Privacy policy

Effective from 17 September 2026.

This notice covers inbreathe.vc and contact with Inbreathe. This is an informational website. It does not offer an online shop, newsletter subscriptions or forms collecting visitor data.

1. Data controller and contact

The data controller is Inbreathe sp. z o.o., operating under the Inbreathe brand. Address: Głowackiego 17A/5, 39-200 Dębica, Polska. For privacy enquiries and to exercise your rights, contact hello@inbreathe.vc.

2. Browsing the website

Displaying a page, image or PDF requires servers to receive technical data: your IP address, request time, requested resource address and information sent by your browser, such as browser type and operating system. This data may appear in access, error and security logs.

We process this data to deliver the website, keep it working, diagnose errors and prevent abuse. The legal basis is our legitimate interest in operating a reliable and secure website — Article 6(1)(f) GDPR.

3. Correspondence and contact

When you contact us by email or phone, or arrange a meeting, we process the contact details you provide, your message and any attachments. We use them to respond, communicate with you and handle your enquiry. Providing data is voluntary, but we cannot reply without suitable contact details. Please share only information needed for your enquiry.

For ordinary correspondence, the legal basis is our legitimate interest in handling enquiries — Article 6(1)(f) GDPR. When we take steps at your request before entering into a contract with you, or perform that contract, the basis is Article 6(1)(b) GDPR. We retain records needed to establish, exercise or defend legal claims under Article 6(1)(f) GDPR.

4. Cookies, analytics and links

The public website does not use its own analytics or advertising cookies, marketing pixels or visitor-tracking tools. We do not profile you or make decisions about you based solely on automated processing. The administration panel, restricted to authorised editors, uses technical session and authentication mechanisms. Infrastructure providers may use necessary safeguards against abuse.

Fonts are served from our website. Calendly, LinkedIn and brand websites are accessed through ordinary links; their forms and tracking plugins are not embedded here. When you open an external site, its operator processes data under its own rules. Before booking a meeting, read the Calendly privacy notice; before using LinkedIn, read the LinkedIn privacy policy.

5. Service providers and recipients

We use IT infrastructure providers: Vercel delivers the application and content delivery network, Neon hosts the CMS database, and our Akcent media library serves files from cyber_Folks hosting. Email and calendar providers may assist with correspondence and meetings. Authorised personnel and providers access data as needed to provide their services. Data may also be disclosed to entities legally entitled to receive it.

Providers’ global infrastructure, particularly Vercel’s, may involve processing outside the European Economic Area, including in the United States. Vercel’s terms provide transfer safeguards, including European Commission standard contractual clauses. Details are available in the Vercel Data Processing Addendum. Contact us for information about safeguards applying to your data or a copy of them.

6. How long we keep data

We keep correspondence while handling your enquiry. After it is closed, we retain only records needed for ongoing cooperation, legal obligations or protection against specific legal claims — for the duration of that cooperation, the legally required period or the applicable limitation period, respectively. Where a dispute arises, relevant records may be kept until it is finally resolved.

Technical logs are subject to rotation and infrastructure providers’ retention rules. Retention depends on the time needed to detect and investigate errors or incidents and protect the service. Records isolated for a specific incident may be kept until the investigation and related proceedings are concluded. We do not use logs to build marketing profiles.

7. Your rights

Subject to the GDPR, you may request access, rectification, erasure or restriction of processing. You may object to processing based on legitimate interests on grounds relating to your particular situation. Data portability applies where processing is automated and based on consent or a contract. Not every right applies to every type of processing.

You can send your request to hello@inbreathe.vc. You may also lodge a complaint with the President of Poland’s Personal Data Protection Office — uodo.gov.pl — or another competent supervisory authority, particularly in the country of your habitual residence, workplace or the alleged infringement.

8. Updates

We update this notice when the website or our data processing changes. The current version and its effective date are available on this page.