Privacy Policy

The controller of your personal data is Michał Fox, doing business under the "Aphrodi" brand (hereinafter "Aphrodi", "we", "us"), based in Kraków, Poland, email: hello@aphrodi.eu.

Contact details

your name or company name, email address and phone number (if you provide it).

Form data

the content of your message, your answers in the brief, the quote parameters from the calculator and any files you send us.

Order data

the scope, the quote, correspondence and billing details.

Technical data (analytics)

the pages you visit, the length of the visit and how far you scroll a page, the domain of the site you came from, the FAQ questions you open, and your device and browser type. We do not store your IP address in analytics. The server records it in its technical logs together with the date and the address visited, solely for the security of the site.

• Purpose

  Replying to a message, brief or quote request

  Legal basis

  Article 6(1)(b) GDPR (steps taken before entering into a contract)

• Purpose

  Performing the ordered service and contacting you about it

  Legal basis

  Article 6(1)(b) GDPR (performance of a contract)

• Purpose

  Billing and tax obligations

  Legal basis

  Article 6(1)(c) GDPR (legal obligation)

• Purpose

  Site analytics and protecting forms against spam

  Legal basis

  Article 6(1)(f) GDPR (legitimate interest)

• Purpose

  Establishing, pursuing and defending claims

  Legal basis

  Article 6(1)(f) GDPR (legitimate interest)

1. 4.1.

   We use only our own analytics system, without Google Analytics or any other third-party tracking tools. We collect the statistics needed to improve the site and do not build user profiles from them.

2. 4.2.

   Analytics stores nothing in your browser. We count a visit on the server: the session identifier is a hash of your IP address and browser type with a random value that changes every day. The hash cannot be reversed, and the next day it no longer matches the same person.

3. 4.3.

   The aphrodi.eu site does not set cookies. It stores only the following data in your browser, needed for the site to work:

• Name

  ap_reflink, ap_reflink_sent

  Type

  sessionStorage

  Purpose

  the referral code from a referral link, attached to form messages and page view statistics, and a marker that the visit from that link has already been counted

  Retention

  until the tab is closed

• Name

  admin_token

  Type

  localStorage

  Purpose

  a sign-in token for the site's admin panel, stored only for people who sign in to it

  Retention

  until sign-out or the session expires

• Name

  sw.js, aphrodi-*-pages, aphrodi-*-assets

  Type

  service worker and Cache Storage

  Purpose

  copies of visited pages and site files (scripts, styles, images and fonts), so the site loads faster and opens without an internet connection

  Retention

  until the site is updated or you delete them

1. 4.4.

   You can delete this data in your browser settings by clearing the site data for aphrodi.eu.

We protect the forms on the site with Cloudflare Turnstile, provided by Cloudflare, Inc. (USA). Cloudflare, as a processor, may process technical data, including your IP address and signals about browser behaviour, solely to tell a human from a bot. The mechanism may store its own technical token in your browser for this check; it is not used for tracking or profiling. The legal basis is our legitimate interest in protecting the site against abuse (Article 6(1)(f) GDPR).

1. 6.1.

   We do not sell your personal data.

2. 6.2.

   Data may be passed only to entities that help us provide the service: the provider of the server the site runs on, the email provider, Cloudflare (section 5) and Discord Inc. (USA), whose messenger the team uses to receive form submissions, under data processing agreements.

3. 6.3.

   We disclose data to public authorities only when the law requires it.

4. 6.4.

   Cloudflare and Discord are based in the USA. Data is transferred outside the European Economic Area on the basis of the European Commission's adequacy decision (the EU-US Data Privacy Framework) or standard contractual clauses.

• Client data related to an order: for the duration of the contract and 5 years after it ends (tax and accounting obligations).
• Data from forms, briefs and quotes that did not lead to a contract: up to 12 months from the last contact.
• Analytics data: up to 24 months.
• Technical server logs: up to 60 days.

You have the right to access your data, to rectify it, to have it erased, to restrict its processing, to data portability and to object to processing based on legitimate interest. To exercise these rights, write to hello@aphrodi.eu.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland.

We apply security measures appropriate to the risk, including encrypted connections (HTTPS) and access control to data.

We announce material changes by updating the date at the top of this document and, where needed, also by email.