Privacy policy and form terms

Version 2026-10-26.3, 26 October 2026. This notice covers the Inbreathe website, correspondence and “Join us” forms.

1. Controller and contact

The data controller is INBREATHE SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ (a Polish limited liability company), registered office: Dębica; ul. Głowackiego 17A/5, 39-200 Dębica, Poland; tax ID 8722455659; KRS 0001189411; registered with the District Court in Rzeszów, 12th Commercial Division of the National Court Register; share capital 5 000 PLN. For privacy requests and consent withdrawal, email work@inbreathe.vc. We have not appointed a data protection officer.

2. Contact and collaboration enquiries

We process data you provide in forms or correspondence: your name, contact information, enquiry and any professional information, company details, project requirements and links you choose to share. The investor, founder and partner forms only start a non-binding conversation. They do not conclude a contract or create an investment commitment. We do not add these contacts to the candidate and freelancer pool.

We handle ordinary correspondence under Article 6(1)(f) GDPR: our legitimate interest in responding to enquiries and managing business contacts. When we take steps at your request before entering into a contract with you, Article 6(1)(b) GDPR applies. Providing data is voluntary, but without contact details we cannot reply, and without information about your enquiry we may be unable to assess it.

3. Current recruitment

Roles marked “Current recruitment” concern a specific recruitment process. We process data needed for employee recruitment under Article 6(1)(c) GDPR together with Article 22¹ of the Polish Labour Code (contact details and qualifications, education and experience needed for the role). For freelance or B2B collaboration, Article 6(1)(b) GDPR applies to steps taken at your request before entering into a contract. Additional ordinary data you provide on your own initiative may be processed with your consent under Article 6(1)(a) GDPR; not providing it does not exclude you from recruitment.

Required fields are marked in the form. Missing information may prevent us from assessing or responding to an application. At this stage we do not request national identification numbers, identity documents, date of birth, photographs, health or criminal-record information, or previous salary details. Provide only relevant professional information. You may include a CV or portfolio link; the form does not accept file uploads. We assess applications manually, without profiling or decisions based solely on automated processing.

4. Future talent pool

“Future projects” means we are building a talent pool, rather than recruiting for a specific project. The pool covers only candidates and freelancers interested in working with Inbreathe sp. z o.o. We retain application data, including skills, availability, preferred collaboration and supplied links, to identify relevant future recruitment or projects and contact you about them. The legal basis is separate consent under Article 6(1)(a) GDPR. We do not use the pool for marketing or share it with other companies for their recruitment.

Joining the pool requires actively selecting consent. For current recruitment and general enquiries, this is an additional, optional choice; declining does not affect the current application. Consent does not guarantee an offer. You can withdraw it free of charge by emailing work@inbreathe.vc, preferably from your application email address. No account or explanation is required. Withdrawal does not affect the lawfulness of earlier processing or separate grounds for handling an ongoing recruitment process.

5. Retention and deletion

We retain future-pool data for 12 months from submission or until you withdraw consent earlier. Viewing or internally editing a record does not extend this period. We record the date, wording, version and language of consent and the deletion deadline. Only authorised CMS administrators can access the pool. Applications without pool consent are sent only by email. Pool applications are also sent to the mailbox operated through Google Workspace.

We retain current recruitment data until that process ends, and ordinary correspondence while handling the enquiry. Afterwards we retain only data covered by pool consent or needed for a separate documented purpose: performing a contract, meeting a legal obligation, or establishing, exercising or defending specific legal claims. For such claims the basis is Article 6(1)(f) GDPR and the period depends on the applicable limitation period or resolution of the dispute. This does not allow further use in future recruitment without consent.

Deletion covers the database and working copies, including correspondence, exports and downloaded documents, unless another lawful basis requires retention. Backups have a separate limited rotation cycle and are not used for recruitment; previous deletions must be reapplied when restoring a system. We do not log form contents or store them in persistent browser storage. Entered answers remain in the open page’s memory until refresh or closure.

6. Website operation and cookies

Servers receive technical data needed to deliver the website: IP address, request time and URL, and browser information. Logs support security and diagnostics under Article 6(1)(f) GDPR, our legitimate interest in providing a secure service. Retention is limited to the period needed for diagnosis and protection, subject to infrastructure log rotation; records of a specific incident may remain until its investigation and related proceedings conclude.

The public website does not use analytics, advertising cookies or marketing pixels. The CMS uses session and login mechanisms, and infrastructure may use necessary security measures. Fonts are served locally. Calendly, LinkedIn and brand websites are ordinary links; once opened, the respective operator’s rules apply. We do not embed their tracking tools.

7. Recipients and international transfers

Access is limited to authorised Inbreathe personnel and providers as needed for their services: Google Workspace (email), Vercel (application and infrastructure), Neon (CMS database), cyber_Folks (Akcent media library) and authorised technical support. Authorities may receive data where required by law. Technical providers do not thereby receive applications for their own recruitment.

Providers’ global infrastructure may involve access to or processing of data outside the EEA, including in the USA. Transfers use a relevant European Commission adequacy decision where applicable, or standard contractual clauses and any required supplementary safeguards. See the processing terms of Google, Vercel and Neon. Contact work@inbreathe.vc for information about safeguards applying to your data or a copy.

8. Your rights

You can request access and a copy, rectification, erasure or restriction. Where the GDPR provides, you have the right to portability of data processed by automated means on the basis of consent or contract, and to object to processing based on legitimate interests on grounds relating to your particular situation. You can withdraw consent at any time. Rights depend on the legal basis and circumstances. Email work@inbreathe.vc. We normally respond within one month; if a legally permitted extension is needed, we will explain the reasons and deadline. You may complain to the Polish data protection authority (UODO).

9. Terms of use of the forms

Version of 26 October 2026. You can retain these terms by printing the page or saving it as a PDF in your browser.

9.1. Service provider

INBREATHE SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ (a Polish limited liability company), registered office: Dębica; ul. Głowackiego 17A/5, 39-200 Dębica, Poland; tax ID 8722455659; KRS 0001189411; registered with the District Court in Rzeszów, 12th Commercial Division of the National Court Register; share capital 5 000 PLN. General contact: hello@inbreathe.vc. Recruitment, privacy and form complaints: work@inbreathe.vc.

9.2. Scope and nature of the service

This free service lets you send an enquiry, application or future-pool signup without creating an account. Investor, founder and partner forms start a conversation. Current recruitment concerns a specific process; future-project listings only build a talent pool. Submitting does not conclude an employment, collaboration, services or investment contract, create financial obligations or guarantee a reply or offer.

9.3. Technical requirements and security

You need internet access, an up-to-date browser with JavaScript and an email address for replies. The forms do not accept attachments; http/https links are supported. Individual text fields are limited to 5,000 characters. Do not submit unlawful content, malicious code, spam, unauthorised third-party data or information unnecessary for the enquiry. Internet use involves risks including phishing and malware; keep your device updated and verify the website address.

9.4. Submission and termination

Use is voluntary. The agreement for the one-off free submission service is entered into by using the submit button and ends when the application is received and confirmation is displayed. Before submitting, you can cancel by leaving the page. An error means receipt has not been confirmed; you can retry or email us. Pool signup requires separate consent, which you may later withdraw under the privacy policy. This does not affect the separate submission service already performed.

9.5. Complaints and personal data

Report form problems to work@inbreathe.vc with a description, approximate time and reply contact. Do not send passwords or unnecessary personal data. We will respond within 14 days of receiving the complaint. These terms do not limit rights under mandatory law. Processing purposes, retention, recipients and rights are described in the privacy policy.