Privacy Policy
Last updated: 2026 VIII 21
1. Who we are
The controller of your personal data is Hardened Me sp. z o.o., registered in 41-706 Ruda Śląska, Miodowa 2 street , entered in the register of entrepreneurs of the National Court Register (KRS) under number 0000822827, NIP 6412549307. Contact: contact@hardened.me. Our data protection contact: dpo@hardened.me.
2. What data we process, why, and on what legal basis
| Context | Data | Purpose | Legal basis (GDPR) |
|---|---|---|---|
| Consultation request forms | Name, work email, company, role, message content | Responding to your enquiry, preparing a proposal | Art. 6(1)(b) — steps prior to a contract; Art. 6(1)(f) — legitimate interest in responding to business enquiries |
| Newsletter | Email address | Sending our Insights newsletter | Art. 6(1)(a) — consent (withdrawable anytime via unsubscribe link or dpo@hardened.me) |
| Website analytics & CRM cookies (HubSpot) | Cookie identifiers, pages viewed, approximate location, device data | Understanding site usage; associating your visits with your enquiry once you submit a form | Art. 6(1)(a) — consent given via cookie banner |
| Email correspondence | Whatever you include | Business communication | Art. 6(1)(f) — legitimate interest |
| Contract delivery | Contact and engagement data | Performing the engagement | Art. 6(1)(b) |
We do not use your data for automated decision-making producing legal effects, and we do not sell it.
3. Recipients
Data is processed in our systems and by processors bound by data-processing agreements: HubSpot (CRM and marketing platform), Squarespace (website hosting), Microsoft (modern workspace). Some processors may transfer data outside the EEA (notably to the United States); such transfers rely on the European Commission's adequacy decisions or Standard Contractual Clauses. Details available from dpo@hardened.me.
4. Retention
Enquiries that don't become engagements: up to [24] months, then deleted. Newsletter data: until you withdraw consent. Client engagement records: for the duration of the engagement plus limitation periods required by law. Analytics cookies: per the Cookie Policy.
5. Your rights
You have the right to access, rectify, erase, restrict, and port your data, to object to processing based on legitimate interest, and to withdraw consent at any time (without affecting prior processing). Write to dpo@hardened.me. You may also lodge a complaint with the President of the Personal Data Protection Office (PUODO), ul. Stawki 2, 00-193 Warsaw.
6. Is providing data mandatory?
No — but we can't respond to an enquiry without contact details.
7. Changes
We'll post updates here with a revised date.