users: name, surname or nickname, publicly available profile information, and data voluntarily provided.
• Individuals contacting the Controller: name, email address, phone number, and any other information voluntarily provided.
• Job candidates: name, email address, phone number, education, qualifications, employment history, and other data voluntarily provided.
• Business partners: name, NIP (tax ID), email address, phone number.

6. Data Retention Period

Personal data will be stored for the following periods:

• Website visitors: IP address logs are retained for up to 5 years; cookies are stored according to retention periods listed in the cookie policy.
• Social media followers: data is retained as long as the user follows or interacts with the Controller’s profile. Comments and likes may remain visible until deleted by the user.
• Individuals contacting the Controller: data is kept as long as necessary to resolve the inquiry or until the expiration of applicable limitation periods.
• Job candidates: data is stored until recruitment completion unless the candidate consents to future processing, in which case up to 2 years or until consent is withdrawn.
• Business partners: data is stored for the duration required by tax laws and for limitation periods applicable to contractual claims.

7. Recipients of Personal Data

Personal data may be disclosed to:

• IT service and system providers (including analytics tools) used to operate and maintain the Website;
• social media platform operators (LinkedIn);
• email and hosting service providers;
• legal advisors and consultants supporting the Controller;
• postal and courier services;
• accounting and financial service providers.

As the Controller uses Google Workspace, some personal data may be transferred outside the European Economic Area (EEA) under Standard Contractual Clauses (Art. 46(2)(c) GDPR).
More information: https://policies.google.com/privacy

8. Rights of Data Subjects

Every individual whose data is processed has the right to:

• Access, correct, delete, or restrict the processing of their data.
• Transfer their data (when processing is based on consent or contract).
• Object to data processing based on legitimate interest (Art. 6(1)(f) GDPR).
• Withdraw consent at any time (if processing is based on consent).
• Lodge a complaint with the President of the Personal Data Protection Office (UODO) in Warsaw if they believe data processing violates data protection laws.

9. Cookies and Tracking Technologies

Cookies are small data files stored on user devices, typically containing the service address, date of placement, expiration date, a unique identifier, and additional information depending on the cookie’s purpose.

The Website uses cookies for:

• ensuring proper technical operation;
• analytical and statistical purposes;
• improving user experience.

Detailed cookie retention information can be found in the Website’s Cookie Policy.

9. Managing Cookies

You can disable the storage of cookies directly on the device used to access the Website, according to your browser manufacturer’s instructions:

• Google Chrome
• Safari
• Mozilla Firefox

Information on how to configure or delete cookies in other web browsers can be found on their respective manufacturers’ websites.

10. Automated Decision-Making

The Controller does not use automated decision-making or profiling.

11. Changes to the Privacy Policy

Last updated: January 16, 2025

The provisions of this Privacy Policy may be updated from time to time.
The most recent version of the document is always available on the Website and marked with the date of the last update.

12. Contact

For any matters related to the processing and protection of personal data, you can contact the Controller at:

Email: patryk@bednarzventures.pl
Address: Bednarz Ventures Sp. z o.o., ul. Bonifraterska 17/P.6, 00-203 Warsaw, Poland

The Controller will respond to your inquiry within no more than 30 days from the date of receipt.

‍