PRIVACY POLICY Last updated: November 2025 This policy explains how Hgerman collects, uses, and protects personal data processed through this website. For the purposes of the General Data Protection Regulation (Regulation (EU) 2016/679 — GDPR), Hgerman acts as the data controller. Data controller: Hgerman ul. Władysława Pytlasińskiego 16/13 00-777 Warsaw, Poland NIP 5223334812 · REGON 541731785 Contact: info@hgerman.pl 1. What we collect - Contact information you provide voluntarily — name, email address, message content — when you reach out via email or LinkedIn. - Technical data automatically collected during your visit, including IP address, browser type, device information, referring URLs, and pages viewed. - Analytics data via industry-standard tools used to understand site usage and improve our infrastructure. 2. How we use it We process personal data to: - Respond to your inquiries and provide requested information. - Operate, secure, and improve our website and digital infrastructure. - Communicate updates about our products and services when you have requested it. - Comply with applicable legal obligations. We do not sell personal data. We do not use information submitted via this site to train AI models. 3. Legal basis Where required under GDPR, our processing relies on one or more of the following bases: your consent (Art. 6(1)(a)), performance of a contract or pre-contractual steps (Art. 6(1)(b)), our legitimate interests in operating and securing our infrastructure (Art. 6(1)(f)), and compliance with legal obligations (Art. 6(1)(c)). 4. Cookies We use essential cookies required for the site to function, and analytics cookies to understand visitor behavior. You can manage cookie preferences through your browser settings. Third-party services such as Wix, Google Fonts, and LinkedIn may set their own cookies subject to their respective privacy policies. 5. Sharing We share personal data only with trusted service providers who help operate our infrastructure (hosting, analytics, email communications), and with public authorities where required by law. All processors are bound by appropriate data protection agreements. 6. International transfers Some of our infrastructure providers operate outside the European Economic Area. Where data is transferred internationally, we rely on standard contractual clauses or equivalent safeguards approved under GDPR. 7. Your rights Under GDPR, you have the right to access, correct, delete, port, or restrict processing of your personal data, and to object to certain processing activities. You may also lodge a complaint with the Polish Data Protection Authority (UODO, uodo.gov.pl). To exercise any of these rights, contact info@hgerman.pl. 8. Retention We retain personal data only as long as necessary for the purposes outlined above, or as required by Polish and EU law. Inquiry communications are typically retained for up to 24 months after the last interaction. 9. Security We apply reasonable technical and organizational measures to protect personal data from unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the internet is fully secure, and we cannot guarantee absolute security. 10. Updates We may update this policy occasionally. Material changes will be communicated through this page with an updated revision date.