In short: data from the contact form is used only to reply to your enquiry, and visit statistics are collected only with your consent.

Controller

The controller of personal data collected through xdivision.io is BLM Media sp. z o.o., ul. Komorowska 4/41, 05-800 Pruszków, Poland, tax ID (NIP) 534-257-43-10. For anything related to your personal data, use the contact form or email biuro@xdivision.io.

This policy covers the website only. Data we process for clients as part of projects is governed by the data processing agreement signed with each client.

What data and why

Contact form

Name, email, company and project description. We use them to reply to your enquiry and prepare a call or proposal. Legal basis: our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR) and, where the enquiry concerns entering into a contract, steps taken before doing so (Art. 6(1)(b) GDPR).

Visit statistics

If you consent, we use Google Analytics to see which pages are read and where visitors come from. Legal basis: consent (Art. 6(1)(a) GDPR and Art. 399 of the Polish Electronic Communications Law). Without consent, the analytics tool does not store cookies.

Site operation

The site may store small settings in your browser that it needs to work, such as your cookie banner choice. These do not require consent.

Cookies

Analytics cookies are stored only after you consent in the banner. You can withdraw or change your consent at any time via “Cookie settings” in the footer or in your browser settings. Withdrawing consent does not affect the lawfulness of processing before withdrawal.

Who we share data with

Service providers

Vercel Inc. (hosting) and Resend Inc. (delivering form enquiries to our inbox), plus Google (Google Analytics, only with consent). Each processes data on our behalf and only as needed to provide the service.

Outside the EEA

These providers may process data in the United States. Transfers rely on the European Commission’s decision on the EU-US Data Privacy Framework or on standard contractual clauses.

How long

Enquiries

Up to 12 months from our last contact or, if we sign a contract, for its duration and until any claims become time-barred.

Statistics

In line with the Google Analytics retention setting, no longer than 14 months.

Your rights

You have the right to access, rectify and erase your data, to restrict processing, to data portability and to object to processing based on legitimate interest. You can withdraw consent at any time. You may also lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw.

Providing data in the form is voluntary, but without it we cannot reply. We do not make decisions about you based solely on automated processing, including profiling, that would have legal effects.

Changes

We may update this policy, for example when we change providers. The current version is always on this page. Version of 29 September 2026.