Privacy policy
Who processes your data, on what basis, for how long, and what you can do about it.
1. Who the data controller is
The controller of your personal data is:
ul. Szlachecka 19, 30-444 Libertów, Poland
NIP 9442300011 · REGON 544080503 · KRS 0001226410
kontakt@qmedic.io · +48 533 115 319
We have not appointed a data protection officer. For any matter concerning personal data, write to kontakt@qmedic.io.
2. What data we collect
From the contact form
| Data | Required |
|---|---|
| Full name | yes |
| Email address | yes |
| Company name | no |
| Phone number | no |
| Industry | no — chosen from a list |
| Subject of the enquiry | no — chosen from a list |
| Message | no |
We also record the language the form was filled in and the address of the page it was sent from. This serves only to handle the enquiry properly.
Simply by visiting the site
Your IP address and basic browser information reach the infrastructure providers that serve this site and its assets — they are listed in section 5. This is inherent to how the internet works. We build no statistics or profiles from it and never combine it with data from the form.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Answering an enquiry sent through the form | Art. 6(1)(b) GDPR — steps taken prior to entering into a contract, where the enquiry concerns cooperation |
| Replying and further correspondence | Art. 6(1)(f) GDPR — our legitimate interest in communicating with people interested in our services |
| Keeping the site secure and available | Art. 6(1)(f) GDPR — our legitimate interest |
Providing your data is voluntary. Without a name and an email address, however, we cannot reply — the remaining fields may be left blank.
4. How long we keep the data
We keep form data for 12 months from the last contact and then delete it.
If the enquiry leads to a contract, data related to performing that contract is kept for its duration and, afterwards, for the period required by tax and accounting law and until claims become time-barred.
You may ask for earlier deletion at any time — see section 7.
5. Who we share data with
We do not sell personal data and do not share it with anyone for marketing purposes. We do rely on providers that either process data on our behalf or receive it as a consequence of how the site works:
| Provider | Role | What it receives |
|---|---|---|
| Google Ireland Ltd / Google LLC | Google Workspace (email) and Google Apps Script, which handles form submissions | the full content of the enquiry |
| GitHub, Inc. (Microsoft) | site hosting — GitHub Pages | IP address and technical data when the page loads |
Data may also be disclosed to authorities entitled to request it under applicable law.
6. Transfers outside the European Economic Area
Google LLC and GitHub, Inc. are established in the United States, so your data may be processed there.
Transfers rely on the European Commission's implementing decision of 10 July 2023 finding an adequate level of protection under the EU-US Data Privacy Framework and, where that decision does not apply, on the Standard Contractual Clauses approved by the Commission.
7. Your rights
In connection with the processing of your data you have the right to:
- access your data and receive a copy of it,
- rectification of inaccurate or incomplete data,
- erasure of your data,
- restriction of processing,
- object to processing based on our legitimate interest,
- data portability to another controller,
- lodge a complaint with a supervisory authority.
To exercise any of these rights, write to kontakt@qmedic.io. We respond within one month of receiving the request at the latest.
The competent supervisory authority is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland — uodo.gov.pl.
8. Cookies and analytics
This site uses no cookies. We use no analytics tools, no tracking pixels and no advertising pixels, and we store nothing in your browser.
That is why you will not see a cookie consent banner here — there is nothing to consent to.
9. Profiling and automated decisions
We do not profile visitors and make no decisions about anyone by solely automated means.
10. Changes to this policy
If we change how we process data, we will update this document and change the date shown at the top. Earlier versions are available on request.