Privacy notice.

1. Who is responsible for your data

The controller of your personal data is [Company legal name], with its registered office at [registered address], entered in the register under [KRS / NIP number] (“HOP”, “we”). For anything about your data, write to philip@hoppartners.com or david@hoppartners.com. We have not appointed a Data Protection Officer, as the law does not require one for our activities.

2. Legal framework

We process personal data in line with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation, “GDPR”, in Polish “RODO”), the Polish Act of 10 May 2018 on the protection of personal data, and, for information stored in your browser, the Polish Electronic Communications Law of 12 July 2024 (Prawo komunikacji elektronicznej).

3. What data we process, why, and on what legal basis

• Contact form and emails. Your name, email address, and optionally your company, phone number and anything you write in your message. We use them to reply to you and to discuss a possible collaboration. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).
• Technical data. When you visit the site, our hosting provider automatically processes your IP address, browser type, date and time of the request and the page requested. We need this to deliver the site and keep it secure. Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f) GDPR).
• Claims. Where necessary, we may keep correspondence to establish, exercise or defend legal claims. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR).

Providing your data is voluntary. Without the fields marked as required in the contact form, we cannot reply to your message.

4. Who receives your data

We do not sell your data or share it for marketing. We use service providers who process data on our behalf and under our instructions, on the basis of data processing agreements (Art. 28 GDPR):

• Vercel Inc. (USA): website hosting and technical logs.
• Resend (Plus Five Five, Inc., USA): delivering contact form messages to our inboxes.

We may also disclose data where the law requires it, for example to courts or public authorities.

5. Transfers outside the European Economic Area

Because these providers are based in the United States, your data may be transferred outside the EEA. Such transfers rely on the EU–U.S. Data Privacy Framework where the provider is certified, or on the European Commission’s Standard Contractual Clauses (Art. 46(2)(c) GDPR). You can ask us for a copy of the safeguards used.

6. How long we keep your data

• Enquiries and correspondence: for as long as needed to handle your enquiry, and then for up to 3 years after our last contact, or longer only where needed for a contract or a legal claim.
• Technical logs: for the short period set by our hosting provider, needed for security and troubleshooting.
• Information stored in your browser: for the periods shown in the table below.

7. Your rights

Under the GDPR you have the right to:

• access your data and receive a copy (Art. 15);
• have inaccurate data corrected (Art. 16);
• have your data erased (Art. 17);
• restrict processing (Art. 18);
• data portability, where processing is based on a contract or consent (Art. 20);
• object to processing based on our legitimate interest (Art. 21);
• withdraw your consent at any time, where processing is based on consent, without affecting what was done before.

To use these rights, write to one of the addresses in section 1. You also have the right to lodge a complaint with the supervisory authority: the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.

8. Automated decisions and profiling

We do not make decisions based solely on automated processing, and we do not profile visitors.

9. Cookies and browser storage

This site sets no advertising or tracking cookies and uses no analytics. Fonts are served from this site, so no visitor data is sent to third parties when a page loads. We store a few small items in your browser (local and session storage). Items strictly necessary for the site to work do not require consent (Art. 399 of the Electronic Communications Law); the optional item is stored only if you allow it. You can change your choice at any time with Cookie settings, also in the footer, or by clearing your browser storage.

10. Changes to this notice

We may update this notice when our services or the law change. The date of the latest version is shown at the top of this page.