Privacy and cookies policy

1. Data controller

The controller of personal data processed through this website is Velox Group sp. z o.o., with its registered office in Warsaw, Poland. Gridecture is a brand owned by the controller.

The controller has not appointed a data protection officer. Questions concerning personal data may be sent directly to the controller.

2. Data we collect

The project brief form collects the company name, venue type, available space, expected number of stations and a business email address. We do not require a first name or surname.

Basic technical data may also be processed when the website is used, including the IP address, request time, visited address, browser information and security messages. Technical data is used solely to operate and protect the website and form.

3. Purposes and legal bases

• handling an enquiry, replying and preparing a B2B offer: Article 6(1)(f) GDPR, our legitimate interest in conducting business correspondence and responding to enquiries;
• taking steps before entering into a contract when a person contacts us on their own behalf: Article 6(1)(b) GDPR;
• website security, abuse prevention and error diagnostics: Article 6(1)(f) GDPR;
• establishing, exercising or defending legal claims: Article 6(1)(f) GDPR.

4. Voluntary provision of data

Providing data is voluntary, but fields marked as required are necessary to submit a brief and receive a response. The data is not used for newsletters or marketing messages unrelated to the enquiry.

5. Retention

• enquiries that do not result in cooperation are retained for no more than 12 months after the last contact;
• if an enquiry leads to an agreement, data is retained for the duration of the relationship and then for periods required by tax and accounting law and applicable limitation periods;
• technical and security information is retained only for as long as necessary to prevent abuse, diagnose errors and protect the website, in accordance with infrastructure provider settings.

6. Data recipients

Data may be entrusted to providers of website hosting, email delivery, business email, technical support, legal and accounting services. The current form uses Sites infrastructure, Resend and Google Workspace. Providers receive data only to the extent necessary to deliver their services.

Form messages are sent by Resend directly to Gridecture’s dedicated business mailbox in Google Workspace. Gridecture does not store submissions in a separate database or CRM.

7. Transfers outside the EEA

Some infrastructure providers may process data outside the European Economic Area. Where this occurs, transfers rely on safeguards provided by the GDPR, in particular an adequacy decision or the European Commission's standard contractual clauses.

8. Your rights

• access to data and a copy of it;
• rectification of inaccurate data;
• erasure where there is no basis for continued processing;
• restriction of processing;
• objection to processing based on Article 6(1)(f) GDPR;
• data portability where the statutory conditions are met;
• a complaint to the President of the Polish Personal Data Protection Office.

9. Automated decisions and profiling

Data submitted through the form is not used for automated decision-making or profiling.

10. Cookies and browser storage

The website does not use analytics or advertising cookies, marketing pixels or tracking tools. We do not use Google Analytics, Meta Pixel, LinkedIn Insight Tag or Hotjar.

Only the selected language is stored in the browser under the “gridecture-language” key. This functional setting remembers an option explicitly selected by the user. The hosting provider may use essential technical mechanisms required for security and proper website delivery.

11. Security

We use HTTPS encryption, request size and frequency limits, server-side validation, automated-spam protection and restricted mailbox access. Administrative accounts are protected with two-factor authentication.

12. Policy changes

This policy may be updated when the law, website operation or service providers change. The current version is always published at this address together with its last-updated date.