Privacy

Who is responsible for the data

The controller of the data is the owner of VEROSENS.

For questions about your data, write to: info@verosens.com

Without logging in

The public pages use no cookies, analytics, ads, or external scripts and fonts.

The server keeps no visitor log. Your IP address is used only to deliver the page; after failed login attempts it is kept only in the server's memory (never on disk) to block password guessing.

Account (for invited people)

Login, display name, a hash of the password (we never know the password itself), the list of shared projects, and for accounts with a second login factor the key for one-time codes. Why: to show you only your projects. How long: as long as the account exists.

After you log in, the browser receives one cookie, "vs" (signed, not readable by scripts), valid for 12 hours or until you log out. It is required for logging in, so we do not ask for consent.

Remarks, ratings, challenge answers, film suggestions

We store your login, the text, the time, and which film or challenge it is about. Why: to develop the concepts shown. How long: while work on the project continues; then we delete them or replace the login with "deleted account".

Files in the Documents tab

A file you upload in a project, your note on it, your login and the time. Only you and the owner of VEROSENS see it; other clients of the project do not. Why: exchanging materials while working on the project. How long: while the project lasts, or until you delete it yourself.

Project proposals

Login, title, description, attachments and an optional request for contact. Why: to consider the proposal. How long: up to 12 months after the matter is closed.

Legal basis

Art. 6(1)(b) GDPR: working together on the project you were invited to, and steps taken at your request before a possible contract. Security measures (login cookie, blocking password guessing, backups): art. 6(1)(f), the legitimate interest of keeping the service secure.

Who else has access

Only the owner of VEROSENS sees the data. It is stored by the server (hosting) provider.

We use an AI tool (Claude by Anthropic, USA) when working on the projects. Remarks are passed on with logins replaced by "client A", "client B"; project proposals may be read together with the login. Do not write anything that identifies you unless it is needed.

We do not sell data, use it for advertising or profiling, or make automated decisions based on it.

Backups

Backups are encrypted. Each backup is deleted after 60 days, so deleted data disappears from backups within that time at the latest.

Your rights

You may request access to your data and a copy of it, correction, deletion, restriction of processing and data portability, and you may object to processing based on legitimate interest. We reply within one month.

You may lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl).