Privacy Policy

Revision of 2 October 2026

1. Who processes your data

The controller of the personal data collected on this website is Automation Factory LLC (Sp. z o.o.), tax id PL5253077478, ul. Nowy Świat 33/13, 00-029 Warszawa, Poland, the company that builds and operates the automation products presented here.

Contact for any question or request about your data: contact@automationfactory.dev. We answer every request ourselves; there is no separate call centre in between.

2. What we collect, and why

We do not buy data about you and we do not track you across other sites. Everything below either comes from you or is needed to serve the page.

The enquiry form: your name, company (where the form asks for it), e-mail address and the text of your message. To answer you, show a demo, prepare a proposal and keep the history of our correspondence.
Technical data of the request: IP address, browser and operating system, date and time, the page you came from. Written by the web server into its log. To keep the site running, investigate failures and defend against abuse and spam.
Two cookies of the site itself: pll_language (which language version you are reading) and af_theme (light or dark appearance, only once you switch it). To show the site in the language and appearance you chose instead of resetting them on every page.

There is no analytics, no advertising pixel and no social network script on this site: nothing here reports your visit to a third party for marketing. The icon set is loaded from the public library cdnjs.cloudflare.com, which means Cloudflare receives the IP address of the request for the icons; we use it to avoid shipping the library with every page.

We take no automated decisions about you and we do not build profiles.

3. Legal basis (GDPR Art. 6)

  • Your consent, Art. 6(1)(a) — for the enquiry you send through the form. You tick the box yourself before sending, and you can withdraw it at any time.
  • Performance of a contract, Art. 6(1)(b) — once we work together: access to the product, support, invoices.
  • Our legitimate interest, Art. 6(1)(f) — server logs and anti-spam measures that keep the site available and let us find a failure. You may object to this processing.
  • A legal obligation, Art. 6(1)(c) — where accounting or tax law requires us to keep a document.

4. Who else sees the data

  • Our hosting provider — GoDaddy.com, LLC, servers in Ashburn, Virginia, United States. The site and its database, including the enquiries stored in it, live there.
  • Google — the notification about your enquiry is delivered to our mailbox through Google’s mail service (SMTP), so the message passes through it.
  • Cloudflare — only the request for the icon library, as described above.

Beyond that, nobody. We do not sell data, we do not hand it to advertising networks, and we disclose it to a public authority only on a lawful demand.

5. Transfer outside the European Economic Area

The controller is established in Poland, inside the European Union. One transfer leaves the EEA, and we would rather name it plainly than hide it in a sentence:

  • To the United States. The site, its database and the mail delivery are provided by companies established in the United States (see section 4). That transfer relies on the European Commission’s adequacy decision for the EU–US Data Privacy Framework where the provider is certified under it, and on standard contractual clauses with the provider otherwise.

6. How long we keep it

An enquiry is kept while we are handling it and for twelve months after our last exchange, so that we can pick up the conversation where it stopped. After that it is deleted. If we sign a contract, the documents are kept for the periods that accounting and tax law require. Server logs are rotated by the hosting provider within weeks. Withdrawing your consent, or asking for erasure, deletes the enquiry earlier.

7. Your rights

  • to know what data we hold about you and to get a copy of it (access);
  • to have inaccurate data corrected;
  • to have the data deleted;
  • to have the processing restricted while a dispute about the data is settled;
  • to object to processing based on our legitimate interest;
  • to receive the data in a machine-readable form or have it transferred to another provider (portability);
  • to withdraw your consent at any time — which does not affect what was lawfully processed before the withdrawal;
  • to lodge a complaint with the data protection authority of your country of residence.

Write to contact@automationfactory.dev. We answer within one month and we charge nothing for it. We may ask you to confirm that the request is yours — so that data about you is not handed to somebody else.

8. How we protect it

The site is served over HTTPS only. Access to the admin area and to the stored enquiries is by individual accounts with roles, and only the people who answer enquiries have it. Backups are kept by the hosting provider on the same account. If a breach ever puts your rights at risk, we notify the supervisory authority within 72 hours and tell you as well.

9. Changes

If this document changes, the revision date at the top changes with it. A change that affects what you have already consented to is asked for again rather than applied silently.