Controller and contact
The controller of your personal data is Mateusz Szopa, trading as Mateusz Szopa Process87, ul. Polskiej Organizacji Wojskowej 17, unit 217, 97-200 Tomaszów Mazowiecki, Poland. Polish tax identification number (NIP): 7732373388. REGON: 544664693.
Contact us about your data by email at info@process87.com, by phone on +48 512 447 811, or by post to the address above.
This policy covers process87.com, preview.process87.com and enquiries about PROCESS87 services. Separate information may apply to other activities, including photo shoots, publication of images of people and employment.
Information we process
When you contact us, we process what you provide: your name or contact name, email address, optional company and phone number, and your message. An enquiry may also contain the project type, budget and timeline.
Server infrastructure may record technical information such as IP address, request time, page address, browser information and errors. This helps deliver the site, diagnose problems and protect it from abuse.
Form protection may process a submission identifier, an attempt counter and a hash of an IP address combined with a secret value. Hashing is a safeguard, not a guarantee of anonymity. A shared rate limit does not need to distinguish visitors by IP address.
Please do not send health information, identity documents or other details that are not needed to describe your project.
Purposes and legal grounds
| Purpose | Legal ground |
|---|---|
| Answering ordinary questions and handling correspondence | Article 6(1)(f) GDPR. Our legitimate interest is responding to people who contact us. |
| Preparing a quotation and taking steps at your request before a contract, where you would be a party | Article 6(1)(b) GDPR. |
| Contact with a representative or employee of a business | Article 6(1)(f) GDPR. Our legitimate interest is communicating with prospective or existing clients. |
| Delivering and securing the website, preventing spam and diagnosing faults | Article 6(1)(f) GDPR. Our legitimate interest is a safe, working website. |
| Establishing, pursuing or defending claims where needed | Article 6(1)(f) GDPR. Our legitimate interest is protecting our rights. |
Sending an enquiry does not subscribe you to a newsletter or give permission for unrelated advertising. We do not require general consent to answer your enquiry. The information beside the form is not marketing consent.
Providing your information
Providing information is voluntary. We need an email address, a message and a way to address you to handle an enquiry. The fields marked as required are needed to submit the form. You can instead email info@process87.com directly.
Your phone number, budget, timeline and company name are optional. Leaving them blank does not prevent you from contacting us.
Recipients
We use Hostinger for website hosting and infrastructure, and Google Workspace for email and correspondence storage. If a separate service is used to protect the form from abuse, its provider processes the necessary technical information.
Providers process data within the scope of their services under the applicable agreements. Authorised people handling an enquiry only need access to relevant information. Data may be shared with legal advisers for a specific matter or public authorities where required by law.
We do not sell contact information. The form does not send your enquiry to social networks.
Processing outside the EEA
Google services and the international subcontractors of IT providers may process information outside the European Economic Area, including in the United States. Hosting the website in Europe does not mean all email and service operations take place within the EEA.
Transfers need a valid basis, such as an applicable European Commission adequacy decision or appropriate safeguards including the Commission's standard contractual clauses. Google Workspace terms describe its transfer mechanisms. You can ask info@process87.com for information on a specific transfer and a copy of relevant safeguards, subject to protecting confidential information and other people's data.
Retention
| Information | Period |
|---|---|
| Enquiries that do not result in a contract | Until the matter is handled, then no more than 12 months from the last substantive message. We delete information earlier if it is no longer needed. |
| Correspondence that becomes contract documentation | During performance of the contract, then as required by law or for specific claims. More detailed periods for contracts and accounts are provided when handling that contract. |
| Ordinary website technical logs within our control | No more than 30 days from the event. |
| Form attempt counter | 15 minutes. |
| Identifier used to prevent the same enquiry being sent again | No more than 24 hours. |
| Information set aside for a specific incident or dispute | Until the investigation ends and, where needed for claims, until proceedings are finally concluded or the applicable limitation period ends. |
We do not extend these periods without a reason. Backups may retain deleted information until their replacement cycle ends. Before activating the form we will establish the maximum cycle and update this policy. Backups are not used for ordinary correspondence. After restoring a backup we apply previous deletion requests again.
Your rights
You can request access to your data and a copy, correction, and, where the law allows, deletion or restriction of processing.
You can object to processing based on legitimate interests for reasons relating to your particular situation. Portability applies to automated processing based on a contract or consent. Where a process relies on consent, you can withdraw it without affecting the lawfulness of earlier processing.
These rights have conditions. For example, a legal duty to keep records may prevent immediate deletion.
Send requests to info@process87.com. We normally respond within one month. If the GDPR permits an extension, we will explain why. Where necessary, we may request proportionate information to confirm your identity.
You may complain to the President of the Polish Personal Data Protection Office (UODO). Information on submitting a complaint is available at uodo.gov.pl.
Automated decisions and marketing
We do not make decisions with legal or similarly significant effects based solely on automated processing. We do not use advertising profiling on this website.
Automatic form protection may limit repeated submission attempts. You can email us directly if this happens.
Cookies and external links
Our separate Cookie Policy explains how we remember your selected language.
The website contains ordinary links to Instagram, Facebook and LinkedIn. The current site does not embed their advertising pixels or widgets. After following a link, the external operator's rules apply. This policy covers processing by PROCESS87.
Changes
We update this policy when website features, providers, processing or legal requirements change. The current version is available on the website. Updating the document does not itself grant consent to new processing that requires it.
Let’s talk.
info@process87.comMateusz Szopa Process87
ul. Polskiej Organizacji Wojskowej 17, lok. 217
97-200 Tomaszów Mazowiecki
