Privacy policy.
Below we set out what data we collect through bentora.pl, why we process it and what rights you have. This document covers this website only. How data is processed within a Bentora deployment is agreed separately, in the contract with the client.
1. Who the controller is
The controller of your personal data is Bentora sp. z o.o., with its registered office in Warsaw, at al. Wilanowska 81/35, 02-675 Warszawa, Poland, entered in the register of entrepreneurs of the National Court Register (KRS) kept by the District Court for the Capital City of Warsaw in Warsaw, 13th Commercial Division, under number KRS 0001243558, NIP 5214166628, REGON 544842226.
For any matter concerning personal data you can write to kontakt@bentora.pl or to the company’s registered address.
2. What data we collect
Through the application forms on this site we collect the data you give us: your first and last name, the name of your firm or company, your email address, optionally a telephone number, and the content of your message. Providing the data is voluntary, but without an email address we will not be able to reply to your application.
If you write directly to an email address published on this site, we process the data contained in that correspondence.
3. Why we process the data, and on what basis
- Replying to your application and corresponding about the pilot programme or advisory work: the basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR) and our legitimate interest in carrying on the correspondence (Article 6(1)(f) GDPR).
- Defending against claims and being able to show how the contact proceeded: our legitimate interest (Article 6(1)(f) GDPR).
We do not use data from the forms to send marketing without separate consent, and we do not take decisions about you based solely on automated processing, including profiling. Data from applications is not used to train AI models.
4. How long we keep the data
We keep the data from your application for as long as the matter and our conversations require, and then for the limitation period for any claims, no longer than 3 years from the last contact. If the application leads to our working together, further processing is governed by the contract with the client.
5. Who we pass the data to
Data may be disclosed to the providers of technical services we use, only to the extent needed to perform those services and under data processing agreements:
- Netlify, Inc.: website hosting and form handling. Submissions sent through a form are stored in the service’s dashboard and forwarded to our email address. Netlify is established in the United States, so the data is transferred outside the European Economic Area. The transfer is made on the basis of the standard contractual clauses approved by the European Commission.
- Our email provider: to the extent that correspondence with you reaches our mailbox.
We do not sell data, and we do not share it with third parties for marketing purposes.
6. Your rights
In connection with the processing of your data you have the right to:
- access your data and obtain a copy of it,
- have inaccurate or incomplete data rectified,
- have your data erased,
- have the processing restricted,
- receive your data in a commonly used format and have it transmitted to another controller,
- object to processing based on our legitimate interest.
A request sent to kontakt@bentora.pl is enough. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa), the Polish supervisory authority, if you consider that we process your data unlawfully.
7. Cookies, browser storage and statistics
This site uses no analytics or advertising tools, and stores no cookies in your browser for statistical or marketing purposes.
The site stores one item in your browser’s local storage: the language version you chose, Polish or English. Its only purpose is to stop us from switching the language against your choice on your next visit. It is not a cookie, it never leaves your browser, it does not reach our servers, and it cannot identify you. You can delete it at any time in your browser settings.
Our hosting provider may process technical server data, including your IP address, in order to keep the site secure and working correctly. If we add analytics tools in the future, we will ask for consent and update this document.
8. Changes to this policy
We update this document when the way data is processed on the site changes. Last updated:15 October 2026.