This policy explains what personal data we collect on cordos.pl (including the blog, the English version and the Cordos Lite page), in advertising lead forms and when we are in touch with you, why we do it, and what rights you have.
This is a translation of the Polish privacy policy. If the two versions differ, the Polish version prevails. Wersja polska
The controller of your personal data is Humi Digital sp. z o.o., owner of the Cord OS and Cordos Lite brands, ul. Krótka 33, 42-202 Częstochowa, Poland, entered in the National Court Register (KRS) under number 0000897633, tax ID (NIP) 9492247885, REGON 388769843.
For anything related to personal data, write to [email protected] or to our registered address.
If you submit the form in one of our ads, we receive:
We use this data to call or write back about your submission, present our offer and arrange a demo call or a free pilot. The legal basis is our legitimate interest in answering the submission and holding business talks with the company you represent (Art. 6(1)(f) GDPR). If you run a sole proprietorship, the basis is taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR).
We call you, send text messages and emails about Cord OS only if you tick the consent to such contact in the form (Article 398 of the Polish Electronic Communications Law). You can withdraw it at any time by writing to [email protected] or by telling us during a call.
The form is displayed by TikTok. Under TikTok's rules for lead generation ads, TikTok and the advertiser are separate controllers of this data. TikTok may use the form data for its own purposes, e.g. to prefill future forms for you, but it does not use your answers to our questions. See TikTok's privacy policy.
TikTok shows the ads based on its own data about its users. We only set general criteria, such as country and age, and receive aggregate campaign statistics. There is no TikTok pixel on cordos.pl.
When you book a demo in the calendar on our site, email us or call us, we process the data you give us: usually your name, email address, company name, phone number, the content of your message and the time of the call. We use it to reply, hold the call and continue business talks (Art. 6(1)(f) GDPR, or Art. 6(1)(b) GDPR for sole proprietors).
You book calls in Google Calendar. The booking page runs on Google's side, so Google's privacy rules also apply there.
If your company uses Cord OS or Cordos Lite, we process data of the people who sign the contract with us or use the apps on the customer's behalf: name, email address, phone number, company name, invoicing and billing data, and account data such as the login. We do this to:
Card payments for Cordos Lite are handled by Stripe Payments Europe, Limited. We do not see your full card details.
Data that customers enter into the apps, such as messages, orders or driver details, is processed on the customer's behalf under a data processing agreement. The customer is its controller, so please contact the customer first about it. The rules for using the apps are set out in the Terms of Service (in Polish).
When you follow our profile on a social network (e.g. TikTok, LinkedIn), comment or send us a message, we see your name, profile picture and the content of your comments and messages. We use this data to run the profile, reply and analyse aggregate profile statistics (Art. 6(1)(f) GDPR). The statistics are prepared by the platform operator, and for them we may be a joint controller with it. Details are in the privacy policy of the platform.
We count visits with Rybbit, a tool that runs on our own server (ryb.humi.digital). Visit data does not go to an external analytics provider.
Rybbit does not use cookies. It recognises a visitor by a hash of the IP address and browser data, computed with a key that changes every day, so the same visitor cannot be recognised the next day. We do not store IP addresses, and Rybbit leaves no identifier in your browser, because we block such writes.
We collect:
We do not record sessions and we do not collect what you type into forms or what you copy.
We want to know which content is read, where visitors come from and whether the site works well. The legal basis is our legitimate interest in analysing traffic on the site (Art. 6(1)(f) GDPR). After a day, visit data can no longer be linked to a specific browser and remains only in statistical summaries.
You have the right to object (Art. 21 GDPR). Just click “Turn off” in the statistics notice or the button below. We will then save a disable-rybbit flag in your browser and stop counting your visits to cordos.pl in this browser until you remove it.
Statistics are on in this browser.
Until October 2026 the site also used Google Analytics 4 (Google Ireland Limited), which set cookies. We have removed it. Data collected earlier remains in Google Analytics in line with the data retention settings of our account.
cordos.pl does not use analytics or advertising cookies and has no advertising pixels (TikTok, Meta, Google Ads).
In your browser's storage (localStorage) we only save your choices about statistics:
humi-statystyki: that the statistics notice was closed (value ok or off), so that it is not shown again;disable-rybbit: that statistics are turned off.These entries are strictly necessary to remember your decision, so they do not require consent. You can delete them by clearing the site data in your browser.
Cloudflare, which protects the site against attacks, may set technical security cookies, e.g. when it checks whether traffic comes from a bot. Google Calendar, where you book calls, and social networks use their own cookies under their own rules.
We share data only with companies that help us run the site and the business, to the extent needed for their tasks:
Service providers process data on our instructions under data processing agreements. TikTok (for lead forms) and Stripe (for payment fraud prevention) act as separate controllers.
Servers and Cloudflare see the IP address on every request, because the site cannot be delivered without it. We use technical logs only for security and troubleshooting (Art. 6(1)(f) GDPR).
Some providers, e.g. Cloudflare, Google and Stripe, may also process data outside the European Economic Area, including in the USA. This happens only with appropriate safeguards: a European Commission adequacy decision, including the EU-US Data Privacy Framework for certified companies, or standard contractual clauses adopted by the Commission. You can get a copy of the safeguards by writing to [email protected].
You have the right to:
Send requests to [email protected]. We reply within one month.
Providing data is voluntary. Without contact details, however, we cannot respond to your submission, and without the data needed for a contract we cannot conclude it. We need invoicing data under tax law.
We do not make decisions about you based solely on automated processing, including profiling, that would produce legal effects concerning you or similarly significantly affect you.
When we change how we process data, we will update this page and the date below.
Last updated: 20 October 2026