Enquiry and sign-up data

1. Data controller

The data controller is ITm8 Piotr Nietrzebka, Polish tax identification number (NIP) 8381773216. For matters concerning personal data, please use the contact form.

2. Purpose and legal basis

We process the data to respond to your enquiry, understand the area of work described and prepare for possible cooperation. The legal basis is Article 6(1)(b) GDPR — taking steps at the data subject's request before entering into a contract — and, for the remaining processing, Article 6(1)(f) GDPR: the controller's legitimate interests in conducting business correspondence, protecting the form and establishing, exercising or defending legal claims.

Separate demo and sandbox sign-ups are used only to tell you when the demo is available or contact you about joining the pilot, according to your selection. This contact relies on consent under Article 6(1)(a) GDPR. It does not subscribe you to a newsletter or other campaigns, create an account or place an order.

3. Scope and recipients

We process the data provided in the form: full name, work email address, optional organisation name and enquiry. Data may be disclosed to service providers needed to host and protect the site and deliver email — in particular OpenAI Sites, Cloudflare and Resend — only to the extent necessary to provide those services.

For demo and sandbox sign-ups, we collect your email address, selected option and contact language, plus a consent record with its date and information version. Requests are sent through Resend to ITm8’s sign-up mailbox. We do not ask for account credentials or company documents.

4. Transfers outside the EEA

Service providers may process data outside the European Economic Area. In such cases, transfers are made using safeguards provided by Chapter V GDPR, in particular adequacy decisions or standard contractual clauses.

5. Retention

We retain enquiry data for as long as needed to conduct the conversation and then for no more than 12 months from the most recent contact. This period may be extended where necessary to enter into or perform a contract, comply with a legal obligation, or establish, exercise or defend legal claims.

Demo and sandbox sign-up data is retained until consent is withdrawn, for no longer than 12 months from the request. Any subsequent cooperation requires separate agreement.

6. Your rights

Within the limits set by GDPR, you have the right to access, rectify or erase your data, restrict its processing, receive data portability and object to processing. You also have the right to lodge a complaint with the President of the Personal Data Protection Office in Poland.

You may withdraw consent to demo or sandbox contact at any time by replying to our message or using the contact form. Withdrawal does not affect the lawfulness of processing carried out beforehand.

7. Voluntary provision and automation

Providing data is voluntary. The enquiry form requires your name, email address and description of the work. Demo and sandbox sign-ups require only your email address and consent to the selected contact. Form data is not used for automated decision-making or profiling.