← Home

Privacy Policy

Effective from 29 October 2026

We care about your privacy. This policy explains what personal data we collect on autiqa.com, why, how long we keep it and what rights you have. It fulfils the information obligation under Article 13 of the GDPR¹ and describes the cookies and similar technologies used on the site. The Polish version of this policy prevails in case of discrepancies.

1. Data controller

The controller of your personal data is:

Company

AUTIQA sp. z o.o.

Address

ul. Żelazna 51/53, 00-841 Warsaw, Poland

KRS

0001241661

Registry court

District Court for the Capital City of Warsaw in Warsaw, 13th Commercial Division of the National Court Register

Share capital

PLN 5,000

NIP (VAT ID)

5273219450

REGON

544782872

E-mail

hello@autiqa.com

For any matter related to personal data, write to hello@autiqa.com or by post to our registered address. We have not appointed a Data Protection Officer.

2. What data we process, why and on what legal basis

Contact form

When you submit the form, we process the data you provide: full name, e-mail address, phone number (optional), website or shop URL, product type, market, budget (optional) and the content of your message.

• Purpose: replying to your inquiry, scheduling a consultation and preparing an offer.
• Legal basis: your consent (Art. 6(1)(a) GDPR) and steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
• Retention: until the correspondence ends; if no cooperation follows — no longer than 12 months after the last contact or until consent is withdrawn. If we sign a contract, data is kept for its duration and until the limitation period for claims expires.

Marketing contact

• Purpose: sending information about our services by e-mail or phone — only if you tick the optional consent in the form.
• Legal basis: your consent (Art. 6(1)(a) GDPR in conjunction with Art. 398 of the Polish Electronic Communications Law).
• Retention: until you withdraw consent.

E-mail correspondence

• Purpose: handling correspondence when you write to us directly.
• Legal basis: our legitimate interest in replying to messages (Art. 6(1)(f) GDPR).
• Retention: until the correspondence ends, then for the limitation period of any claims.

Visit statistics (Google Analytics)

• Purpose: analysing site traffic — e.g. which pages are visited, where visitors come from and which devices they use — to improve the website.
• Legal basis: your consent to analytics cookies (Art. 6(1)(a) GDPR in conjunction with Art. 399 of the Polish Electronic Communications Law).
• Retention: according to the service settings — no longer than 14 months.

Website operation and security

• Purpose: delivering the website, protecting it against abuse and spam (including in the form) and diagnosing errors. The server automatically logs data such as IP address, browser type and request time.
• Legal basis: our legitimate interest (Art. 6(1)(f) GDPR).
• Retention: according to the hosting provider's settings, generally no longer than 30 days.

Establishing, pursuing or defending claims

• Legal basis: our legitimate interest (Art. 6(1)(f) GDPR).
• Retention: until the limitation period for claims expires.

3. Is providing data mandatory?

Providing data is voluntary. However, without the fields marked as required we will not be able to respond to your inquiry. We do not make decisions about you based solely on automated processing, including profiling, that would produce legal effects.

4. Who we share data with

Data may be shared with entities processing it on our behalf, strictly to the extent necessary to provide their services:

• Netlify, Inc. — website hosting;
• Web3Forms — technical delivery of form messages to our mailbox;
• Google Ireland Ltd. / Google LLC — Google Analytics, Google Tag Manager and Google Fonts (when fonts load, your browser sends your IP address to Google);
• Usercentrics A/S (Cookiebot) — the consent banner and storing your cookie choices;
• jsDelivr — the CDN serving the site's script libraries;
• our e-mail provider and, where necessary, our accounting office and legal advisers.

Data may also be disclosed to authorities where required by law.

5. Transfers outside the EEA

Some providers (including Google LLC and Netlify, Inc.) are based in the USA or use servers outside the European Economic Area. In such cases data is transferred on the basis of a European Commission adequacy decision (EU-U.S. Data Privacy Framework) or standard contractual clauses approved by the European Commission (Art. 45–46 GDPR). You can request a copy of these safeguards by contacting us.

6. Your rights

You have the right to:

• access your data and receive a copy;
• rectify (correct) your data;
• erasure of your data;
• restriction of processing;
• data portability;
• object to processing based on legitimate interest;
• withdraw consent at any time — without affecting the lawfulness of processing before withdrawal;
• lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl, or the supervisory authority in your country.

To exercise your rights, write to hello@autiqa.com. We will reply without undue delay and within one month at the latest.

7. Cookies and similar technologies

Cookies are small files stored on your device by your browser. The site also uses the browser's local storage (localStorage), which works similarly. Here is what we store:

On your first visit we show a Cookiebot banner where you decide which cookie categories you accept. Until you decide, Google Analytics does not set any cookies. Essential entries do not identify you. You can change or withdraw your consent at any time: change cookie settings. You can also delete cookies in your browser settings or install the Google Analytics opt-out browser add-on. Disabling cookies does not affect the basic functioning of the site.

8. Security

The connection to the site is encrypted (HTTPS). We apply technical and organisational measures protecting data against unauthorised access, loss or alteration, and only authorised persons have access to it.

9. Changes to this policy

This policy may be updated, e.g. when laws or the tools used on the site change. The current version is always available on this page, with its effective date shown at the top.

¹ Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation).