Privacy Policy

01Who we are

Our website address is https://odysse.io.

The controller of personal data collected through this website is ODYSSE.IO PROSTA SPÓŁKA AKCYJNA, a Polish simple joint-stock company with its registered office at ul. Długa 29, 00-238 Warszawa, Poland, entered in the Register of Entrepreneurs of the National Court Register (KRS) under number 0001148783, tax ID (NIP) 5253030620, REGON 540620747 ("we"). For anything concerning your data, write to us at contact@odysse.io.

02Contact form

When you send a message through the contact form, we collect the data you enter: your name, email address and the message itself. We use it only to reply to your enquiry and to continue the conversation.

We process this data on the basis of our legitimate interest in answering messages sent to us (Art. 6(1)(f) GDPR) and, if you are asking about working together, to take steps at your request before entering into a contract (Art. 6(1)(b) GDPR). Providing the data is voluntary, but without it we cannot reply.

To protect the form against spam, the IP address a message is sent from is briefly held in the server's memory and used only to limit the number of submissions. It is not stored with the message.

03Cookies and browser storage

On your first visit we ask for consent to the optional cookie categories. Nothing beyond the strictly necessary minimum happens until you agree.

• Necessary — your choice in the consent banner is saved in your browser's storage (localStorage) so we don't ask again on every visit. It contains no personal data and stays in your browser until you delete it.
• Analytics — only after you consent do we load Google Analytics 4. It sets the _ga and _ga_* cookies (valid for up to 2 years) and collects information about the pages you visit, your device, browser and approximate location, which tells us what content is useful. The legal basis is your consent (Art. 6(1)(a) GDPR). Without consent the Google script is not loaded at all.
• Marketing — we currently use no marketing or advertising tools.

You can change or withdraw your consent at any time using the "Cookie settings" link in the site footer. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

The site's admin panel uses its own session cookie, but it only applies to the people who manage the site, not to visitors.

04Embedded content from other websites

Articles on this site may include embedded content such as videos, images and articles from other websites. Embedded content from other websites behaves in the same way as if you had visited the other website directly.

These websites may collect data about you, use cookies, embed additional third-party tracking and monitor your interaction with the embedded content, including tracking that interaction if you have an account and are logged in to those websites.

05Who we share your data with

We do not sell your data. We share it only with providers that help us run the site and process data on our behalf:

• Hetzner Online GmbH (Germany) — hosting of the server that runs the site and stores contact form messages,
• Mailgun Technologies, Inc. (USA) — sending email notifications about new contact form messages,
• Google Ireland Limited (Ireland) — our company email (Google Workspace) and, if you consent, Google Analytics statistics.

We may also disclose data to public authorities where the law requires it.

06How long we retain your data

• Contact form messages — for as long as needed to handle your enquiry and any follow-up correspondence. We then delete them, unless we need them to establish, exercise or defend legal claims, in which case we keep them until those claims expire.
• IP address used by the form's spam protection — up to 15 minutes, in server memory only.
• Google Analytics data — according to the retention settings in Google Analytics, no longer than 14 months.
• Your cookie consent record — in your browser, until you delete it.

07What rights you have over your data

You have the right to:

• access your data and receive a copy of it,
• have your data rectified,
• have your data erased,
• restrict processing,
• data portability,
• object to processing based on our legitimate interest,
• withdraw your consent at any time.

The right to erasure does not cover data we are required to keep for administrative, legal or security purposes. To exercise any of these rights, write to contact@odysse.io.

You also have the right to lodge a complaint with a supervisory authority — in Poland, the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw), or the authority in your own EU country — if you believe we process your data unlawfully.

We do not make decisions about you based solely on automated processing.

08Where your data is sent

We aim to process data within the European Economic Area. Mailgun and Google may, however, also process it in the United States. In that case the transfer relies on the European Commission's adequacy decision (EU–US Data Privacy Framework) or on standard contractual clauses approved by the Commission.

09Changes to this policy

When we change how we process data, we will update this page. The date of the last change is shown at the top.