Data protection

How we handle personal data on boidra.com. Last updated 29 September 2026.

Who is responsible

The controller of your personal data is Boidra spółka z ograniczoną odpowiedzialnością (Boidra sp. z o.o.), ul. Księcia Witolda 49 lok. 15, 50-202 Wrocław, Poland.

KRS
0001258462
NIP
8982336905
REGON
545418720

For anything about your data, write to contact@boidra.com.

What we collect and why

Contact form. Your name, email address and message, so we can answer you. Legal basis: steps taken at your request before a contract, and our legitimate interest in replying to enquiries (Art. 6(1)(b) and (f) GDPR).

Use-case submissions. What you tell us about your use case and how to reach you, so we can assess it and come back to you. Legal basis: Art. 6(1)(b) and (f) GDPR.

Job applications. The details and documents you send when you apply, to run the recruitment. Legal basis: steps before an employment contract (Art. 6(1)(b) GDPR) and, for anything you choose to add beyond that, your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

Analytics. With your consent only, we use Google Analytics to understand how the site is used. It sets cookies and processes pseudonymous identifiers and usage data. Legal basis: your consent (Art. 6(1)(a) GDPR). You can change your choice at any time with the cookie settings link in the footer.

Technical logs. Our hosting keeps short-lived server logs, including IP addresses, to run the site securely. Legal basis: our legitimate interest in security (Art. 6(1)(f) GDPR).

Who receives it

We share data only with providers who process it on our behalf under a data processing agreement: Vercel Inc. (website hosting), Resend (delivery of form messages to our inbox), and, with your consent, Google Ireland Limited (Google Analytics). We do not sell personal data.

Transfers outside the EEA

Vercel, Resend and Google may process data in the United States. These transfers rely on the European Commission's adequacy decision for the EU-US Data Privacy Framework where the provider is certified under it, and otherwise on the Commission's standard contractual clauses included in the provider's data processing agreement. You can ask us for a copy of the relevant safeguards.

How long we keep it

Enquiries and use-case submissions: as long as the conversation lasts, then 12 months.

Job applications: until the recruitment ends, then 6 months. If you agreed to be considered for future roles, 12 months, or until you withdraw that consent.

Analytics data: 14 months, the retention period set in Google Analytics.

Server logs: no longer than 30 days.

Your rights

You can ask us for access to your data, its correction or deletion, restriction of its processing, and a copy in a portable format. You can object to processing based on our legitimate interest, and withdraw consent at any time without affecting what was done before. Write to contact@boidra.com and we will answer within one month.

You also have the right to complain to the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl).

Do you have to give us your data

No. Without your contact details we simply cannot reply to you or consider your application. We do not make decisions about you by automated means alone, and we do not profile you.

Changes to this notice

We update this notice when what we do with data changes. The date at the top shows the latest version. See also our contact page.