Privacy Policy

1. Data Controller

The controller of your personal data is Oleksandr Bondarenko, a sole trader registered in Poland under the business name Oleksandr Bondarenko Software Solutions (trading as BondSoft), ul. Jana Heweliusza 11, 80-890 Gdańsk, Poland, NIP 5833576264, REGON 545434529, operating the website at bondsoft.pl (the "Website").

Contact regarding personal data: office@bondsoft.pl.

2. What data we collect

Through the forms on the Website we collect the following data, which you provide voluntarily:

• phone number,
• name (if you enter it in the form field),
• answers given in the quiz/survey and message content,
• email address (if you provide it),
• company name, industry and city (if you provide them),
• preferred time window for a phone call,
• the call slot you choose (if you use the appointment booking),
• Website interface language.

We do not collect any special (sensitive) categories of data.

Together with your consent we store proof that it was given: IP address, browser identifier (user-agent), date and time, and the exact wording of the consent you saw. This is required by the accountability principle (art. 5(2) GDPR) — without it we could not demonstrate what exactly you agreed to.

If you reached us from an advert, we also store the campaign parameters from the page address (gclid, utm_source, utm_medium, utm_campaign), so that we know which advert works. We read them solely from the address you arrived at; nothing is written to your device and no tracking tools are used (see section 9).

3. Purpose and legal basis of processing

We process your data to contact you and present an offer regarding our services, based on your consent (Art. 6(1)(a) GDPR), which you give by checking the consent box and submitting the form.

For handling correspondence, the basis is also our legitimate interest (Art. 6(1)(f) GDPR) in responding to your enquiry.

4. Data recipients and processors

To handle the forms, we use external service providers who process data on our behalf:

• server infrastructure provider — our API and the database in which submissions are stored run on its servers;
• home.pl — email provider on whose servers the messages are stored;
• Telegram — a notification about a new enquiry is sent to our company chat so that the reply does not wait until the next day. The message contains the company name, phone number, email address and an excerpt of the enquiry. Telegram's servers are located outside the European Economic Area.

Our API, database and email run on servers within the European Union. The exception is the Telegram notification described above: its content leaves the EEA, on the basis of our legitimate interest in replying as quickly as possible (art. 6(1)(f) GDPR). If you would rather we did not, write to us — we will handle your enquiry without that notification.

We do not make decisions about you by solely automated means and we do not carry out profiling (art. 22 GDPR). Every enquiry is read and assessed by a person.

5. Free website audit

The Website provides a free website audit tool. To run an audit it is enough to provide a website address (domain) — we ask for no personal data in the process.

The request goes to our API, which passes the address you provided to the Google PageSpeed Insights API and to the Google Safe Browsing API (Google Ireland Limited). Google's data processing rules are set out in the Google privacy policy.

Beyond that, our server reads publicly available information about the address you supplied: it fetches the page's code, opens a single TLS connection to read the certificate, asks the public domain registry (RDAP) for the expiry date, reads the public DNS records that govern email, and retrieves the /robots.txt, /sitemap.xml and /llms.txt files. These requests originate from our server, not from your browser — your IP address is disclosed to no one in the process.

We store the result in our database — the domain and the technical report only, with no personal data whatsoever. For 24 hours it serves to show the same report again without another analysis. After that the record remains for two purposes: to show a „before → now" comparison the next time the same site is checked, and to calculate an aggregate, non-identifying summary — how many of the checked sites score higher. No address appears in that summary: numbers only. Your IP address is used only transiently to limit the number of requests (abuse protection); it is not stored alongside the result.

The PDF report is generated locally in your browser — the file is not sent to our servers or stored anywhere.

If you voluntarily provide an e-mail address in order to receive a fix plan, we process it solely for that purpose (Art. 6(1)(b) GDPR — steps taken at your request). Providing an e-mail is entirely optional and is not required to see the audit result.

By a separate, voluntary consent you may opt in to receive information about changes in the requirements for websites (GDPR, accessibility, security) and offers of our services — no more than once a month (Art. 6(1)(a) GDPR and Art. 398 of the Polish Electronic Communications Law). This consent is not a condition for running the audit or receiving the report, and you may withdraw it at any time — via the link in the footer of every message or by writing to our e-mail address.

6. Data retention period

We store data for the period necessary to fulfil the purpose for which it was collected (contact and handling of the enquiry), and thereafter until any claims become time-barred or until you withdraw your consent.

The proof of consent described in section 2 (consent wording, IP address, user-agent, date) is treated separately. We keep it for as long as we might have to demonstrate that the processing was lawful, and we do not delete it together with a withdrawal — the withdrawal is recorded against the same entry. If the proof disappeared with the consent, withdrawing it would erase the only trace that it ever existed.

7. Your rights

In connection with the processing of your data, you have the right to:

• access your data,
• rectify (correct) your data,
• erase your data,
• restrict processing,
• data portability,
• object to processing,
• withdraw consent at any time (without affecting the lawfulness of processing before withdrawal).

To exercise these rights, write to office@bondsoft.pl.

You also have the right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.

8. Voluntary provision of data

Providing data is voluntary but necessary for us to contact you and respond to your enquiry. Not providing data makes it impossible to reply.

9. Cookies

The Website stores no cookies on your device and uses no browser storage (localStorage, sessionStorage). We run no analytics or marketing tools — there is no Google Analytics, Meta Pixel or any other tracker on this site. Fonts are served from our own server, so simply browsing the Website triggers no requests to third-party providers. For this reason the Website shows no cookie consent banner — there is nothing to consent to.

10. AI-generated illustrations

Some illustrations in the services section of the Website — the product photographs and the interior photograph inside the interface visualisations — were generated with the Higgsfield artificial-intelligence tool. They are not photographs of real goods, real interiors or a real company — they serve only as illustration. Every such visualisation carries a visible caption saying so.

The generated files are stored on our own server and served directly from it. Displaying them triggers no request to any external provider and passes no data about you to one, so the rule described in section 9 remains true.

The illustrations were generated once, outside the Website, and that process involved no personal data. No artificial-intelligence model runs inside the Website itself — neither form submissions nor free technical scan results are processed by AI tools.

11. Changes to the privacy policy

We reserve the right to amend this privacy policy. The current version is always available on this page.