Privacy policy

Data controller

The controller of your personal data is Noothropic sp. z o.o., ul. Stanisławowska 47, 54-611 Wrocław, Poland, entered in the National Court Register under KRS 0001221668, tax ID (NIP) 8943279020.

For anything about your personal data, write to kontakt@noothropic.com.

What data we process

The contact form sends us your name, email address, message and, if you give it, your company name. The same data reaches us when you write to our email address directly.

The server that runs the site logs technical data about each request, including the IP address and browser type. The IP address also limits how many messages one address can send within 10 minutes. For that it is held only in the server's memory and never written anywhere.

Purpose and legal basis

Giving us your data is voluntary, but without an email address we cannot reply. We make no automated decisions and do no profiling.

• Replying to your message and discussing work before a contract: Art. 6(1)(b) GDPR.
• Keeping correspondence, preventing abuse, and establishing or defending legal claims: our legitimate interest, Art. 6(1)(f) GDPR.
• Security and operation of the site (server logs): our legitimate interest, Art. 6(1)(f) GDPR.

How long we keep data

We keep correspondence while the conversation lasts and, if no work follows, for at most 12 months after the last contact. If we sign a contract, we keep the data for its duration and the limitation period for claims. The hosting provider deletes server logs automatically.

Who receives the data

We do not sell data or pass it to other companies for marketing. We use providers who process data on our behalf:

• Vercel Inc.: site hosting and server logs.
• Resend (Plus Five Five, Inc.): sending form messages and the confirmation to the sender.
• Proton AG: the email inbox where we keep correspondence.

Vercel and Resend are based in the United States. Data goes there under the European Commission's adequacy decision (EU‑US Data Privacy Framework) or standard contractual clauses approved by the Commission. Proton AG operates in Switzerland, which the Commission has also found to provide adequate protection.

Cookies

The site sets one cookie, NEXT_LOCALE, which remembers the language you chose until the browser session ends. It is strictly necessary for the site to work, so it needs no consent. We use no analytics or advertising cookies, and fonts are served from our own server, with no requests to Google.

Your rights

You have the right to access, correct, erase and port your data, to restrict its processing, and to object to processing based on our legitimate interest. Just write to kontakt@noothropic.com.

You can also lodge a complaint with the Polish data protection authority, Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00‑193 Warsaw.

Changes to this policy

When we change how we process data, we will update this page and the date at the top.