1. Data controller
The controller of your personal data is:
- Przestrzeń Innowacyjna HO'X
- Piękna 49, 00-547 Warszawa
- e-mail: kontakt@hox.org.pl
For matters concerning personal data, you can contact us at the e-mail address above.
2. What data we process
- Contact form: first and last name, e-mail address, subject and message content.
- iVerse account: e-mail address (and an encrypted password stored by the authentication provider).
- Technical data: essential cookies and standard server logs (e.g. IP address, browser type).
3. Purposes and legal bases for processing
- responding to a message from the form — Article 6(1)(f) GDPR (legitimate interest: handling correspondence);
- maintaining the Account and providing iVerse space services — Article 6(1)(b) GDPR (performance of a contract);
- ensuring the security and correct operation of the website — Article 6(1)(f) GDPR.
4. Data recipients (processors)
We use trusted service providers who process data on our behalf:
- Supabase — database hosting and authentication service (storage of messages and accounts),
- Vercel — hosting and delivery of the website.
5. Transfer of data outside the EEA
Our providers may process data on servers located outside the European Economic Area (including in the USA). In such cases, the transfer takes place on the basis of standard contractual clauses approved by the European Commission.
6. Retention period
- messages from the form — for the time necessary to handle the enquiry and any further correspondence;
- Account data — until it is deleted by the User or a deletion request is submitted.
7. Your rights
You have the right to:
- access your data and receive a copy of it,
- rectification (correction) of data,
- erasure of data,
- restriction of processing,
- object to processing,
- data portability,
- lodge a complaint with the President of the Personal Data Protection Office (PUODO).
To exercise these rights, write to kontakt@hox.org.pl.
8. Cookies
The Website uses only essential cookies:
- NEXT_LOCALE — remembers the selected website language (PL / EN / DE),
- authentication cookies — maintain the session of a logged-in User in the iVerse space.
We do not use cookies for marketing or tracking purposes. You can manage cookies in your browser settings.
9. Changes to the privacy policy
We reserve the right to update this policy. The new version takes effect from the moment it is published on the Website.