How Archeteus uses personal data.
This notice explains what happens when you visit archeteus.dev, send a project enquiry or choose to receive email updates.
Who is responsible for your data
The controller is Archeteus Mateusz Żmijewski, a sole proprietorship registered in the Polish Central Register and Information on Economic Activity (CEIDG).
ul. Akacjowa 7859-220 LegnicaPolandNIP 6912562937 · REGON 522688736
For privacy questions or requests, email info@archeteus.dev. Archeteus has not appointed a data protection officer.
What data we process
When you visit the website
Cloudflare processes technical traffic data needed to deliver and protect the website. This may include an IP address, requested URL, request time, routing information, browser or device information, system configuration data and security events. Archeteus does not currently add browser analytics, advertising technologies or tracking pixels.
When you send a project enquiry
The form prepares an email draft on your device. Nothing you type is sent to Archeteus until you choose to send that email. The message may contain:
- your name and email address
- your organisation and role, where supplied
- the selected project type
- the problem, constraints and other information you choose to provide
- attachments and later correspondence
- standard email metadata needed to deliver and secure the message
Please do not send special-category or highly sensitive personal data unless it is necessary and we have agreed an appropriate way to receive it.
When you choose email updates
The marketing option is separate, voluntary and unticked by default. If you select it and send the draft, your message records that choice. We may then use your email address to send occasional updates about Archeteus services. You can withdraw consent at any time.
Why we use the data
Responding to enquiries and preparing a project
We use the details you send to understand the request, reply, discuss scope and take steps requested before a possible contract. The basis is Article 6(1)(b) GDPR where you are taking those steps personally, or Article 6(1)(f) GDPR where we communicate with a representative of a business.
Operating and protecting the website and correspondence
We process proportionate technical and communication data to deliver the website, prevent misuse, diagnose faults and keep necessary business records. The basis is our legitimate interest under Article 6(1)(f) GDPR.
Email marketing
We use your email for separate service updates only when you have chosen that option. The basis is consent under Article 6(1)(a) GDPR. Withdrawing consent does not affect processing that took place before withdrawal.
Legal duties and claims
We may keep or disclose limited information where a law requires it or where it is reasonably necessary to establish, exercise or defend a legal claim. The basis is Article 6(1)(c) or 6(1)(f) GDPR, depending on the situation.
Human-reviewed classification
Automated tools may classify an enquiry by its subject or service area and help organise follow-up. This may amount to profiling, but a person reviews the enquiry and decides how to respond. Archeteus does not make decisions based solely on automated processing that produce legal or similarly significant effects.
Service providers and international transfers
The current website and enquiry path use these external services:
Cloudflare, Inc.
Cloudflare hosts, delivers and protects the website and processes associated technical traffic data. Its principal address is 101 Townsend Street, San Francisco, California 94107, USA.
Cloudflare Data Processing Addendum
Apple Distribution International Ltd.
Apple provides iCloud Mail for info@archeteus.dev through the iCloud+ Custom Email Domain feature, including message delivery, mailbox storage, filtering and related service functions. Its address is Hollyhill Industrial Estate, Hollyhill, Cork, Ireland.
No CRM is connected to the enquiry path at the effective date of this notice.
We may also disclose data to professional advisers or public authorities where this is necessary and lawful. We do not sell personal data.
Cloudflare and Apple operate internationally, so website traffic or email data may be processed outside the European Economic Area, including in the United States. Their current documentation describes safeguards including the European Commission’s Standard Contractual Clauses for transfers protected by EU data protection law.
How long we keep the data
We keep personal data only for as long as its purpose and applicable legal obligations require:
- an enquiry that does not become a project is kept for up to 12 months after the last meaningful contact
- negotiation and project correspondence is kept for the relationship and afterwards while applicable accounting, tax, contractual or limitation rules require or justify it
- a marketing contact is kept until consent is withdrawn or the relevant mailing activity ends; a minimal suppression record may be kept afterwards so that an opt-out is respected
- technical traffic and security data is retained according to the active Cloudflare configuration and only as needed to deliver, secure and troubleshoot the website
- deleted data may remain temporarily in provider backups until the applicable backup cycle completes
Your choices and rights
Providing information in an enquiry is voluntary. Without contact details and enough information to understand the request, we may be unable to respond or assess the project.
Subject to the conditions in data protection law, you may ask us to:
- give you access to your personal data
- correct inaccurate or incomplete data
- erase data or restrict how it is used
- provide eligible data in a portable format
- stop processing based on legitimate interests by objecting to it
- stop direct marketing at any time, without giving a reason
- withdraw consent at any time
Send a request to info@archeteus.dev. We may need to verify your identity before acting on it.
You may complain to the President of the Personal Data Protection Office in Poland (UODO), or to the supervisory authority where you live, work or believe an infringement occurred. In Ireland, this is the Data Protection Commission.
Changes to this notice
We will update this notice when the website, enquiry process, suppliers or legal obligations change. The effective date at the top identifies the current version.