Privacy Policy
Version of 23.08.2026
This is a translation. The Polish version of this Policy is the legally binding one; in the event of any discrepancy, the Polish text prevails.
1. Who processes your data
The controller of your personal data is General Cargo Sp. z o.o., with its registered office in Warsaw (03-531), ul. Rembrandta 4A/39, entered in the register of entrepreneurs of the National Court Register under number KRS 0000721751 (District Court for the Capital City of Warsaw, 14th Commercial Division of the National Court Register), NIP 5242854470, REGON 369622589, share capital PLN 55,000 — the owner of the movivatech.pl website (“we”, “the Controller”).
Contact for all data protection matters: moviva.tech@moviva.pl.
We have not appointed a data protection officer, as we are not required to. Should we appoint one, we will publish their contact details in this Policy.
2. What data we process
We collect only what we need in order to answer your enquiry and to keep the website running safely.
- Contact form: your name, e-mail address and the content of your message, provided by you.
- E-mail correspondence: if you write to us directly — your e-mail address, the content of your message and any attachments you send us.
- Technical data: IP address, date and time of the request, browser and system type, and the page you came from. These are recorded automatically in server logs and security systems.
- Anti-bot protection data: where the Cloudflare Turnstile check is shown next to the form, your IP address and technical browser signals needed to tell a human from a bot are processed.
We do not collect special categories of data (such as health, beliefs or trade union membership) and we ask you not to include them in your message.
3. Why and on what legal basis
| Purpose | Legal basis |
|---|---|
| Answering an enquiry sent through the form or by e-mail, preparing a quote and agreeing terms of cooperation | Article 6(1)(b) GDPR — steps taken at your request prior to entering into a contract |
| Handling ongoing correspondence not aimed at concluding a contract | Article 6(1)(f) GDPR — our legitimate interest in handling correspondence |
| Website security, protection against spam and abuse | Article 6(1)(f) GDPR — our legitimate interest in ensuring security |
| Establishing, pursuing or defending claims | Article 6(1)(f) GDPR — our legitimate interest |
| Complying with legal obligations, including tax and accounting ones, should cooperation begin | Article 6(1)(c) GDPR |
We do not ask for your consent in order to handle your enquiry — no consent is needed to reply to your message; the basis described above is sufficient.
4. Who we entrust data to
We entrust data only to providers offering sufficient guarantees of protection, and only to the extent necessary. We do not entrust personal data without a data processing agreement — concluded separately or forming part of the provider’s terms of service.
- Cloudflare — website hosting, CDN, protection against abuse (including Turnstile next to the form),
- Brevo (Sendinblue SAS, France) — technical delivery of e-mail messages from the form and of the automatic acknowledgement,
- Zoho — operation of our mailbox, where correspondence is stored.
We may also disclose data to public authorities where they request it on a statutory basis.
5. Transfers outside the European Economic Area
E-mail messages from the form are sent by Brevo (Sendinblue SAS), based in France — the data therefore stays within the European Economic Area and is not transferred to a third country. Our other providers — Cloudflare and Zoho — are global companies, and processing may involve access to the data from outside the European Economic Area. In that case we transfer data only where one of the mechanisms provided for in the GDPR is in place: a European Commission adequacy decision (Article 45 GDPR) or standard contractual clauses adopted by the Commission (Article 46(2)(c) GDPR).
To find out which mechanism applies to a given provider, and to obtain a copy of the relevant safeguards, write to moviva.tech@moviva.pl.
6. How long we keep data
| Data | Retention period |
|---|---|
| Correspondence from the form and by e-mail that did not lead to cooperation | for the time needed to handle the matter, then up to 12 months from the last contact |
| Correspondence and documents relating to a concluded contract | for the duration of the cooperation, then until claims become time-barred |
| Accounting documents | 5 years from the end of the calendar year in which the tax obligation arose |
| Technical and security logs | as a rule up to 12 months |
After these periods we delete the data or remove the ability to attribute it to a person.
7. Your rights
You have the right to:
- access your data and obtain a copy of it,
- rectification of inaccurate data and completion of incomplete data,
- erasure of your data,
- restriction of processing,
- data portability,
- object to processing based on our legitimate interest, on grounds relating to your particular situation.
To exercise any of these rights, write to moviva.tech@moviva.pl. We respond without undue delay and no later than one month from receiving your request.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland.
8. Do you have to provide data
Providing data is voluntary, but without your name, e-mail address and the content of your message we will not be able to answer your enquiry. Not providing data has no other consequences.
9. Automated decisions and profiling
We do not take decisions concerning you based solely on automated processing, including profiling, that would produce legal effects concerning you or similarly significantly affect you. The only automated step is filtering out submissions recognised as spam — in that case you can write to us directly at the address given on the website.
10. Cookies
The rules on cookies and browser storage are set out in a separate Cookie Policy.
11. Changes to this Policy
We may update this Policy as the website develops. The current version, together with the date it takes effect, is always available at movivatech.pl/polityka-prywatnosci.