Your privacy
is important to us.

The data controller responsible for this website and the processing described in this policy is:

• Aleksium - Odoo Consulting & Software Development
• VAT: 7792567771
• Email: info@aleksium.com

For any question about how your data is handled, contact us at the address above.

We collect:

• Contact form data - name, email address, company name, subject and the message you submit.
• Account data - email address and encrypted password, if an account is created for you to access a project portal.
• Technical data - IP address, browser type, device information and server logs, collected automatically for security and troubleshooting.
• Newsletter - your email address, and only if you subscribe yourself through the form on our blog.

We do not collect any special categories of personal data and we do not use advertising trackers.

On your first visit we look up the country of your IP address to pre-select the site language. This is done on our own server against a local database, so your IP address is never sent to a third party, and your choice is remembered afterwards. IP geolocation by DB-IP.

• Responding to enquiries - steps prior to entering a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering you (Art. 6(1)(f)).
• Providing requested services - performance of a contract (Art. 6(1)(b)).
• Improving our website and protecting our systems - legitimate interest (Art. 6(1)(f)).
• Invoicing and accounting - legal obligation (Art. 6(1)(c)).
• Sending you our newsletter - your consent (Art. 6(1)(a)). You give it by subscribing and can withdraw it at any time through the unsubscribe link in every email.
• Anything beyond the above - only with your consent (Art. 6(1)(a)), which you can withdraw at any time.

Your data is processed by a small, deliberate set of systems:

• Our CRM (Odoo) - contact form submissions are stored in our self-hosted Odoo system so we can manage and answer enquiries.
• Telegram - when you submit the contact form, its content (name, email, company, subject, message) is sent as an internal notification to our team via Telegram (Telegram Messenger Inc.), so we can react quickly.
• Newsletter list - subscription addresses are kept in the same self-hosted Odoo system and are never passed to an external mailing service.
• Hosting provider - our servers are operated by [HOSTING PROVIDER - to be completed], located in the EU.

We do not sell or rent your personal data to anyone, and we do not share it with third parties for marketing purposes.

This website uses only strictly necessary cookies:

• Session cookie - keeps your session while you browse or stay logged in.
• Security cookies - protect forms against cross-site request forgery.

Because these cookies are technically required, no consent banner is needed. We currently do not use analytics or advertising cookies. Our fonts are self-hosted, so no request is made to third-party font services.

• Contact enquiries - up to 2 years from our last exchange, then deleted.
• Contract and invoicing data - for the period required by applicable tax and accounting law.
• Account data - until the account is deleted at your request or the end of our cooperation.
• Server logs - up to 12 months, for security purposes.
• Newsletter subscriptions - until you unsubscribe, after which the address is removed from the mailing list.

As an engineering company, we apply the same standards to our own infrastructure that we apply to client projects:

• Encryption in transit (HTTPS / TLS)
• Passwords stored only in encrypted (hashed) form
• Least-privilege, role-based access to systems
• Secure European hosting
• Regular security updates
• Automatic backups
• Continuous monitoring and access logging

You have the right to:

• Access - obtain a copy of the personal data we hold about you.
• Rectification - correct inaccurate or incomplete data.
• Erasure - have your data deleted ("right to be forgotten").
• Restriction - limit how we process your data.
• Portability - receive your data in a machine-readable format.
• Objection - object to processing based on legitimate interest.

To exercise any of these rights, email info@aleksium.com - we respond within 30 days. You also have the right to lodge a complaint with your local data protection authority; in Poland this is the President of the Personal Data Protection Office (UODO, uodo.gov.pl).

If we change how we process personal data, we will update this page and adjust the "last updated" date at the top. For significant changes affecting data we already hold, we will inform you directly where reasonably possible.