Legal

Privacy
policy.

How we collect, use and protect your personal data. Written to be read, not buried in legalese.

Last updated: 5 October 2026

1. Who we are

Mobinea sp. z o.o. (the "Company", "we", "our", "us") is an IT consulting firm based in Warsaw, Poland. We are registered at Branickiego 15, 02-972 Warsaw, Poland under VAT number PL8982202777.

For questions about this policy or your personal data, contact us at privacy@mobinea.services.

We act as the Data Controller for the personal data described in this policy, as defined by the EU General Data Protection Regulation (GDPR, Regulation 2016/679) and the Polish Personal Data Protection Act of 10 May 2018.

2. What data we collect

Data you provide directly

When you submit our contact form or email us, we collect:

  • Full name
  • Company name
  • Work email address
  • Phone number (if provided)
  • Content of your message
  • Information about your project or inquiry

Data collected automatically

When you visit our website, we automatically collect:

  • IP address (anonymized for analytics)
  • Browser type and version
  • Operating system
  • Pages visited and time spent on the site
  • Referring website
  • Date and time of your visit

When you submit the contact form, we also record the IP address, the referring page and the browser identification string of the submission. We use these only to detect and block spam and abuse of the form.

Cookies and similar technologies

We use a minimal set of cookies. Essential cookies are used to ensure the website functions correctly. We do not use advertising cookies or share data with ad networks.

We use Google Analytics 4 to understand how the site is used: pages visited, time on page, referring site, approximate location and the device and browser type. IP addresses are anonymised. Analytics cookies are set only after you accept them in the cookie banner; until then, and if you decline, Google Analytics runs in consent mode without cookies or identifiers. Your choice is stored in your browser and you can change it at any time via the "Cookie preferences" link in the footer.

3. Why we collect your data

We process your personal data only for specific, legitimate purposes:

To respond to your inquiry (Art. 6(1)(b) GDPR - contract performance / pre-contractual steps)

When you contact us about a potential project, we use your data to answer your questions, prepare proposals, and communicate about our services.

For our legitimate business interests (Art. 6(1)(f) GDPR)

We may process your data to improve our website, analyze aggregated visitor behavior, and protect against fraudulent or abusive use of our services.

To comply with legal obligations (Art. 6(1)(c) GDPR)

We keep records of business communications for accounting, tax, and legal purposes as required by Polish and EU law.

With your consent (Art. 6(1)(a) GDPR)

If you explicitly agree (for example, by subscribing to updates), we may send you occasional communications. You can withdraw this consent at any time.

4. Who has access to your data

We treat your data with care and share it only with parties who help us deliver our services:

  • Our team - employees and contractors bound by confidentiality agreements
  • Service providers - email hosting, form processing, analytics platforms, cloud infrastructure (listed in section 7)
  • Legal and tax advisors - when required for compliance
  • Authorities - only when legally required (e.g. tax authorities, law enforcement with valid orders)

We do not sell your personal data. Ever.

5. International data transfers

Some of our service providers (e.g. email, analytics, form processing) may be located outside the European Economic Area (EEA), including in the United States. Whenever we transfer data outside the EEA, we ensure appropriate safeguards are in place:

  • Standard Contractual Clauses approved by the European Commission
  • EU-U.S. Data Privacy Framework certification (where applicable)
  • Other legally recognized transfer mechanisms

6. How long we keep your data

We keep your data only as long as necessary for the purposes described in this policy:

  • Contact form submissions: up to 3 years from last contact, unless a business relationship develops
  • Active client communications: duration of the engagement plus 5 years for legal/tax purposes
  • Website analytics: up to 26 months (aggregated, anonymized)
  • Marketing consent: until you withdraw consent, plus evidence of consent for 3 years

7. Third-party services we use

To run this website and communicate with you, we rely on trusted providers:

  • SiteGround - website hosting; the contact form is processed by a script on our own hosting and forwarded to our business email, no separate form provider is involved
  • Google Workspace - business email
  • Google Analytics 4 - visitor analytics, with IP anonymisation and consent mode (see section 2)
  • Google Fonts - web fonts loaded from Google servers, which receive your IP address when the page loads

Each provider is bound by a Data Processing Agreement (DPA) ensuring GDPR-compliant handling of your data.

8. Your rights

Under GDPR, you have the following rights regarding your personal data:

  • Right of access - ask us what data we hold about you
  • Right to rectification - ask us to correct inaccurate data
  • Right to erasure ("right to be forgotten") - ask us to delete your data
  • Right to restriction - ask us to limit how we process your data
  • Right to data portability - receive your data in a machine-readable format
  • Right to object - object to processing based on legitimate interests
  • Right to withdraw consent - at any time, with no effect on lawfulness of prior processing
  • Right to lodge a complaint - with the Polish Data Protection Authority (UODO) or your local supervisory authority

To exercise any of these rights, email us at privacy@mobinea.services. We will respond within 30 days.

9. Security

We take data security seriously. Our measures include:

  • HTTPS/TLS encryption for all website traffic
  • Encrypted storage of personal data at rest
  • Access controls and role-based permissions for team members
  • Regular security reviews and updates
  • Secure, audited third-party providers

No system is 100% secure. If we ever experience a data breach affecting your personal data, we will notify you and the relevant authorities within 72 hours, as required by GDPR.

10. Children's privacy

Our services are directed at businesses and professionals. We do not knowingly collect personal data from children under 16. If you believe we have collected data from a child, please contact us and we will delete it promptly.

11. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will update the "Last updated" date at the top and, where appropriate, notify you directly.

12. Contact us

Questions about this policy or how we handle your data? We are happy to hear from you:

This policy was prepared to comply with the EU General Data Protection Regulation (GDPR, Regulation 2016/679) and applicable Polish laws. It is not a substitute for legal advice tailored to your specific business needs.