Privacy and Cookies Policy — ArxMinds
Last updated: 21 October 2026
1. Scope
This policy explains how we process data when you visit the ArxMinds website at arxminds.com, contact us through the form or by e-mail, and use the cookie settings.
The website presents our studio, capabilities and products and lets you enquire about working with us. It does not provide application accounts or sell application subscriptions. Processing in SocialArx and CreatorArx applications and on their separate websites is covered by the documents applicable to those services.
2. Controller and contact details
Your data controller is ArxMinds Sp. z o.o., with its registered office at:
ul. Józefińska 43 lok. 7
30-529 Kraków, Poland.
For privacy matters, rights requests or questions about the website, write to [email protected]. You may also contact us by post at this address.
3. Data we process
Depending on how you use the website, we process:
- the name, e-mail address and message entered in the form;
- details voluntarily provided in correspondence, such as a company name or project description;
- the form language, source page path and date your message was received;
- technical connection and security data, such as IP address, request time, browser information and errors;
- your chosen website language and privacy preferences;
- information about page views and website performance used for statistics.
Only include data needed to explain your enquiry. Please do not send special-category data, such as health information.
4. Purposes and lawful bases
| Purpose | Lawful basis |
|---|---|
| Answering enquiries and handling correspondence, including with company representatives | Article 6(1)(f) GDPR — our legitimate interest in handling enquiries and business communications |
| Taking steps at your request before a contract to which you would be a party | Article 6(1)(b) GDPR |
| Website operation and security, diagnosing errors and preventing abuse | Article 6(1)(f) GDPR — our interest in maintaining a reliable and secure website |
| Aggregate Cloudflare Web Analytics statistics, where personal data is processed | Article 6(1)(f) GDPR — our interest in assessing performance and improving the website |
| Optional Google Analytics 4 statistics and other processing requiring consent, including optional cookies | Article 6(1)(a) GDPR — consent; device storage or access requiring consent takes place after consent, in accordance with Article 399 of the Polish Electronic Communications Law |
| Necessary evidence of choices and consent | Article 6(1)(c) GDPR in connection with accountability and consent obligations, particularly Articles 5(2) and 7(1) GDPR |
| Establishing, exercising or defending specific legal claims | Article 6(1)(f) GDPR — protecting our rights |
Sending an enquiry does not subscribe you to a newsletter or authorise unrelated marketing. Refusing optional cookies does not prevent you from contacting us or browsing the website.
5. Is providing data mandatory?
Providing data is voluntary. The form requires a name, an e-mail address and a message. It cannot be submitted without these fields. Any additional information is provided at your discretion.
You may refuse optional cookies and still browse the website and use the contact form.
6. Contact form and recipients
Contact-form messages are stored in a Supabase database, in a project located in the European Union. This is the shared ArxMinds forms project. We store the name, e-mail, message, language, source page path and receipt date. Authorised people handling enquiries can access messages.
Where needed to operate the website and handle correspondence, we also use:
- Cloudflare — website delivery and security infrastructure, and Cloudflare Web Analytics;
- Google Ireland Limited / Google Analytics 4 — optional analytics, only after you consent; cookie preferences are managed locally with CookieConsent, without an external consent provider;
- e-mail service providers — when corresponding by e-mail;
- technical or legal support providers where a particular matter requires their assistance;
- competent authorities where disclosure is required by law.
We share data only as needed to deliver these services. Providers processing data on our behalf operate under appropriate data-processing arrangements.
7. Retention
We keep ordinary enquiries and correspondence while handling the matter and for 12 months after it is closed. A matter is closed when we provide a final answer or conclude discussions about working together. If we reopen the matter, the period runs from the end of that further handling.
Where correspondence forms part of a concluded contract, is subject to a legal retention obligation, or is necessary to establish, exercise or defend specific legal claims, we retain the relevant portion for longer: for the duration of the contract, the legally required period, or until the applicable limitation period expires, taking ongoing proceedings into account. This does not extend retention for all messages.
We process technical data to handle connections and maintain website operation. Data retained in connection with a specific fault or abuse incident is kept until the incident has been investigated; where it relates to legal claims, the rules above apply. We delete or anonymise unnecessary data during review.
Your cookie choice is stored locally in the arx_cookie_consent cookie for 182 days, unless you delete it earlier. This website does not send consent records to an external banner provider or maintain a central consent register. Optional Google Analytics cookies last up to 180 days. Event-data retention in GA4 is set to 2 months during analytics setup; aggregate reports are separate from this retention period.
Withdrawing consent does not affect the lawfulness of earlier processing. Afterwards, we retain data only where a separate lawful basis and an actual need apply.
8. Your rights
Subject to GDPR conditions, you can request access, rectification, erasure or restriction of processing. Data portability applies where its statutory conditions are met.
You may object to processing based on legitimate interests for reasons relating to your particular situation, and withdraw consent where consent is the lawful basis.
Send requests to [email protected]. We may ask for information needed to verify your identity, proportionate to the request. You may also complain to a supervisory authority, including the President of Poland’s Personal Data Protection Office: uodo.gov.pl.
9. Cookies and similar technologies
Cookies are small files stored on your device. The website also uses your browser's local storage, or localStorage.
The language switch stores your choice under the arxminds-language key so that we can remember your chosen language on future visits. This entry has no automatic expiry; you can change the language or delete website data in your browser.
The locally hosted CookieConsent banner remembers cookie choices on this domain. Storage needed solely for transmission or a function explicitly requested by the user may be used without separate consent. Optional cookies requiring consent are activated only after consent. We do not currently use cookies for personalised advertising.
We use Cloudflare Web Analytics for aggregate visit and performance statistics. According to the provider's documentation, it uses neither cookies nor local storage for analytics and does not recognise visitors through fingerprinting. Contact-form content is not sent to analytics.
Only with your consent, optional Google Analytics 4 measures page views, traffic sources and successful contact-form submissions. We do not send names, e-mail addresses or message contents. Google signals and advertising personalisation are disabled. Refusing analytics prevents the Google script from loading; withdrawing consent removes its cookies and reloads the page.
10. Cookie and browser-storage inventory
| Name / technology | Provider | Purpose | Lifetime |
|---|---|---|---|
arxminds-language / localStorage |
ArxMinds | Remembering the language selected with the language switch | Until you change the choice or delete website data |
arx_cookie_consent / cookie |
ArxMinds / locally hosted CookieConsent | Remembering your cookie preferences on this domain | 182 days, or until deleted earlier |
_ga, _ga_* / cookies, only after analytics consent |
Google Analytics 4 / Google Ireland Limited | Optional website traffic and contact-form conversion statistics | Up to 180 days, or until consent withdrawal or earlier deletion |
The table describes this website’s configured storage. CookieConsent does not automatically scan for cookies. You can view and change your current choice using “Cookie settings” in the footer.
11. Changing cookie choices
In the CookieConsent banner, you can accept or refuse optional categories and later change your choice using “Cookie settings” in the footer. Withdrawing consent does not affect the lawfulness of earlier processing.
You can also delete cookies and other website data in your browser. This removes saved settings, including your chosen language. Deleting browser data does not automatically delete messages sent through the form.
12. Fonts and external websites
We serve the website font from our own domain, without your browser fetching it from an external font service.
Links to SocialArx, CreatorArx and other services lead to separate websites. Check the policies applying to the destination website.
13. Transfers outside the EEA
The Supabase messages database is located in the European Union. We also use globally operating providers, particularly Cloudflare, Supabase and Google, so infrastructure operations or technical support may involve processing outside the European Economic Area.
In those cases, mechanisms provided by Chapter V GDPR apply, including the European Commission's standard contractual clauses or an applicable adequacy decision, depending on the recipient and transfer. You can request information about the safeguards and how to obtain a copy at [email protected].
14. Automated decisions
Within the functions of this website, we do not make decisions about you based solely on automated processing that produce legal effects or similarly significantly affect you. Website statistics are not used to make such decisions.
15. Changes to this policy
We update the policy when website operations, providers or legal requirements change. The current version and its update date are available on this page. New purposes requiring consent are activated only after consent has been obtained.