Privacy policy

Last updated: 25 August 2026 · Wersja polska

This privacy policy describes how personal data of visitors to the Sentinel.ist website, and of people using the contact form available on it, is processed.

1. Data controller

The controller of your personal data is QROPQA sp. z o.o., with its registered office in Kraków, ul. Świętokrzyska 12/305-307, 30-015 Kraków, Poland, entered in the register of entrepreneurs of the Polish National Court Register (KRS) under number KRS 0000436985, VAT ID PL6793085401, REGON 122682120.

Contact for data protection matters: hello@sentinel.ist or biuro@qropqa.com.

The controller has not appointed a Data Protection Officer (DPO).

2. What data we collect

Through the contact form on the website we collect only the data voluntarily provided by the user:

• first and last name,
• email address,
• company tax identification number (NIP or EU VAT ID, used to identify the enquiry as a business one),
• the content of the message.

If you give your consent in the cookie banner, we additionally process data about how you use the website using Google Analytics 4:

• the pages you visit and the order in which you view them,
• how you arrived at the site (search engine, referring link, direct visit),
• approximate location at country and city level,
• device type, operating system and browser.

Google Analytics derives the approximate location from your IP address but does not store the IP address itself. Without your consent no measurement takes place at all - the Google script is not even loaded, rather than merely being blocked.

3. Purpose and legal basis for processing

• Handling enquiries and contact - basis: Article 6(1)(b) GDPR (steps taken prior to entering into a contract) and Article 6(1)(f) GDPR (legitimate interest of the controller).
• Analytics cookies - basis: Article 6(1)(a) GDPR (consent given in the cookie banner).
• Essential cookies - basis: Article 6(1)(f) GDPR (ensuring the website functions correctly).

4. Data retention period

Data submitted through the contact form is retained for as long as necessary to handle the enquiry and for the limitation period of any potential claims, but no longer than 3 years from the last contact. Consent for analytics cookies is stored for 12 months or until it is withdrawn. Data collected in Google Analytics is retained for 14 months and then deleted automatically.

5. Data recipients

Data is entrusted to the following processors, strictly to the extent necessary for them to provide their services:

• Hetzner Online GmbH (Germany) - hosting of the server on which this website runs. The data remains within the European Economic Area.
• home.pl S.A. (Poland) - email service through which contact form messages are delivered.
• Google Ireland Limited (Ireland) - the Google Analytics 4 service, only after you have given your consent. Google acts as a processor under the Google Ads Data Processing Terms.

Data submitted through the contact form is not transferred outside the European Economic Area. Within Google Analytics, data may be transferred to Google LLC in the United States - the transfer is based on the European Commission's adequacy decision under the EU-U.S. Data Privacy Framework, supplemented by standard contractual clauses. This transfer occurs only if you consent to analytics cookies; refusing or withdrawing that consent means no data leaves the EEA.

Data is not sold, nor shared with third parties for marketing purposes, without separate consent.

6. Cookies

The website uses cookies in two categories, managed with the Klaro consent tool, which is served from our own server - loading it does not disclose your IP address to any external CDN:

• Essential - required for the basic operation of the website; these do not require consent.
• Analytics - enabled only after consent is given. Google Analytics then sets the _ga and _ga_-prefixed stream cookies, both with a 24-month lifetime, used to distinguish unique users. They are deleted automatically when consent is withdrawn.

You can change your choice at any time by clicking “Cookie settings” in the footer of the homepage.

7. Your rights

In connection with the processing of your personal data, you have the right to:

• access your data and obtain a copy of it,
• rectify (correct) your data,
• erase your data (the “right to be forgotten”),
• restrict processing,
• data portability,
• object to processing based on legitimate interest,
• withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal,
• lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO) - the Polish supervisory authority.

8. Data security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss or destruction, including encryption of transmission (HTTPS) and restricting access to the data to authorised persons only.

9. Changes to this privacy policy

This policy may be updated from time to time. The current version is always available at this address, together with the date of the last update.

10. Contact

For matters relating to the protection of personal data you can contact us at: hello@sentinel.ist.