Controller and privacy contact
- Website / brand
- aioscope
- Operator / data controller
- [Full legal name of the operator — to be completed]
- Registered office
- Poland — [street, postcode and city to be completed]
- Registration / tax details
- [Applicable registration and tax identifiers — to be completed]
- Contact
- info@aioscope.com
Contact info@aioscope.com about this notice or your personal data. The legal identity and full registered address above must be completed before this draft is published.
Information processed
- Customer enquiries: name, email, company, selected audit interest and message.
- Investor enquiries: name, email, optional fund or organisation and message.
- Career enquiries: name, email, selected area, optional portfolio / LinkedIn / GitHub URL and message. Please do not provide health, criminal-record or other sensitive personal information.
- Website requests: the hosting service receives connection data such as IP address, requested resource, time and browser information. Its operational logs depend on the hosting configuration.
- Abuse prevention: the form endpoint derives a hashed identifier from the source IP address and stores it with submission timestamps in a temporary server-side rate-limit file. This identifier is pseudonymous, not necessarily anonymous.
Required fields are identified in each form. Providing enquiry data is voluntary, but missing required information prevents submission or may prevent a useful reply. Information normally comes directly from you. Please only include another person’s information if you are entitled to do so.
Purposes and legal bases
- Optional website analytics: consent, which you can withdraw using Cookie settings (Article 6(1)(a)).
- Responding to an individual’s requested service enquiry: steps taken at that person’s request before a possible contract, where applicable (GDPR Article 6(1)(b)).
- Business representative, investor and general correspondence: legitimate interests in responding, maintaining relevant business contacts and considering collaboration (Article 6(1)(f)), subject to the individual’s interests and rights.
- Career expressions of interest: legitimate interests in considering the collaboration you requested (Article 6(1)(f)); pre-contractual steps may apply to a specific requested engagement. This form is not blanket permission for unrelated marketing or indefinite talent-pool retention.
- Security and abuse prevention: legitimate interests in protecting the website and mail service (Article 6(1)(f)).
- Legal duties and claims: a specific applicable legal obligation, where one applies (Article 6(1)(c)), or legitimate interests in establishing or defending a claim (Article 6(1)(f)).
The present forms do not subscribe you to a newsletter. If a separate optional activity relies on consent, its purpose will be explained and consent can be withdrawn without affecting earlier lawful processing.
How enquiries are delivered and accessed
The PHP endpoint sends the form content to the operator’s designated enquiry mailbox through the hosting mail transport. The visitor’s email is used as Reply-To. The application does not create public text files containing submissions and does not intentionally include message content in its error logs.
Access is intended for people handling the enquiry and necessary hosting, mail-delivery and mailbox providers. The prepared website targets OVH hosting; the exact contracting provider, mailbox provider, processing locations, authorised access and contractual safeguards must be verified before publication. A portfolio link is sent with a career enquiry; the site does not automatically fetch it.
Information is not sold or used by the website code for advertising profiles. A separately agreed service may require its own privacy information and data-processing agreement before customer-system data is handled.
How long information is kept
Correspondence should be kept only while needed to resolve the enquiry and any relevant follow-up, or to meet an applicable legal obligation or deal with a specific claim. Relevant criteria include whether the conversation is active, whether a proposal or contract follows, whether a collaboration opportunity remains relevant, and whether a retention duty or dispute applies. Unneeded information should then be deleted or anonymised.
A career expression of interest is not a commitment to keep an application indefinitely. Any ongoing talent-pool arrangement needs a defined purpose, retention period and appropriate legal basis communicated separately.
Rate-limit entries expire after one hour and are removed when a subsequent submission triggers cleanup; expired records can remain on disk until that cleanup occurs. Mailbox copies, hosting logs and provider backups have separate retention controls.
To confirm before publication: the operator’s actual correspondence-review/deletion procedure and provider log, mailbox and backup retention settings. No unverified fixed retention period is represented as already implemented.
Processing locations and international transfers
When you accept analytics, Google processes analytics information and may process it outside the EEA. See Google’s privacy policy. Before publication, confirm the Google contracting entity, applicable data-processing terms, transfer safeguards and property data-retention settings. Analytics cookies are configured for 180 days; this does not define retention of data already sent to Google.
The operator’s registered-office country is Poland. That does not establish where all hosting, mail processing, support access or backups occur. The cities mentioned on the careers page are collaboration locations, not a statement about data residency or registered entities.
To confirm before publication: actual provider locations and any access outside the EEA. If a restricted transfer occurs, the applicable transfer mechanism and safeguards must be identified and communicated, and information about those safeguards must be available on request. This draft does not claim that a particular adequacy decision or contractual safeguard is already in place.
Your choices and rights
Where the GDPR applies, you may request access, correction, erasure or restriction of processing; portability and objection rights apply in the circumstances set by the law. You can object to processing based on legitimate interests on grounds relating to your situation. If processing relies on consent, you can withdraw it.
Send requests to info@aioscope.com. We may ask for proportionate information to establish identity. See the GDPR page for the request process and complaint options. The website does not perform automated decisions with legal or similarly significant effects on applicants, investors or customers.