Privacy Policy
Last updated: 15 May 2026
This privacy policy describes how The Heart Sp. z o.o. (operator of VASBOX) processes personal data of visitors to vasbox.tech. This document meets the requirements of Articles 13 and 14 of the GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council).
1. Data controller
The data controller is The Heart Sp. z o.o., registered in Warsaw (registration details to be completed). For data protection enquiries, contact: privacy@vasbox.tech.
2. What data we collect
The vasbox.tech website does not actively collect personal data. We do not use registration forms or user accounts. The only points of contact are: (a) emails sent directly by the visitor to addresses listed on the site, (b) meetings booked via Cal.com - to the extent necessary to schedule an appointment.
3. Purposes and legal bases
Data provided by email or Cal.com is processed solely to respond to enquiries or conduct the scheduled meeting. Legal basis: Article 6(1)(b) GDPR (necessity for steps prior to entering a contract) or Article 6(1)(f) GDPR (legitimate interests of the controller).
4. Cookies and analytics
VASBOX uses Cloudflare Web Analytics - a cookieless tool that does not collect personal data, does not build behavioural profiles, and does not use fingerprinting. The beacon collects only aggregated traffic metrics (URL, country, load time) without user identifiers. We do not use Google Analytics, marketing cookies, or third-party trackers. No cookie banner is required.
5. Who we share data with
We do not sell or share personal data with third parties for marketing purposes. Data may be passed to subprocessors (Vercel hosting, Cal.com booking) solely to the extent necessary for service delivery, under appropriate data processing agreements.
6. Data retention
Email correspondence data is retained for the period necessary to handle the enquiry and as required by applicable law. Cloudflare aggregated analytics data contains no personal data and is stored in accordance with Cloudflare's policy.
7. Your rights
You have the right to access, rectify, erase, restrict processing of, object to, and port your data. You have the right to lodge a complaint with a supervisory authority. To exercise your rights, contact: privacy@vasbox.tech.
8. Contact
For privacy matters: privacy@vasbox.tech