Privacy Policy
What personal data we collect, why we collect it, how long we keep it and how you can control it.
Last updated: 29 September 2026
1.Who we are
This policy explains how QuorX sp. z o.o., ul. Ignacego Łukasiewicza 4/33, 38-700 Ustrzyki Dolne, PL ("QuorX", "we", "us"), handles personal data when you visit quorx.org, write to us or apply for a role. We are the controller of that data under the EU General Data Protection Regulation (GDPR).
You can send any question about this policy or your data to hello@quorx.org.
2.What we collect
We collect only what you give us and what any web server receives:
- Enquiries: your name, email address, company if you give it, the topic you choose and your message.
- Job applications: your name, email address, any links you include, your message and the CV you attach.
- Emails you send us directly: your address and whatever the email contains.
- Technical data: when you load a page, our hosting provider receives your IP address, browser type and the page requested.
We do not use analytics, advertising or tracking tools, and we do not build profiles of visitors.
3.Why we use it and on what legal basis
- Replying to enquiries and preparing proposals: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR) and our legitimate interest in answering messages sent to us (Article 6(1)(f) GDPR).
- Recruitment: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR). If you ask us to keep your application for future roles, your consent (Article 6(1)(a) GDPR), which you can withdraw at any time.
- Keeping the website secure and working: our legitimate interest in protecting it from abuse (Article 6(1)(f) GDPR).
- Meeting legal obligations, such as keeping accounting records once we work together (Article 6(1)(c) GDPR).
4.How our forms handle your data
Our forms send your message straight to our inbox. Nothing you submit is stored on this website, in a database or in an upload folder. Attached files are checked, forwarded and then discarded by the website.
5.Who we share it with
- Resend, Inc., which delivers form submissions to our inbox.
- Our email and hosting providers, which store and serve data on our behalf.
- Professional advisers and public authorities, where the law requires it.
Each provider acts only on our instructions under a data processing agreement. We never sell personal data.
6.Transfers outside the EEA
Some providers, including Resend, are based in the United States. Where data leaves the European Economic Area, we rely on the EU-US Data Privacy Framework or on the standard contractual clauses approved by the European Commission.
7.How long we keep it
- Enquiries: while the conversation continues, and no longer than 24 months after our last contact unless we start working together.
- Applications: until the role is filled or closed. If you agree, we keep them for future roles for up to 12 months.
- Contract and accounting records: for the period required by Polish tax and accounting law, usually five years from the end of the relevant tax year.
- Server logs: kept by our hosting provider for a short period, typically no more than 30 days.
8.Your rights
Under the GDPR you have the right to:
- access your data and receive a copy of it;
- have inaccurate data corrected;
- have your data erased;
- restrict how we use your data;
- receive your data in a portable format;
- object to processing based on our legitimate interest;
- withdraw your consent at any time, without affecting processing that took place before.
To use any of these rights, email hello@quorx.org. We reply within one month.
You can also lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland (uodo.gov.pl).
9.Whether you have to give us data
Giving us data is voluntary. Without your name, email address and message we cannot reply to an enquiry, and without a CV we cannot consider an application.
We do not make decisions about you by automated means, including profiling.
10.Security
The whole website is served over an encrypted connection (HTTPS) with strict security headers, and access to our inbox is limited to the people who need it.
12.Changes to this policy
We will update this policy when our practices change. The date of the latest version is shown at the top of this page.