Privacy & cookies
1. Data we process
If you use the contact form, we may receive the data you provide: name, company or brand, e-mail address, optional phone number, selected type of need, project description and attached files. The server may also process standard technical data needed for operation and security, such as IP address, request time and browser information.
2. Purposes and legal bases
We process contact-form data to respond to your enquiry, take steps at your request before a possible contract and conduct correspondence (Article 6(1)(b) GDPR), and where that basis does not apply — on the basis of our legitimate interests in handling enquiries, website security and the establishment, exercise or defence of claims (Article 6(1)(f) GDPR). Optional analytics and marketing tools are activated only with your consent (Article 6(1)(a) GDPR and applicable rules on storing or accessing information on a user's device).
3. Retention
Enquiry data is kept for as long as needed to handle the enquiry and related discussions, and afterwards — where justified — until relevant limitation periods expire or for a period required by law. Technical data and server logs are retained for as long as necessary for security and proper website operation. Data collected by external analytics or advertising tools is subject to the retention settings and policies of the relevant providers.
4. Recipients
Data may be processed by hosting, e-mail and IT providers acting on our behalf and by entities to which disclosure is required by law. If you consent to a relevant category, recipients may also include providers of the active analytics and advertising tools listed below. We do not sell personal data.
5. External tools and tracking
Subject to the relevant consent, the website may use the following deployed tools, including tags loaded via Google Tag Manager:
- Google Tag Manager (Google) — a tag management system. The GTM identifier alone does not mean all services available in the container are enabled. Each tag is subject to the applicable consent settings.
- Google Analytics 4 (Google) — measurement of visits, traffic sources and website events, including successfully submitted contact forms, subject to analytics consent. Contact details and message contents from the form are not sent as analytics event data. Google Privacy Policy.
- LinkedIn Insight Tag (LinkedIn) — advertising and conversion measurement and possible retargeting audiences, only with marketing consent. LinkedIn Privacy Policy.
Depending on the service and configuration, recipients may also process data outside the European Economic Area. Information about these transfers is available in the providers' privacy documentation.
The website also uses Google Fonts. External YouTube or Vimeo videos are loaded only after you click play; YouTube is called via youtube-nocookie.com. Once a video is started, the provider may receive technical data needed to deliver the content.
6. Cookies and similar technologies
Necessary technical solutions may operate without separate consent where they are required to provide a function requested by the user — including remembering language, portfolio filtering or the privacy choice. We store your category preferences in your browser's localStorage. Optional analytics and marketing tags are loaded only after you consent to the relevant category. You can change or withdraw your consent at any time through “Cookie settings” in the website footer. Withdrawal stops future measurement after the updated choice takes effect; previously set cookies can also be removed in your browser settings.
7. Your rights
Where provided by the GDPR, you have the right to access, rectify, erase or restrict your data, to data portability and to object to processing. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing. You may also lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (UODO).
8. Voluntary provision of data and profiling
Providing contact-form data is voluntary, but without information that allows us to contact you we may be unable to respond. The phone number is optional. HIAI does not make decisions about users that produce legal or similarly significant effects based solely on automated processing. With consent, advertising tools may be used by their providers for campaign measurement, ad personalisation and audience creation under their own terms.