Privacy notice

Who is the controller

The controller of your personal data is DFZOO.COM Sp. z o.o., ul. Wawrzyniaka 6W, 70-392 Szczecin, Poland. The company operates the 23Minds brand.

For anything concerning your data write to start@23minds.com. There is no separate data protection officer; the company is not required to appoint one.

What data and why

The contact form asks for your name, email address, company, the situation you are in and what you want to solve. Phone number and a longer brief are optional. Nothing else is collected through the form.

This data is used for one thing: to answer your enquiry and, if you ask for it, to prepare a proposal. The legal basis is your consent given by ticking the box under the form (Art. 6(1)(a) GDPR) and, where you ask for an offer, the steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).

If you tick the separate marketing box, your email address is also used to send occasional notes on engineering practice around AI. That consent is optional, the form works without it, and you can withdraw it with one click in any message or by writing to start@23minds.com.

Who receives the data

Enquiries are stored in a database hosted in the European Union (Supabase, EU region) and delivered to the company's internal Slack workspace, so the engineer on duty sees them immediately. Slack is operated by Salesforce, Inc. in the United States; the transfer rests on the EU-U.S. Data Privacy Framework and the standard contractual clauses in Slack's data processing agreement.

The website is hosted on Vercel. Server logs and the cookieless traffic statistics Vercel provides do not contain the content of your enquiry.

No data is sold or shared with advertisers, and no profile of you is built.

How long

The enquiry is kept until you ask for it to be deleted or withdraw your consent, whichever comes first. When that happens the contact details and the content are erased; a record that the consent existed, without your data, is kept as required by Art. 7(1) GDPR.

Messages in the internal Slack channel are subject to the same request: on deletion the corresponding message is removed.

Your rights

You can ask for access to your data, for its rectification, erasure or restriction, for a copy in a portable format, and you can object to processing based on legitimate interest. You can withdraw any consent at any time; withdrawal does not affect processing that took place before it.

To exercise a right write to start@23minds.com. The company answers within one month.

If you believe your data is processed unlawfully you can lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stanisława Moniuszki 1A, 00-014 Warszawa, uodo.gov.pl).

Cookies and analytics

This site sets no cookies until you decide. Traffic statistics run by default on Vercel Web Analytics, which works without cookies and without identifying visitors.

If you agree in the cookie bar, Google Analytics 4 (Google Ireland Ltd.) additionally stores the cookies _ga and _ga_* for up to two years and records page views, referring sources and device type in an aggregated form. Advertising features, user-data sharing and personalisation are switched off. Google may process this data in the United States under the EU-U.S. Data Privacy Framework.

You can withdraw the consent at any time with the Cookie settings link in the footer, which brings the bar back; withdrawal stops Google Analytics on the next page load. Deleting the _ga cookies in your browser has the same effect.

Changes

When this notice changes, the date at the top changes with it. The wording of the consent you gave is stored together with its version, so it can always be shown what you agreed to.