Privacy policy

Effective Date: September 30, 2025

Welcome to Cogito Tech Sp. z o.o. ("we," "our," "us"). This Privacy Policy explains how we handle personal data when you visit our website cavento-tech.com. We are committed to respecting your privacy and complying with the General Data Protection Regulation (GDPR) (EU) 2016/679.

1. Who We Are

Data Controller:
Cogito Tech Sp. z o.o.
Registered in Poland
KRS: 0001228477
NIP: 5214157397
Registered address: Władysława Pytlasińskiego 16 / 13, 00-777 Warszawa, Polska Email: legal@cavento-tech.com

2. Legal Basis for Processing

We process your personal data based on:

  • Consent – when you submit a contact form or request API access
  • Legitimate Interest – for security, monitoring, and improving our services
  • Contract – when processing is necessary to provide requested services

3. What Data We Collect

You are not required to provide personal data to browse the Website. However, certain technical data (such as IP address and request metadata) may be processed automatically by our systems for security, performance, and operational purposes.

  • Contact Information: Your name, email address, and message.
  • API Trial Data: If you request a temporary API key to try our portfolio projects, we process your email address in order to send you the key. We also generate basic technical logs (such as IP address, timestamp, and request details) while the key is in use. These logs are used only for security and monitoring purposes.

4. Analytics

We use Google Analytics to understand how visitors interact with our Website and to improve its performance and usability. For this purpose, we load Google's tagging script from Google-hosted infrastructure only after you provide consent through our cookie banner.

Google Analytics collects information such as IP address (with IP anonymization enabled), device information, browser information, and data about how users interact with the Website. We process analytics data only on the basis of your consent. You may withdraw your consent at any time through the cookie settings available on our Website.

Google LLC and related service providers may process this data on servers located outside the European Economic Area. Where this occurs, we rely on appropriate safeguards, including Standard Contractual Clauses approved by the European Commission.

5. How We Use Your Data

We use your data to respond to inquiries, provide requested services such as API access, and ensure the security and proper functioning of our systems. We do not use your data for marketing purposes unless you explicitly request or consent to it.

  • To Provide Demo Access: We send you a temporary API key by email (via AWS SES) when you request it and monitor its usage to ensure proper functioning and security.

6. How We Share Your Data

We do not sell, rent, or trade your personal data. The data you provide is only accessible to us for the purpose of replying to your request. We may disclose your information if required by law.

  • Infrastructure Provider: We use Amazon Web Services (AWS) as a data processor for email delivery, logging, and infrastructure hosting. AWS processes data on our behalf under appropriate data protection agreements.
  • Contact Form Processor: We use Web3Forms to process and deliver messages submitted through the contact form. The contact data you submit (such as name, email address, and message content) is processed by Web3Forms on our behalf.
  • Email Delivery: We use Amazon Web Services (AWS SES) to send temporary API keys. Your email address is processed by AWS only for this purpose.

Some of our service providers (such as AWS) may process data outside the European Economic Area. In such cases, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

We primarily store and process personal data within the European Economic Area (EEA), including through infrastructure located in Germany (eu-central-1).

7. Data Retention

We keep your email correspondence only as long as necessary to respond to your inquiry and maintain a record of communication. If you request deletion, we will delete your correspondence unless required by law to keep it.

We retain contact form data for up to 12 months after the last communication, unless a longer retention period is required by law. API usage logs are retained for up to 30 days, after which they are deleted or anonymized.

8. Your Rights

Under GDPR, you have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate or incomplete data.
  • Erasure: Request deletion of your personal data.
  • Restriction: Request restriction of how we process your personal data.
  • Portability: Request transfer of your data to you or another party.
  • Objection: Object to processing of your personal data.

To exercise any of these rights, please contact us at legal@cavento-tech.com.

You also have the right to lodge a complaint with a supervisory authority in your country of residence or in Poland if you believe your data protection rights have been violated.

9. Security of Your Data

We implement appropriate technical and organizational measures, including access controls, encryption in transit, and restricted access to personal data, to protect your information.

10. Cookies

We use essential cookies required for the operation and security of the Website. These cookies do not require consent.

We use cookies and similar technologies to operate the Website and, with your consent, to collect analytics data through Google Tag Manager and Google Analytics. Non-essential cookies are used only after you have given your consent.

You may accept or reject optional cookies through our cookie banner when you first visit the Website. You may also withdraw or change your consent at any time through the cookie settings available on the Website.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page. Please check back periodically to stay informed.

12. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us or email us at legal@cavento-tech.com.