Privacy, cookies and contact-form terms
Updated: 4 September 2026
1. Controller and contact
The controller for aurilabs.pl is AURI CORP sp. z o.o., ul. Zatorska 184/3, 51-215 Wrocław, Poland, KRS 0001263262, NIP 8952308181, REGON 545569672, trading as Auri Labs. For personal-data requests or form issues, contact auril.labs.pl@gmail.com or +48 793 369 934.
2. Enquiries and correspondence
The form requires a phone number; name, service and project description are optional. We also process the page language, page path without query parameters, time and a technical request identifier. Email correspondence includes your address, message and information you provide. Do not send passwords, payment credentials or sensitive personal data such as health information.
We use these data to answer enquiries and prepare proposals: GDPR Article 6(1)(b) for steps you request before entering a contract; Article 6(1)(f) for other correspondence, including company representatives, based on our legitimate interest in handling business contact. Submitting an enquiry is not consent to newsletters or marketing. Analytics consent is not required.
3. Website operation and security
The server processes connection data including IP address, time, requested address, response status and browser information to deliver the site, diagnose faults and prevent abuse. The basis is our legitimate interest in security and reliable operation, Article 6(1)(f). The form uses rate limits and anti-spam controls, not an external CAPTCHA.
4. Analytics only with consent
We load Google Analytics 4 (G-2DTF2NVNVP) only after you consent to analytics, under GDPR Article 6(1)(a) and Article 399 of Poland’s Electronic Communications Law. Before consent or after rejection, we do not load the Google tag or send cookieless measurement pings.
After consent, Google may process cookie identifiers, device/browser data, approximate location and website events. Our events cover page views, estimate clicks and confirmed form delivery; they do not include your name, phone or message. Our event page addresses exclude query strings and fragments. We do not enable Google Signals, ad personalisation, remarketing or enhanced conversions.
5. Recipients and international transfers
Hetzner Online GmbH, Germany, provides hosting. Our server sends form submissions to the team’s private Telegram chat. Visitors do not need a Telegram account. This is not an end-to-end encrypted chat: Telegram processes message content in its cloud service. Email correspondence uses Gmail. Google receives analytics data after consent. Authorised enquiry-handling staff and IT providers may access data as necessary.
Google and Telegram may process data outside the EEA. Google describes applicable transfer mechanisms, including standard contractual clauses and relevant data-protection frameworks, in the documentation below. Telegram declares standard contractual clauses for transfers within its group, including companies in the UAE and British Virgin Islands. A provider’s policy is not a guarantee for every use of its services. Contact us for recipient and safeguard information concerning your data. If you prefer not to submit via Telegram, contact us by phone or email.
6. Retention
We delete enquiries that did not lead to an order from Telegram and Gmail 6 months after the last contact. The controller carries out deletion; it is not an automatic feature of the form. Exceptions apply only to data needed for a legal obligation or to establish, exercise or defend specific claims, retained until that obligation or the relevant claims period ends. Contracts and accounting documents are subject to applicable statutory retention requirements.
Technical records are retained as needed for diagnostics and security; incident-related records may be needed for investigation or claims. Cookie choices expire after 180 days. GA cookies are configured for up to 180 days without automatically extending their lifetime on each visit. Standard GA4 user/event retention can be 2 or 14 months; aggregate reports are not subject to the same limit. Withdrawal stops future measurement but does not automatically erase data already received by Google; contact us about deletion.
7. Your rights
Where the GDPR conditions apply, you may access and obtain a copy of your data, rectify, erase, restrict processing or request portability. You may object to processing based on legitimate interests for reasons related to your situation. Withdraw analytics consent at any time through cookie settings, as easily as granting it; prior lawful processing is unaffected.
You may complain to Poland’s data protection authority, the President of UODO, at uodo.gov.pl. We respond within GDPR deadlines, normally one month. Providing form data is voluntary, but a phone number is needed for a callback request. We do not make solely automated decisions producing legal or similarly significant effects on you.
8. Cookies and browser storage
Necessary: auri-consent-v1 (localStorage) stores your choice, date and notice version for 180 days; auri-theme-choice (localStorage) retains the theme you select until changed or cleared; auri-intro-seen-v1 (sessionStorage) remembers the intro state until the tab closes. These are not used for advertising.
Analytics, only with consent: _ga and _ga_2DTF2NVNVP identify the browser and GA4 measurement state for up to 180 days, subject to shorter browser limits. Cookie settings are available on every page. Rejection, scrolling and closing settings do not constitute consent. You can also clear browser data, after which we ask again. A choice applies to this browser, not all your devices.
9. Contact-form terms
AURI CORP sp. z o.o., identified above, provides the free electronic enquiry-form service. It sends an enquiry and does not conclude a paid project contract. An internet connection and current JavaScript-enabled browser are required; analytics cookies are not. You may leave before submitting. The one-time transmission service ends when delivery succeeds or fails; success is displayed only after delivery confirmation.
Do not submit unlawful content or third-party personal data without a lawful basis. Report faults or complaints to the email above with a description, approximate time and reply contact. We handle them without undue delay and within applicable statutory deadlines. Mandatory legal rights remain unaffected.