Skip to content

Privacy policy

Last updated: 12 September 2026

This policy explains what data we collect through the contact form, why, on what legal basis, and how we protect it. We keep it plain and true to how our site actually works.

Data controller

The controller of your data is Marian Szenfeld SoftwareStorm (a sole proprietorship registered in Poland), based in Gliwice, Poland, EU VAT PL6312692117.

For any matter concerning your personal data, write to contact@softwarestorm.eu.

What data we collect and why

We collect only the data you enter in the contact form:

  • your name (or company name),
  • email address,
  • inquiry type,
  • your message.

We use it solely to respond to your inquiry and to correspond with you about it. Providing the data is voluntary, but without it we cannot reply.

Solely to protect the form against abuse, we also process an irreversible hash of the IP address the message was sent from. We use the hash only to protect the form: to count submissions in a single day, and to tie the task the form solves in the background to your browser. We do not store the IP address itself: it is not written to our logs, it is not kept alongside your message, and the hash is made with a key we do not disclose, so the address cannot be recovered from it.

  • Legitimate interest: handling your inquiry (Article 6(1)(f) GDPR) — replying to your message and our correspondence about it.
  • Legitimate interest: protecting the form (Article 6(1)(f) GDPR) — the IP address hash described above.
  • If your inquiry concerns potential cooperation, we also process the data to take steps at your request before entering into a contract (Article 6(1)(b) GDPR).

We do not make automated decisions about you and we do not profile you.

Who we share data with

Your message reaches us as an email, and on the way it passes through two providers.

Scaleway (a French cloud provider) handles site hosting, the software behind the form, and email delivery (Transactional Email). This stage runs on Scaleway servers in the European Union.

Proton AG runs the mailbox your message lands in. Proton is based in Switzerland, which lies outside the European Economic Area. Switzerland is, however, covered by a European Commission decision recognising an adequate level of data protection (Article 45 GDPR) — and that decision is the basis on which we transfer your data to Proton.

Apart from these two providers, we do not share the data you enter in the form with anyone. We do not sell your data and we do not use it for marketing. Separately from the form, we use a provider for our analytics server — we describe this under “Analytics and cookies”.

How long we keep data

We keep your message for as long as needed to handle your inquiry. If it does not lead to cooperation, we delete the data no later than 12 months after our last contact. We keep it longer only where required by an agreed engagement or by applicable law.

The IP address hash we use to protect the form against abuse is kept for no longer than 3 days and is deleted automatically.

Analytics and cookies

For visit statistics we use Umami, an analytics tool that does not use cookies. It records individual events: page views, traffic sources, and contact form submissions. It stores nothing that could identify you, and what we see in the dashboard are aggregate figures only.

To count visits the tool briefly processes your IP address but does not store it in its original form: it converts it into an irreversible hash. It also respects the Do Not Track setting in your browser. That is why our site shows no cookie banner and uses no marketing or tracking cookies.

The tool runs on a server we maintain ourselves, hosted by Euronodes (a company registered in Cyprus) in a data centre in Lisbon, within the European Union. Visit data never leaves that infrastructure.

Your rights

You have the right to:

  • access your data and receive a copy,
  • rectify (correct) your data,
  • erase your data,
  • restrict processing,
  • object to processing based on our legitimate interest.

The right to data portability applies where we process the data on the basis of a contract, or of steps taken before entering into one (Article 6(1)(b) GDPR), and by automated means.

To exercise these rights, write to contact@softwarestorm.eu. You also have the right to lodge a complaint with the supervisory authority — in Poland, the President of the Personal Data Protection Office (PUODO).

Policy changes

If we change how we process data, we will update this policy. You will find the date of the last change at the top of the page.