Eldermind Labs
Menu
Order
plen

Privacy Policy

Effective date: July 25, 2026

1. Who is the data controller?

The controller of your personal data is BezKodu.io Marcin Gojdka, Beskidzka 177, 43-430 Bładnice Dolne, Poland, VAT ID (NIP) 5482745384, REGON 522691359, conducting business on the basis of an entry in the Central Registration and Information on Business (CEIDG), operating under the Eldermind Labs brand. Contact e-mail for data protection matters: [email protected].

2. What data do we collect?

In connection with the purchase of a digital report, we collect the following data:

  • first and last name,
  • e-mail address,
  • date of birth,
  • time of birth,
  • place of birth,
  • information about any uncertainty regarding the exact time of birth,
  • the selected report tone (engineer / personalized),
  • IP address and browser technical data (server logs),
  • only with your consent: analytics data about your use of the site (see point 8).

3. For what purposes do we process data?

We process your data only for the following purposes:

  • order fulfillment and preparation of a personalized PDF report,
  • communication with you regarding the order,
  • payment processing through an external payment provider,
  • sending confirmations and e-mail notifications (Resend),
  • handling complaints,
  • only with your consent: analyzing site traffic and improving how it works (see point 8),
  • possible defense against claims (legitimate interest of the controller).

4. Legal basis for processing

We process data on the basis of Article 6(1)(b) GDPR (performance of a sales contract) and (c) GDPR (legal obligations incumbent on the controller, e.g. tax). In the case of server logs, the basis is the legitimate interest of the controller (Article 6(1)(f) GDPR). In the case of the analytics cookies described in point 8, the sole basis is your freely given consent (Article 6(1)(a) GDPR), which you can withdraw at any time.

5. To whom do we disclose data?

Your data may be transferred only to trusted processors:

  • Gumroad, Inc. (USA) — payment operator and sales platform,
  • Digistore24 MSLW Limited (Ireland) — payment operator and sales platform,
  • Supabase — order database,
  • Resend — transactional e-mail delivery service,
  • OpenStreetMap Nominatim — only the place name entered in the form (to look up coordinates), without any other personal data,
  • Google (Google Tag Manager, Google Analytics 4) — only after you consent to analytics cookies (see point 8),
  • Microsoft Clarity — only after you consent to analytics cookies (see point 8),
  • server infrastructure provider (VPS).

All listed entities operate on the basis of data processing agreements (GDPR Article 28) or standard data protection clauses.

6. How long do we keep data?

We keep personal data for the time necessary to fulfill the order, and then for the period required by tax and accounting regulations — usually 5 years. After this period, data is deleted or anonymized. Analytics data (point 8) is kept for a maximum of 14 months, in line with Google Analytics 4's default retention settings.

7. Your rights

You have the right to:

  • access your data,
  • rectify your data,
  • erase your data (right to be forgotten),
  • restrict processing,
  • data portability,
  • object to processing,
  • withdraw your consent to analytics cookies at any time (see point 8), without affecting the lawfulness of processing carried out before withdrawal,
  • lodge a complaint with the President of the Personal Data Protection Office (UODO).

To exercise your rights, write to [email protected].

8. Cookies and tracking technologies

The website uses two categories of cookies:

  • Necessary — required for the site to function correctly and to remember your cookie choice. These do not require consent (Article 6(1)(f) GDPR).
  • Analytics — Google Tag Manager, Google Analytics 4 and Microsoft Clarity. These help us understand how you use the site (heatmaps, session recordings, traffic statistics) so we can improve it. They are only loaded after your explicit consent in the cookie banner, and you can disable them at any time.

You can change your decision at any time by clearing cookies in your browser settings or clearing the site's data, which will trigger the consent banner again.

9. Data security

We apply appropriate technical and organizational measures to protect personal data against unauthorized access, loss or destruction. Communication with the server takes place via HTTPS. Access to the database requires authentication.