Privacy policy

1. Who the controller is

The controller of your personal data is Fundacja Rozwoju Przedsiębiorczości „Twój StartUp” (Twój StartUp Business Development Foundation), ul. Żurawia 6/12 lok. 766, 00-503 Warsaw, Poland, registered in the National Court Register (KRS) under number 0000442857, NIP 5213641211, REGON 14643346700000.

buildbyalex.com is run by Evgenii Marchenko within the Foundation's incubation programme, referred to as “we”.

For anything about data sent through this site, write to shurinbergo@gmail.com. You can reach the Foundation at rodo@twojstartup.pl. We reply without undue delay and within one month at the latest.

2. What we collect and why

Contact and quote forms. We collect your name, email or phone and, if you provide them, company name, project type, budget and project description. We also record the page language and your IP address. We use this to answer your enquiry and prepare an offer (Art. 6(1)(b) GDPR, steps taken at your request before entering into a contract). The IP address is used to protect the forms from spam and abuse (Art. 6(1)(f) GDPR, legitimate interest).

Review form. We collect your name, rating, review text and IP address. After moderation the review may be published on the site together with your name. The legal basis is your consent, given by submitting the review (Art. 6(1)(a) GDPR).

Analytics. Only if you allow it in the cookie banner, we use Google Analytics 4. It shows where visitors come from, which pages they read, what devices they use and whether a form was sent (without its content). The legal basis is your consent (Art. 6(1)(a) GDPR and Art. 399 of the Polish Electronic Communications Law).

Advertising. If you allow the “Advertising” category, Google may use visit data to measure Google Ads performance and show ads to people who have visited the site. The legal basis is your consent.

Server logs. The server may record the IP address, date and time of the request, the page address and browser type, for security and troubleshooting (Art. 6(1)(f) GDPR).

3. Cookies and similar technologies

Necessary, always on:

NEXT_LOCALE: remembers the site language you chose, 12 months.
bba-consent (browser storage): remembers your choice in the cookie banner, 12 months.
Browser session storage: passes your name from the form to the thank-you page, until the tab is closed.

Analytics, only with consent:

_ga, _ga_*: Google Analytics 4, up to 2 years.

You can change or withdraw your consent at any time using the “Cookie settings” link in the site footer. Once you withdraw it, we delete the analytics cookies and stop loading Google Analytics. Withdrawal does not affect the lawfulness of processing carried out before it.

4. Who receives the data

We do not sell data. It is only handled by the providers the site depends on:

Hetzner Online GmbH (Germany): hosting. The server and stored enquiries are in the EU.
Telegram FZ-LLC (United Arab Emirates): notifications about new enquiries and reviews go to the messenger of the person running the site.
Google Ireland Limited (Ireland) and Google LLC (USA): Google Analytics 4 and advertising, only with consent.

We may also disclose data to public authorities where the law requires it.

5. Transfers outside the EEA

Some providers operate outside the European Economic Area:

USA (Google): under the EU-US Data Privacy Framework, for which the European Commission has found an adequate level of protection.
United Arab Emirates (Telegram): where necessary to handle your enquiry (Art. 49(1)(b) GDPR).

6. How long we keep data

Form enquiries: for as long as we talk and work together, then up to 3 years after the last contact (limitation period for claims).
Reviews: until you withdraw consent.
Google Analytics data: 14 months.
Anti-spam counters: up to 10 minutes.
Your cookie banner choice: 12 months, after which we ask again.

7. Your rights

You have the right to:

access your data and receive a copy,
have your data corrected,
have your data erased,
restrict processing,
data portability,
object to processing based on legitimate interest,
withdraw consent at any time.

To exercise these rights, write to shurinbergo@gmail.com or rodo@twojstartup.pl.

You can also lodge a complaint with the President of the Polish Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl) or with the supervisory authority in your country of residence.

8. Do you have to provide data

Providing data is voluntary. Without a name and one way to reach you, however, we cannot reply to your enquiry. We do not make automated decisions about you or profile you in a way that has legal effects.

9. Changes to this policy

When we change how we process data, we will update this page and the date at the top. If the change concerns tools that require consent, the cookie banner will appear again.