Website and security
We may process IP address, request time, requested resource, browser/device and diagnostic data to provide and secure the site, prevent abuse and diagnose errors, based on our legitimate interest (Article 6(1)(f) GDPR).
Privacy policy
Innovation Bridge privacy policy.
How we process data when you use the website, send a contact form or join the newsletter.
Last updated:
Completion required before publication
This document covers the current website, contact form and newsletter, but must not be published as final until every field marked “UZUPEŁNIJ” has been replaced with the entity’s verified details.
1. Controller and contact
The controller is [UZUPEŁNIJ: pełna nazwa rejestrowa podmiotu], operating under the Innovation Bridge brand.
- address: [UZUPEŁNIJ: adres siedziby i adres korespondencyjny],
- registration details: [UZUPEŁNIJ: KRS, NIP i REGON — jeżeli zostały nadane],
- email: kontakt@innovationbridge.pl,
- Data Protection Officer: [UZUPEŁNIJ: dane IOD albo informacja, że IOD nie został wyznaczony].
Use the email above for privacy matters. Please do not send special-category or confidential data unless it is necessary.
2. Scope
This policy covers innovationbridge.pl, its contact form and newsletter signup. It does not govern third-party websites linked from the site. Before we launch user accounts, paid courses, online donations, marketing analytics or new forms, we will update the privacy information.
3. Data, purposes and legal bases
Contact form
We process name, email, topic and message plus optional organisation and phone. The legal basis is taking steps at your request before entering a contract (Article 6(1)(b) GDPR) or our legitimate interest in correspondence and cooperation (Article 6(1)(f) GDPR).
Newsletter
We process email, consent and confirmation records, and basic delivery data. The basis is consent (Article 6(1)(a) GDPR) and consent to electronic commercial communications/direct marketing. We use double opt-in.
Legal duties and claims
Where necessary, we retain data to meet legal obligations (Article 6(1)(c) GDPR), establish, pursue or defend claims and demonstrate compliance (Article 6(1)(f) GDPR).
4. Providing data
Providing data is voluntary, but required fields are necessary to send the form or start newsletter signup. Phone and organisation are optional. Without double-opt-in confirmation, the email is not added to the active newsletter list.
5. Recipients and service providers
Data may be accessed by authorised people working with the controller and processors needed to run the service: Cloudflare for hosting and form protection, Brevo for message delivery and newsletter management, and IT, legal or accounting providers where necessary. Public authorities may receive data where required by law.
We put required processor agreements in place and apply least-privilege access.
6. Transfers outside the European Economic Area
Some providers may use infrastructure or subprocessors outside the EEA. Transfers then rely on a GDPR-permitted mechanism, such as an adequacy decision or Standard Contractual Clauses with supplementary measures. Ask the controller for information about the applicable mechanism.
7. Retention
- contact data — while handling the matter, then as needed to document correspondence or until relevant claims expire;
- newsletter data — until consent is withdrawn or the newsletter ends, with a limited consent record retained as needed for claims or accountability;
- unconfirmed signup — only as technically necessary for the double-opt-in request to complete or expire;
- security logs — according to provider configuration and no longer than needed for protection and diagnostics, unless a specific incident requires preservation;
- legally required data — for the period set by applicable law.
We then delete or anonymise the data.
8. Your rights
Subject to GDPR conditions, you may request access, correction, erasure, restriction and portability. You may object to processing based on legitimate interests. You may withdraw consent at any time without affecting earlier lawful processing.
Contact kontakt@innovationbridge.pl. We may request information needed to verify identity securely. You may also complain to the President of the Polish Personal Data Protection Office or the competent supervisory authority where you live or work.
10. Cookies and similar technologies
The current site does not use advertising/marketing cookies or optional analytics. Cloudflare infrastructure and Turnstile may process technical connection and device signals where necessary to provide the site securely and protect forms from abuse.
The site uses fonts available on the user’s system and does not retrieve them from an external font service. If optional technologies are introduced, they will start only after the required notice and consent where applicable.
11. Security and automated decisions
We use proportionate safeguards including encrypted transport, access controls, data minimisation, anti-spam protection and limited error disclosure. No transmission method is absolutely secure.
We do not make solely automated decisions that produce legal or similarly significant effects for users.
12. Changes
We may update this policy when the site, data, providers or law changes. Each version has an update date. We will notify active subscribers of material newsletter-related changes where required or appropriate.
See the Website Terms or contact us.