Privacy Policy

of MakeImpression.eu

Last updated: May 15, 2025

1. Data Controller

The controller of your personal data is: Fundacja Promocji Badań nad Węchem i AI (Foundation for the Promotion of Olfactory and AI Research) KRS: 0001201057 NIP (Tax ID): 8361891220 REGON: 543082380 Email: [email protected] (hereinafter: the "Controller" or the "Foundation").

2. Data Processor

On behalf of the Controller, personal data is processed by: ULhub sp. z o.o. KRS: 0001191282 NIP (Tax ID): 7831935926 REGON: 542561523 Website: www.ulhub.pl (hereinafter: the "Processor" or "Technical Operator"). ULhub sp. z o.o. is responsible for the technical operation of the MakeImpression.eu Service, including infrastructure maintenance, data processing in IT systems, and hosting services — acting solely on the documented instructions of the Controller and on the basis of an appropriate data processing agreement.

3. Scope of Collected Data

When using the Service, we may collect the following data: • Contact form: name, email address, message content • Newsletter: email address • Technical data: IP address, browser type, operating system, device data, cookies • Analytical data: information about how you use the Service (visit duration, pages viewed)

4. Purposes and Legal Bases for Processing

We process your data for the following purposes: a) Handling contact inquiries Legal basis: Art. 6(1)(f) GDPR — the legitimate interest of the Controller in responding to inquiries. b) Newsletter delivery Legal basis: Art. 6(1)(a) GDPR — your voluntary consent, which you may withdraw at any time. c) Analytics and Service quality improvement Legal basis: Art. 6(1)(f) GDPR — the legitimate interest of the Controller in analyzing traffic and optimizing the Service. d) Security and abuse prevention Legal basis: Art. 6(1)(f) GDPR — the legitimate interest of the Controller. e) Compliance with legal obligations Legal basis: Art. 6(1)(c) GDPR — where processing is necessary to comply with a legal obligation to which the Controller is subject.

5. Data Retention Period

We retain your data for the period necessary to fulfill the purposes for which it was collected: • Contact form: up to 12 months from the last correspondence, unless further communication requires longer retention • Newsletter: until consent is withdrawn (unsubscription) • Analytical data: up to 26 months • Technical data (logs): up to 12 months After the specified periods, data is permanently deleted or anonymized.

6. Your Rights

Under the GDPR, you have the following rights: • Right of access to your personal data (Art. 15 GDPR) • Right to rectification of inaccurate data (Art. 16 GDPR) • Right to erasure — "right to be forgotten" (Art. 17 GDPR) • Right to restriction of processing (Art. 18 GDPR) • Right to data portability (Art. 20 GDPR) • Right to object to processing (Art. 21 GDPR) • Right to withdraw consent at any time (Art. 7(3) GDPR) • Right to lodge a complaint with a supervisory authority — the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland) To exercise your rights, contact us at: [email protected]

7. Newsletter

The newsletter service is provided through the GetResponse platform (GetResponse S.A., ul. Arkońska 6/A3, 80-387 Gdańsk, Poland). Your email address is shared with GetResponse solely for the purpose of newsletter delivery. Subscribing to the newsletter is voluntary and requires providing an email address. You may unsubscribe at any time by clicking the "unsubscribe" link in any newsletter message or by contacting us at [email protected]. GetResponse applies appropriate technical and organizational measures to ensure the protection of processed personal data. More information: https://www.getresponse.com/legal/privacy

8. Data Recipients

Your data may be shared with the following categories of recipients: • ULhub sp. z o.o. — technical operator of the Service (data processor) • GetResponse S.A. — newsletter service provider • Abacus.AI — hosting and server infrastructure provider • Public authorities — in cases provided for by law Data is not transferred to third countries outside the European Economic Area unless necessary for the provision of services and subject to appropriate safeguards (e.g., standard contractual clauses).

9. Cookies

The Service uses cookies for the following purposes: • Ensuring proper website functionality • Remembering user preferences (e.g., language) • Analytical and statistical purposes Types of cookies: • Essential — required for proper Service functionality • Analytical — help understand how users interact with the Service • Functional — enable remembering user preferences You can manage cookie settings in your browser. Disabling cookies may affect Service functionality.

10. Changes to the Privacy Policy

The Controller reserves the right to amend this Privacy Policy. Users will be informed of significant changes via a notice on the Service. Continued use of the Service after changes constitutes acceptance of the updated policy. The current version of the Privacy Policy is always available at: makeimpression.eu/privacy

11. Contact

For matters related to the protection of personal data, please contact: Fundacja Promocji Badań nad Węchem i AI (Foundation for the Promotion of Olfactory and AI Research) Email: [email protected] A response to your inquiry will be provided without undue delay, no later than 30 days from receipt of the request.