Privacy policy

1. Who is responsible for your data

The data controller is Appro Sp. z o.o., ul. Bosaków 5A/87A, 31-476 Kraków, Poland, tax number (NIP) 9452244515, REGON 388823927. For matters concerning personal data, contact contact@appro.dev or write to our postal address.

We have not appointed a Data Protection Officer. You can contact us directly about data protection using the details above.

This policy covers https://appro.dev and correspondence relating to enquiries sent to Appro.

2. Data we receive

When you submit the form, we receive your full name, email address, message and company name, if provided. We also record the form language and submission date. When you email us, we process the sender’s address, correspondence and any details you choose to share.

Providing data is voluntary. Your name, email address and message are required to submit the form; your company name is optional. Without contact details, we cannot reply. Please avoid sensitive information or unnecessary data about other people.

Your browser sends technical data, including your IP address and request information, to infrastructure providers to display the website, download fonts and submit the form.

3. Purposes and legal bases

We answer questions and handle correspondence under Article 6(1)(f) GDPR: our legitimate interest in responding to enquiries and communicating with people interested in our services, including company representatives.

If you are a prospective contracting party and ask for a proposal or other steps before entering into a contract, we rely on Article 6(1)(b) GDPR. Technical operation and protection against abuse rely on Article 6(1)(f) GDPR: our interest in keeping the website available and secure.

Where necessary to establish, exercise or defend legal claims relating to correspondence, we process the relevant data under Article 6(1)(f) GDPR. Sending an enquiry does not subscribe you to a newsletter or advertising list.

4. Who may receive your data

We store form submissions in Cloud Firestore and serve this website through Firebase Hosting, both provided by Google. On the first form submission, your browser also downloads the Firebase library from Google’s servers. We use Zoho Mail for correspondence. Zoho processes email addresses, message content and attachments stored in the service on our behalf.

The website downloads typefaces from Google Fonts. Connecting to Google’s servers transmits technical data, including your IP address and browser information, even if you do not submit the form.

People authorised by Appro and IT service providers may access data as needed to operate these services. We may also disclose data to authorities entitled to receive it under applicable law.

5. Processing outside the European Economic Area

Google services use international infrastructure, so processing may also take place outside the EEA, including in the United States. A European database location does not exclude such access as part of service operations.

Google describes its transfer safeguards in its terms: adequacy decisions, including the EU–US Data Privacy Framework for covered transfers, and European Commission Standard Contractual Clauses where applicable. Contact us for information about the safeguards and how to obtain a copy. Links to Google’s documentation are provided below.

Zoho operates globally, so email services may involve processing outside the EEA, including access from India for technical support. Zoho identifies Standard Contractual Clauses and supplementary safeguards as mechanisms protecting such transfers. Contact us for information about these safeguards and how to obtain a copy; links to Zoho’s documentation are also provided below.

6. How long we keep data

For enquiries that do not lead to working together, we keep data while handling the matter and for no longer than 12 months after correspondence ends. Where necessary for legal claims, we may retain the relevant data until the applicable limitation period expires or proceedings conclude.

If we start working together, data needed for that relationship is subject to contractual and statutory retention periods, explained as part of that relationship.

According to Google’s documentation, Firebase Hosting retains IP addresses for a few months. Your browser’s theme preference remains until you clear site data or select the theme matching your system preference.

7. Cookies and browser storage

The website does not use analytics tools or advertising pixels and does not set its own analytics or marketing cookies.

When you manually change the theme, we store “light” or “dark” in localStorage under “appro-theme” if it differs from your system preference. This only remembers the website’s appearance; it does not identify or track you. You can remove it by clearing this website’s data in your browser settings. Blocking storage may prevent the theme from being remembered.

8. Your rights

Subject to the GDPR’s conditions, you can request access to your data, a copy, rectification, erasure or restriction of processing. Data portability applies where processing is automated and based on a contract or consent.

Right to object: you may object at any time, on grounds relating to your particular situation, to processing based on our legitimate interests. We will stop unless we demonstrate compelling legitimate grounds overriding your interests and rights, or grounds for establishing, exercising or defending legal claims.

To exercise your rights, email contact@appro.dev. You may also complain to the President of Poland’s Personal Data Protection Office (uodo.gov.pl) or another competent supervisory authority. We do not make decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects on you.

9. Changes to this policy

We update this policy when the website or our data processing practices change. The current version and update date are published on this page.