Privacy Policy
Last updated: 2026-03-04
Quantumz.io Sp. z o.o. (“Quantumz.io”, “we”, “us”, “our”) respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect and process personal data when you use our website, contact us, subscribe to our newsletter, or otherwise interact with us.
This Privacy Policy is an information notice. It does not itself create a legal basis for processing. We process personal data only where we have a valid legal basis under applicable law (for example, consent, contract, legal obligation, or legitimate interests).
1. Controller
The controller of your personal data is:
Quantumz.io Sp. z o.o.
ul. Puławska 12/3
02-566 Warsaw
Poland
KRS: 0000958718
Privacy contact: spin@quantumz.io
General contact: spin@quantumz.io
If we appoint a Data Protection Officer (DPO), we will publish the DPO’s contact details here.
2. Scope of this Privacy Policy
This Privacy Policy applies to the personal data processed through:
- our website (including subpages),
- contact forms and direct email communications,
- newsletter subscription forms,
- cookies and similar technologies used on our website,
- related website analytics and technical logs.
If you use a separate Quantumz.io product/application or are our customer under a separate agreement, additional product-specific privacy notices and/or a data processing agreement (DPA) may apply.
3. What personal data we collect
Depending on how you interact with us, we may collect the following categories of personal data:
3.1. Data you provide directly
- Contact data (e.g. name, email address, phone number, company name)
- Inquiry/message content (information you include in a contact form or email)
- Newsletter subscription data (email address and related subscription preferences)
3.2. Data collected automatically
- Technical data (e.g. IP address, browser type, device information, operating system)
- Usage data (e.g. pages visited, time spent on pages, referral source, interactions)
- Log data (e.g. access logs, error logs, security events)
3.3. Cookie and consent data
- Cookie identifiers and similar technology identifiers
- Consent preferences (including records of cookie choices where applicable)
3.4. Data from service providers (where applicable)
We may receive limited technical or delivery-related data from vendors that support our website, analytics, email delivery, or security.
4. Purposes of processing and legal bases (GDPR)
We process personal data for the following purposes and on the following legal bases:
4.1. Handling contact inquiries and correspondence
We process data submitted via the contact form or email to respond to your inquiry and communicate with you about it.
Legal basis:
- Art. 6(1)(f) GDPR – our legitimate interest in handling correspondence and responding to inquiries; and/or
- Art. 6(1)(b) GDPR – taking steps at your request prior to entering into a contract (where your inquiry relates to our services or a potential contract).
4.2. Providing information about our services / pre-contract communication
We may process your data to provide requested information, arrange calls, prepare offers, or continue pre-contract communication.
Legal basis:
- Art. 6(1)(b) GDPR and/or Art. 6(1)(f) GDPR.
4.3. Sending newsletter and marketing emails
If you subscribe, we process your email address (and related subscription records) to send you marketing emails, including commercial information and direct marketing.
Legal basis:
- Art. 6(1)(a) GDPR – your consent.
You can withdraw your consent at any time (e.g. via the unsubscribe link in each email or by contacting us).
4.4. Website security, fraud prevention, and technical administration
We process technical and log data to keep the website secure, detect abuse, troubleshoot errors, and maintain functionality.
Legal basis:
- Art. 6(1)(f) GDPR – our legitimate interest in ensuring website and network security.
4.5. Compliance with legal obligations and defense of claims
We may process and retain certain data to comply with legal obligations (e.g. tax/accounting, regulatory, security-related obligations) and to establish, exercise, or defend legal claims.
Legal basis:
- Art. 6(1)(c) GDPR – legal obligation; and/or
- Art. 6(1)(f) GDPR – legitimate interest in legal defense and compliance.
4.6. Cookies and similar technologies
We use essential cookies for website operation and, where applicable, non-essential cookies (e.g. analytics/marketing cookies) based on your choices.
Legal basis (GDPR):
- Essential cookies/related processing: Art. 6(1)(f) GDPR (legitimate interests) and/or necessity for service functionality;
- Non-essential cookies/related processing: Art. 6(1)(a) GDPR (consent), where required.
5. Contact form – specific information
When you use our contact form, we process the data you enter in the form (e.g. name, email address, and message content) to handle your inquiry and respond to you.
Providing data is voluntary, but if you do not provide the minimum required data, we may not be able to respond.
Please do not send sensitive personal data through the contact form unless it is necessary and you have a valid reason to do so.
6. Newsletter and marketing communications
If you subscribe to our newsletter, we will send marketing emails to the email address you provided.
6.1. Consent and withdrawal
- We send newsletter/marketing emails based on your consent (where required by applicable law).
- You can withdraw your consent at any time:
- by clicking the unsubscribe link in any marketing email, or
- by contacting us at spin@quantumz.io.
Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
6.2. Suppression list (unsubscribe compliance)
If you unsubscribe, we may retain limited information (such as your email address and unsubscribe status) to ensure we respect your request and do not send further marketing emails.
6.3. Email marketing laws (including U.S.)
Where applicable, our marketing emails are designed to comply with relevant electronic marketing and anti-spam laws (including, for recipients in the United States, applicable CAN-SPAM requirements).
7. Cookies and similar technologies
We use cookies and similar technologies to:
- ensure the website works properly,
- remember preferences,
- improve website performance and user experience,
- analyze website traffic and usage,
- [OPTIONAL: support marketing/advertising activities, if used].
7.1. Essential cookies
These cookies are necessary for the operation, security, and core functionality of the website.
7.2. Non-essential cookies (e.g. analytics / marketing)
These cookies are used only where you have given consent, where required by law.
7.3. Cookie choices
You can manage your cookie preferences at any time using:
- our cookie banner / consent tool when you first visit the website, and/or
- you can change your cookie preferences at any time by clicking the “Cookie Settings” link available in via the cookie banner/settings icon. From there, you can review and update your consent choices for non-essential cookies.
You can also control cookies via your browser settings. Please note that disabling some cookies may affect website functionality. We use a consent management tool to record your cookie choices for non-essential cookies.
7.4. Cookie Notice
This Cookie Notice explains how Quantumz.io Sp. z o.o. (“Quantumz.io”, “we”, “us”, “our”) uses cookies and similar technologies on our website, what types of cookies we use, and how you can manage your preferences.
What are cookies?
Cookies are small text files placed on your device (computer, smartphone, tablet) when you visit a website. Cookies help websites function properly, improve user experience, remember preferences, and provide analytics or marketing features.
We may also use similar technologies, such as pixels, local storage, tags, and scripts. For simplicity, we refer to all of these as “cookies” in this Notice unless a distinction is required.
Why we use cookies
We use cookies and similar technologies for the following purposes:
- to ensure the website works properly and securely,
- to remember your settings and preferences,
- to analyze traffic and website performance,
- [OPTIONAL: to measure the effectiveness of marketing campaigns],
- [OPTIONAL: to provide personalized content or advertising, where applicable and permitted by law].
Cookie categories we use
We may use the following categories of cookies:
1. Strictly Necessary Cookies
These cookies are required for the website to function and cannot be switched off in our systems. They are usually set in response to actions made by you, such as setting privacy preferences, logging in, filling in forms, or maintaining security.
These cookies do not require consent where permitted by applicable law.
2. Functional / Preference Cookies
These cookies allow the website to remember choices you make (such as language or region) and provide enhanced, more personalized features.
Depending on applicable law and local implementation, these cookies may require your consent.
3. Analytics / Performance Cookies
These cookies help us understand how visitors use the website (for example, which pages are visited most often, how users navigate the site, and whether errors occur). They help us improve website performance and user experience.
Where required by law, we use these cookies only with your consent.
How to manage your cookie preferences
You can manage or withdraw your consent for non-essential cookies at any time by using our Cookie Settings tool available on the website.
You can also manage cookies through your browser settings. Most browsers allow you to:
- view stored cookies,
- delete cookies,
- block cookies from specific websites,
- block all cookies,
- clear cookies when closing the browser.
Please note that blocking or deleting certain cookies may affect website functionality and your user experience.
Consent records
Where required by law, we maintain records of cookie consent choices (including consent status, date/time, and preference selections) to demonstrate compliance.
List of cookies used on this website
Because the cookies used on the website may change over time (for example, after plugin updates, new features, or changes in vendors), the most up-to-date list of cookies is available through our cookie consent tool / cookie banner.
Changes to this Cookie Notice
We may update this Cookie Notice from time to time to reflect changes in cookies we use, legal requirements, or website functionality. When we make updates, we will revise the “Last updated” date in the Privacy Policy.
Contact
If you have questions about our use of cookies or similar technologies, please contact us at: spin@quantumz.io
8. Recipients of personal data
We may share personal data with the following categories of recipients, only where necessary and on an appropriate legal basis:
- hosting and infrastructure providers (website hosting, CDN, backups),
- IT and security providers (monitoring, security tools, incident response),
- email delivery / newsletter providers,
- analytics and consent management providers,
- CRM / support / communication tool providers,
- professional advisors (legal, accounting, audit),
- public authorities and regulators where disclosure is required by law.
Where a recipient processes personal data on our behalf, we require appropriate contractual safeguards (including data processing agreements, where applicable).
9. International transfers of personal data
We may transfer personal data outside the European Economic Area (EEA), including to service providers located in the United States or other countries.
Where required by applicable law, we use appropriate safeguards for such transfers, such as:
- a transfer to a recipient in a country/organization covered by an adequacy decision, where applicable; or
- Standard Contractual Clauses (SCCs) and, where necessary, supplementary measures.
If you would like more information about the safeguards used for a specific transfer, please contact us at spin@quantumz.io
10. Data retention
We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
Typical retention periods (which you can adjust to your actual operations) are:
- Contact inquiries: up to 24 months after the last correspondence, unless a longer period is necessary for legal claims or contract-related matters;
- Newsletter subscription data: until you unsubscribe / withdraw consent;
- Unsubscribe suppression records: for as long as necessary to ensure we honor your opt-out request;
- Technical/security logs: typically [30–180 days], unless a longer retention period is necessary for security investigations or legal obligations;
- Data required for legal, tax, accounting, or compliance purposes: for the period required by applicable law.
After the retention period expires, data is deleted or anonymized, unless continued retention is legally justified.
11. Data security
We implement appropriate technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.
These measures may include, where appropriate:
- encryption in transit (e.g. TLS/SSL),
- access controls and role-based permissions,
- logging and monitoring,
- backup and recovery procedures,
- vendor due diligence and contractual safeguards.
No method of transmission over the Internet or electronic storage is completely secure. We therefore cannot guarantee absolute security, but we take reasonable and appropriate steps to protect your data.
12. Your rights (EEA/UK/Switzerland, where applicable)
Subject to applicable law, you may have the following rights:
- Right of access – to obtain confirmation whether we process your data and access to that data;
- Right to rectification – to correct inaccurate or incomplete data;
- Right to erasure – to request deletion of your data in certain cases;
- Right to restriction of processing – to limit processing in certain cases;
- Right to data portability – to receive certain data in a structured, commonly used format and transmit it to another controller;
- Right to object – to object to processing based on legitimate interests;
- Right to object to direct marketing – you may object at any time to processing for direct marketing purposes;
- Right to withdraw consent – where processing is based on consent, at any time.
To exercise your rights, contact us at: spin@quantumz.io
We may need to verify your identity before responding to your request.
12.1. Right to lodge a complaint
If you believe that our processing of your personal data violates applicable law, you have the right to lodge a complaint with a supervisory authority.
For Poland, the supervisory authority is:
President of the Personal Data Protection Office (PUODO / UODO)
(Prezes Urzędu Ochrony Danych Osobowych)
13. U.S. state privacy rights (where applicable)
Depending on your U.S. state of residence and whether our business and processing activities meet statutory thresholds, you may have rights regarding your personal data under applicable U.S. state privacy laws (for example, rights to know/access, delete, correct, opt out of certain processing, and appeal a denied request).
13.1. California (CCPA/CPRA)
If the California Consumer Privacy Act, as amended (CCPA/CPRA), applies to our processing, California residents may have rights including:
- the right to know/access,
- the right to delete,
- the right to correct,
- the right to opt out of the sale or sharing of personal information (where applicable),
- the right to non-discrimination for exercising privacy rights.
13.2. How to submit a request
To exercise applicable privacy rights, contact us at:
- Email: spin@quantumz.io
We will respond within the time required by applicable law.
13.3. Authorized agents and verification
Where required or permitted by law, we may verify your identity and/or the authority of an authorized agent before processing a request.
14. “Do Not Sell or Share” / targeted advertising / Global Privacy Control (GPC) (where applicable)
We do not sell personal information for money. We also do not “share” personal information for cross-context behavioral advertising as those terms may be defined under California law, based on our current website practices.
15. Do Not Track (DNT) signals
Some browsers offer a “Do Not Track” (DNT) setting. At present, there is no universally accepted standard for interpreting DNT signals.
Unless required by applicable law, our website may not respond to browser DNT signals. However, where applicable and supported, we may recognize legally required opt-out preference signals (such as GPC) for relevant processing.
16. Children’s privacy
Our website and services are not directed to children under 13, and we do not knowingly collect personal data from children under 13 through the website.
If you believe a child has provided us with personal data, please contact us at [INSERT PRIVACY EMAIL], and we will review and delete the data where appropriate.
If we knowingly offer services directed to children or knowingly process children’s data in a way subject to specific legal requirements, we will comply with applicable child privacy laws.
17. Third-party links and services
Our website may contain links to third-party websites or services. We are not responsible for the privacy practices, content, or security of those third parties.
We encourage you to review the privacy policies of any third-party websites or services you use.
18. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or business operations.
When we make material changes, we will update the “Last updated” date above and, where required by law, provide additional notice.
19. Contact us
If you have questions about this Privacy Policy or how we process personal data, please contact us:
Quantumz.io Sp. z o.o.
ul. Puławska 12/3
02-566 Warsaw
Poland
KRS: 0000958718
E-mail: spin@quantumz.io