Privacy Policy
Last updated: 2 November 2026. This policy explains how we process personal data under Regulation (EU) 2016/679 (GDPR).
1. Controller
Hlinix sp. z o.o., ul. Marcina Kasprzaka 31 lok. 119, 01-234 Warszawa, Poland. Contact: [email protected]. See our Imprint for full company details.
2. What we process, why, and on what legal basis
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Server/access logs (IP, timestamp, user agent) | Deliver and secure the website; prevent abuse | Art. 6(1)(f) legitimate interests |
| Contact email content | Respond to your enquiry | Art. 6(1)(f) legitimate interests (handling enquiries) |
| Optional page-view analytics (only after consent) | Understand site usage in aggregate | Art. 6(1)(a) consent |
| Outbound click counts (via our /go redirect) | Aggregate, non-identifying count of which recommendations are clicked | Art. 6(1)(f) legitimate interests |
Outbound click handling keeps aggregate counts plus short-lived technical event entries (the link clicked, the referring page name, and a timestamp) that contain no personal identifier; it is not linked to an identifiable person, and the redirect works whether or not you consent to analytics. Any affiliate network you may reach after clicking an affiliate link is an independent controller for the data it collects; see its own privacy notice.
3. Cookies & similar technologies
We do not set non-essential cookies or load analytics before you consent. See our Cookie Policy.
4. Retention
Server/access logs are kept only as long as needed for security/operations (typically a short period) and then deleted or anonymised. Aggregate analytics and outbound-click counts hold no personal identifiers. The short-lived technical event entries described above contain no personal identifier and are retained only for the limited period our hosting provider keeps function logs (typically up to a few weeks), after which they are discarded. Emails are kept as long as needed to handle your request and to meet legal obligations.
5. Recipients & transfers
We use service providers (e.g. hosting/CDN, email routing) acting as processors. Where personal data is transferred outside the EEA, we rely on appropriate safeguards — primarily the European Commission’s Standard Contractual Clauses. You can request a copy of the relevant safeguards by emailing [email protected].
6. Your rights
You have the right to access, rectification, erasure, restriction, data portability, and to object. Where processing is based on consent, you can withdraw it at any time (via “Cookie settings” for analytics) without affecting prior processing. To exercise your rights, contact [email protected].
7. Complaints
You may lodge a complaint with the Polish supervisory authority: Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa.