Legal information

Privacy policy

This policy explains how data is processed when using the website, technical inquiry form and B2B correspondence. Last updated: 10 August 2026.

Controller and contact

The personal data controller is Q-Media Renata Adamczyk, ul. Nad Potokiem 25/28, 30-830 Kraków, Poland, Tax ID: 679 265 18 73, operating the website under the IRIX Polska brand. For data-related matters, contact kontakt@irixpolska.pl. Operational office: ul. Płk. Andrzeja Hałacińskiego 4, 32-050 Skawina, Poland.

Data collected and its source

We receive data directly from the person submitting the form or correspondence. It may include full name, company, e-mail, phone number, country, industry, project description, technical parameters and voluntarily provided attachments. The server may also record technical data such as IP address, request date and time, visited URL, browser type and information required for security and diagnostics.

Purposes and legal bases

We process data to receive and analyse an inquiry, respond, prepare a quotation, conduct technical arrangements and take steps to enter into or perform a contract, under Article 6(1)(b) GDPR. Correspondence, logs and documentation may also be retained for our legitimate interests in website security, managing B2B relations and establishing, exercising or defending legal claims, under Article 6(1)(f) GDPR. Where accounting or tax law requires processing, the basis is Article 6(1)(c) GDPR. If we request separate consent in the future, the basis will be Article 6(1)(a) GDPR.

Voluntary submission and attachments

Providing data is voluntary, but without basic contact details and an application description we may be unable to respond. Please do not include personal data, trade secrets or confidential information that is unnecessary for the initial analysis. If the project requires confidentiality, an NDA may be agreed before sensitive information is provided.

Data recipients

Data may be accessed by persons authorised by the controller and providers supporting the website and inquiry handling, in particular hosting, e-mail, IT and backup providers and, when necessary, accounting, legal or courier services. They receive data only to the extent required for their tasks and on an appropriate legal basis. We do not sell personal data.

Retention period

Data is retained while an inquiry and related arrangements are handled. If cooperation begins, data may be kept for the contract term, mandatory record-keeping periods and until relevant claims become time-barred. If cooperation does not begin, correspondence is retained only while justified by continued contact, security or defence against claims. Technical logs are retained for the period resulting from hosting configuration and security rules.

Data subject rights

Within the limits provided by GDPR, a person may request access to and a copy of their data, rectification, erasure, restriction of processing and data portability, and may object to processing based on legitimate interests. Where processing is based on consent, consent may be withdrawn at any time without affecting the lawfulness of earlier processing. The availability of each right depends on the legal basis and circumstances of processing.

Complaint to a supervisory authority

If a person believes that their data is processed unlawfully, they may lodge a complaint with the President of the Polish Personal Data Protection Office. Before lodging a complaint, we encourage contacting the controller so that the matter can be clarified.

Transfers and external services

We do not plan to transfer data submitted through the form outside the European Economic Area. The website downloads font files from an external CDN, whose provider may receive technical connection data, in particular the IP address. If a provider processes data outside the EEA, this should take place using GDPR-compliant mechanisms such as an adequacy decision or standard contractual clauses.

Automated decisions and profiling

Data submitted through the website is not used for decisions based solely on automated processing or for profiling that produces legal or similarly significant effects. The website currently does not use advertising analytics or remarketing tools.

Security and policy changes

We use appropriate technical and organisational measures to protect data, although Internet transmission cannot be guaranteed to be absolutely secure. This policy may be updated when website functions, providers or legal requirements change. The current version is always published on this page.