Scope and controller
This policy covers jofraai.eu, contact with JOFRA AI and free consultation bookings. The controller is BIDWAY spółka z ograniczoną odpowiedzialnością, ul. Świeradowska 47, 02-662 Warszawa, Poland, KRS 0001264414, tax number NIP 5214178927. For privacy matters: contact@jofraai.eu, +48 881 378 797. Data processing in systems implemented for clients is governed by separate arrangements.
Data and purposes
The consultation form collects your name, email address, company name, industry and information you choose to share before the meeting. The system records the appointment and booking status. We use these details to arrange and prepare for the consultation. Required fields are marked; additional information is voluntary. Do not send passwords, health information, identity documents or confidential client data. Correspondence includes the message and sender details. Server logs may include an IP address, request time and browser information to deliver the website and detect abuse.
Legal bases
Arranging a requested consultation and taking steps before a contract are based on Article 6(1)(b) GDPR. Business representative contact, other enquiries, website security and protection of legal claims are based on Article 6(1)(f): our legitimate interests in effective communication, secure operations and protecting our rights. Where retention is legally required, Article 6(1)(c) applies. A booking is not consent to marketing.
Recipients and Google Meet
Authorised personnel and hosting, email, IT maintenance and legal service providers may receive data as necessary. The calendar runs within the website’s WordPress installation; booking does not require an account with an external booking portal. Consultations take place on Google Meet. We send organisational details and a meeting link to your email; the organiser may send the link separately. Opening that link also involves processing under Google’s privacy policy. Depending on the service, processing may occur outside the EEA. Where we transfer data to a third country, an appropriate transfer mechanism is required, such as an adequacy decision or standard contractual clauses. Contact us for information about applicable safeguards. We do not record consultations without prior agreement.
Retention
We retain booking details and correspondence as needed to organise the consultation, answer your enquiry and close the matter. Longer retention is limited to records needed for a legal obligation or the establishment, exercise or defence of claims, until the applicable limitation period expires or proceedings conclude. Technical logs are kept as needed for security analysis and resolving detected issues. We periodically review whether continued storage is necessary.
Cookies and browser storage
The website uses mechanisms necessary for forms, booking and security. The privacy panel preference is stored locally in your browser. Advertising analytics, marketing pixels and cross-site tracking are not enabled by default. Optional technologies requiring consent may run only after consent has been obtained. You can reopen preferences in the footer or remove local data in your browser. Blocking essential mechanisms may prevent booking; email and telephone contact remain available.
Your rights
Subject to GDPR conditions, you can request access, correction, erasure, restriction and, where applicable, portability. You can object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing. You may complain to Poland’s supervisory authority, the President of the Personal Data Protection Office: uodo.gov.pl. We do not make decisions about website users based solely on automated processing that have legal or similarly significant effects.
Updates
Version dated 24 October 2026. We update this policy when website operations change and communicate material changes affecting data already collected as appropriate.