Privacy policy

1. Data controller

The controller of your personal data is ALIAX IT spółka z ograniczoną odpowiedzialnością (ALIAX IT sp. z o.o. for short). The company runs the sencx.com website and develops the SenCX product.

For matters concerning personal data, write to contact@aliaxit.com or to the company's registered office address.

2. Data protection officer

We have not appointed a data protection officer. For all matters concerning your data, write to contact@aliaxit.com.

3. What data we process and where it comes from

Contact form

When you send the contact form, we process the data you enter in it:

• your full name,
• your work email address,
• your company name, if you provide it (optional field),
• the content of your message and any data you include in it yourself.

The form also has a hidden field that a person does not fill in, and it checks how long it took to fill in the form. Both are used only to tell messages apart from automated spam.

Messages from the form are sent by email through the Google Workspace service to the company's business mailbox. The website does not store them in a separate database and does not send an automatic confirmation to your address.

Email correspondence

When you write to us directly or reply to our message, we process your email address, your name (if you provide it), the content of the correspondence and the details in your signature, for example your company name and job title.

Technical data

When you visit the website, the hosting provider's server automatically records in its logs the technical data needed to display the page and protect the website, in particular your IP address, the date and time of the request, the address of the page you open and information about your browser and system (user-agent).

To protect the form against spam, the server also uses the IP address of the person sending the form to limit the number of requests sent from one address within a short time. For this purpose, the IP address is kept only in the server's memory, for no longer than 15 minutes, and is not recorded in the application logs.

Pages are delivered by Vercel's network of servers located around the world (content delivery network, CDN), so your request is handled by the server closest to you, which may be outside the European Economic Area. The contact form is handled by a server in Frankfurt am Main (Germany).

Visit and page speed statistics (only with your consent)

If you click “Accept” in the banner, the website starts the Vercel Web Analytics and Vercel Speed Insights services. A script loaded from the website's own domain then sends to Vercel: the address of the page you open, the address of the page you came from (referrer), the time of the page view, your device type, operating system and browser, your approximate location (country, region, city) derived from your IP address, the page route, URL parameters if present (e.g. utm_ campaign tags; Vercel filters some parameters out) and the script version, and, in Speed Insights, page loading speed measurements, the type of network connection and the page element a measurement relates to.

These services use no cookies. Vercel uses your IP address only briefly, to derive your approximate location and calculate the hash, and does not store it. To count unique visitors, Vercel links page views from the same browser using a hash calculated from the request data and deletes the hash after 24 hours. In the dashboard we see aggregated reports, for example page views by page, country, city and device type. We do not combine them with form data or try to identify you. If you click “Reject” or make no choice, the statistics scripts are not loaded.

Where the data comes from

The data comes directly from you or from your browser. The website uses no advertising pixels, marketing tools or AI chat, and visit statistics run only with your consent.

4. Purposes and legal bases of processing

The table shows why we process data, on what legal basis and for how long we keep it.

The form is used only to reply to your enquiry, which is why it does not ask for marketing consent. We do not use data from the website to send newsletters or commercial information you have not asked for.

5. Do you have to provide data

Providing data is voluntary. Your name, email address and message are needed to send the form. We cannot reply without your email address and message. You provide your company name only if you want to.

Your browser sends technical data automatically. The page cannot be displayed without it. Consent to visit statistics is voluntary: the website works the same without it.

6. Who we share data with

We share data with providers who help us run the website and email. They process it on our behalf as processors (Article 28 GDPR). Public authorities may also receive data where the law requires us to disclose it.

We do not sell personal data and do not share it with other companies for marketing purposes.

7. Transfers outside the European Economic Area

Vercel Inc. and Google Cloud Poland sp. z o.o., through the Google group companies that operate the Google Workspace service, may also process data outside the European Economic Area (EEA), including in the United States.

Such transfers take place on the basis of the European Commission's decision finding an adequate level of data protection under the EU-US Data Privacy Framework (Article 45 GDPR), for providers participating in that framework, or on the basis of standard contractual clauses adopted by the European Commission (Article 46(2)(c) GDPR).

You can obtain a copy of the safeguards used, or information on where they have been made available, by writing to contact@aliaxit.com.

8. How long we keep data

• Form enquiries and correspondence: until the correspondence ends, and then until the limitation period for claims expires, that is for 3 years.
• Complaints: until they are handled, and then until the limitation period for claims expires, that is for 3 years.
• Server logs: in the hosting dashboard no longer than 1 day, after which they are deleted automatically. Longer only if they are needed to investigate a security incident.
• IP address in the form's request limit: only in the server's memory, for no longer than 15 minutes.
• Visit and page speed statistics (only with consent): Vercel deletes the hash linking page views after 24 hours. In the dashboard we see visit statistics for the last 12 months and speed measurements for the last 7 days. Vercel may keep the collected data longer, under its data processing agreement.

If you successfully object or request erasure of your data, we will delete it earlier, unless we need it to establish, exercise or defend legal claims.

9. Your rights

You have the right to:

• access your data and receive a copy of it (Article 15 GDPR),
• have your data rectified (Article 16 GDPR),
• have your data erased (Article 17 GDPR),
• restrict processing (Article 18 GDPR),
• data portability for data we process on the basis of your consent, a contract or steps prior to entering into it (Article 20 GDPR),
• object to processing based on our legitimate interest, on grounds relating to your particular situation (Article 21 GDPR).

You can withdraw your consent to visit statistics at any time, as easily as you gave it: click “Privacy settings” in the footer and choose “Reject”. Withdrawing consent does not affect the lawfulness of processing before its withdrawal.

To exercise your rights, write to contact@aliaxit.com. We may ask for information needed to confirm your identity. We will reply without undue delay and in any event within one month of receiving your request (Article 12(3) GDPR).

Complaint to the supervisory authority

If you believe that we process your data unlawfully, you can lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, Poland, uodo.gov.pl (opens in a new tab).

10. Automated decisions and profiling

We do not take decisions about you based solely on automated processing, including profiling, that would produce legal effects concerning you or similarly significantly affect you (Article 22 GDPR).

The form automatically rejects messages that look like spam, for example when too many requests have been sent from one IP address within a short time or when the hidden field intended for bots has been filled in. If your message does not reach us, write directly to contact@aliaxit.com.

11. Cookies

The website sets no cookies and uses no marketing tools. It starts Vercel visit statistics only with your consent and stores your choice in browser storage (localStorage). For details, see the Cookie policy.

12. Changes to this policy

We will update this policy when the way we process data changes, for example when we add a new provider or a new website feature. The current version is always on this page, and the date of the last update is at the top.