Privacy Policy
This Privacy Policy describes the simplified rules for processing personal data of users of the weldandit.pl website, contact forms and online demo tools provided by WeldAndIT.
1. Data Controller
The controller of personal data voluntarily provided by users through contact forms is WeldAndIT. Contact regarding data protection matters: office@weldandit.pl.
2. Scope of processed data
WeldAndIT primarily processes data voluntarily provided by the user in the contact form: email address, selected service, enquiry content and any other information voluntarily entered into the form fields.
The website may also process basic technical connection data, such as device, browser, IP address or security event information, where necessary for proper website operation, spam prevention, abuse protection or service security.
3. Purposes of data processing
- responding to the user’s enquiry,
- business contact related to WeldAndIT services,
- operation of contact forms,
- protection of the website and forms against spam, abuse and automated submissions,
- basic website analytics — only after consent to analytical cookies.
4. Legal basis for processing
Data submitted via the form is processed in order to respond to the enquiry and take steps prior to a possible contract, or on the basis of the controller’s legitimate interest in conducting business communication, handling correspondence and protecting the website against abuse. Analytical data is processed only after consent to analytical cookies.
5. Forms and external services
Contact forms available on the website may be handled by external technical service providers, in particular Formspree. Formspree is responsible for the technical handling of form submissions, anti-spam protection, validation of submissions and forwarding email messages to the controller.
The website may also use Google services related to visit analytics, security, fonts or embedded elements. These services may operate according to their own privacy and security rules.
Information on the data processing rules of external providers is available at:
Data submitted through forms or technical/analytical data may be processed by external providers outside the European Economic Area, in particular in the United States, in accordance with the compliance mechanisms, privacy policies and applicable data protection rules used by those providers.
6. Recipients of data
Data may be transferred only to entities technically supporting the operation of the website, forms, email, analytics, hosting and demo versions of tools. The scope of data transferred is limited to the minimum necessary for website operation and enquiry handling.
Demo versions may be embedded or run in external services, such as Streamlit Cloud. Use of such services may be subject to additional privacy rules of the relevant provider.
7. Data retention period
Data from forms is stored for the time necessary to handle the enquiry and further business contact, and then for the period necessary to organise correspondence or secure possible claims. Analytical data is stored according to the settings of the analytics tool and the user’s consent choice.
8. User rights
Where applicable, the user has the right to request access to data, rectification, erasure, restriction of processing, objection to processing and data portability. The user may also lodge a complaint with the competent data protection authority.
9. Voluntary provision of data
Providing data through the contact form is voluntary, but necessary to receive a response to the enquiry.
10. No automated decision-making
User data is not used for automated decision-making producing legal effects or similarly significant effects for the user.
11. Security
The controller applies appropriate organisational and technical measures to reduce the risk of unauthorised access to data, including the use of reputable service providers, form protection and limiting the scope of collected data to the necessary minimum.
Document version: May 2026.