Privacy policy

Version of October 29, 2026

This policy explains how we process the data of people who visit morphit.pl and contact us through the form, and which cookies the site uses.

1. Data controller

This website is run by the Morphit team (“Morphit”, “we”). The company that will act as the controller of personal data is being incorporated — we will publish its name, address, tax ID (NIP) and KRS number here as soon as it is registered. For any matters concerning personal data, write to kontakt@morphit.pl.

2. What data we process and why

Contact form

Full name, email address, optionally phone number and venue name, and the content of the message. We process them to answer the inquiry, arrange a call and send a confirmation that the message has arrived. The legal basis is consent given in the form (Art. 6(1)(a) GDPR) and, where the conversation concerns entering into a contract, steps taken at the request of the data subject before entering into it (Art. 6(1)(b) GDPR). Providing the data is voluntary, but without it we cannot reply.

Protecting the form against bots

The form is protected by Cloudflare Turnstile, which checks whether a human is sending the message. To do so, it processes technical browser data and the IP address. The legal basis is our legitimate interest in protection against spam and abuse (Art. 6(1)(f) GDPR).

Visit statistics

Google Analytics 4 runs only after you click “Accept” in the cookie banner. It collects information about the pages visited, the device and the approximate location. The legal basis is consent (Art. 6(1)(a) GDPR), which can be withdrawn at any time with the “Cookie settings” button in the site footer.

Server logs

On every visit our infrastructure (Amazon CloudFront) records the IP address, date and time, page address and browser type. This serves security and troubleshooting. The legal basis is legitimate interest (Art. 6(1)(f) GDPR).

3. How long we keep the data

• form inquiries and correspondence — 12 months from the last contact; longer if we start working together, as required by the contract and the law;
• server logs — 90 days; logs of the system handling the form — 30 days (without message content);
• Google Analytics data — according to the retention period set in the service, at most 14 months.

4. Who we share data with

• Amazon Web Services EMEA SARL — website hosting and sending form messages (servers in Ireland, EU);
• home.pl S.A. — the kontakt@morphit.pl mailbox (Poland);
• Cloudflare, Inc. — Turnstile verification (USA; transfer based on the EU-US Data Privacy Framework);
• Google Ireland Limited and Google LLC — Google Analytics, only after consent (USA; EU-US Data Privacy Framework).

We do not sell data and do not use it for advertising.

5. Your rights

You have the right to access your data, to rectification, erasure, restriction of processing and data portability, the right to object to processing based on legitimate interest, and the right to withdraw consent at any time (without affecting the lawfulness of processing before withdrawal). Just write to kontakt@morphit.pl. You also have the right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl).

6. Cookies and browser storage

You can change your Google Analytics choice at any time with the “Cookie settings” button in the site footer.

7. Changes to this policy

The current version of this policy is always available on this page.