Privacy policy
Section 1 · in force since 2026-05-12
This privacy policy explains what personal data we collect when you use the studioapps.pl website, how we process it and what rights you have.
1.1 Data controller
The controller of your personal data is:
- Studio Apps Sp. z o.o.
- Registered office: ul. Warszawska 40, lok. 2A, 40-008 Katowice, Poland
- KRS: 0001226501 (entered on 03.04.2026, District Court Katowice-Wschód, 8th Commercial Division of the Krajowy Rejestr Sądowy — the Polish commercial register)
- Contact: kontakt@studioapps.pl
We have not appointed a Data Protection Officer (DPO) — we are not required by law to do so (we do not process sensitive data on a large scale and we are not a public authority). Please send any questions about personal data directly to the contact address above.
1.2 What data we collect
We collect the minimum data needed to run the site and to get in touch with you:
| Type of data |
When collected |
Legal basis |
| Contact form (name, email, company, phone, message) |
When you fill in the form at /#kontakt |
Art. 6(1)(a) GDPR (consent) + (f) (legitimate interest — replying) |
| Email address + message content |
When you write directly to kontakt@studioapps.pl |
Art. 6(1)(f) GDPR (legitimate interest — replying) |
| Pulse analytics data (country, city, device, traffic source) |
During your visit to the site |
Art. 6(1)(f) GDPR (traffic analysis — without identifying anyone) |
| Vercel server logs (IP, time, URL) |
On every visit |
Art. 6(1)(f) GDPR (server security) |
The contact form is handled by our own server endpoint hosted on Vercel; the email itself is sent through Resend (Resend Inc., USA, Data Privacy Framework) — the service passes the message on to our email address without storing the content beyond the moment of transfer. Alternatively, you can write directly to kontakt@studioapps.pl.
1.3 Purposes of processing
- Replying to your enquiry — when you send an email, we use it solely to reply.
- Traffic analysis — we use our own tool Pulse (cookieless analytics), which aggregates traffic without identifying individuals. We do not use Google Analytics, Facebook Pixel or any other third-party trackers.
- Security — server logs are used to detect attacks and protect against abuse.
1.4 Retention periods
- Email correspondence: 2 years from the last message, unless a business relationship is ongoing.
- Pulse analytics data: 13 months (in line with EDPB guidelines).
- Vercel server logs: 30 days (Vercel default).
1.5 Data recipients
Data may be passed on to the following processors:
- Vercel Inc. (USA, under the Data Privacy Framework) — hosting of the site and the Pulse servers.
- Supabase Inc. (EU-based, region eu-central-1) — database for Pulse and the Theme Editor.
- Microsoft 365 (EU servers) — running the kontakt@studioapps.pl mailbox.
- Resend (Resend Inc., USA, Data Privacy Framework) — delivery of messages from the contact form (without storing the content beyond the moment of transfer).
All of these processors have signed DPAs (Data Processing Agreements) and meet GDPR requirements.
1.6 Your rights
You have the right to:
- Access your data (Art. 15 GDPR)
- Rectification of your data (Art. 16 GDPR)
- Erasure of your data — the "right to be forgotten" (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Portability of your data (Art. 20 GDPR)
- Objection to processing (Art. 21 GDPR)
- Lodging a complaint with the President of UODO — the Polish data-protection authority (uodo.gov.pl)
To exercise these rights, write to kontakt@studioapps.pl. We reply within 30 days.
Terms of service for the website
Section 2 · in force since 2026-05-12
2.1 General provisions
These terms set out the rules for using the studioapps.pl website, operated by Studio Apps Sp. z o.o. (ul. Warszawska 40 lok. 2A, 40-008 Katowice, KRS: 0001226501). The site is informational and a portfolio — it does not provide services or sell products directly. All services are delivered under separate agreements concluded after you get in touch with the controller.
2.2 What the site does
- Presents the StudioApps portfolio of digital products (opiekunek.pl, apartmentsite.at, ApartmentOS, Customer Service AI, ContentOS, Pulse, Mailing Suite, Product Hub).
- Presents our working methodology and the team's skills.
- Makes it possible to contact the controller by email.
- Allows the colour scheme of the site to be changed (Theme Editor) — an experimental, optional feature.
2.3 Technical requirements
To use the site properly you need:
- A web browser with JavaScript enabled (Chrome 90+, Firefox 88+, Safari 14+, Edge 90+).
- An internet connection (page size: up to 2.5 MB per subpage).
- A screen resolution of at least 320×568 px (the site is responsive).
2.4 Theme Editor — community feature
The Theme Editor is available on the homepage — a tool for changing the site's colour scheme and saving your own themes. The feature is experimental:
- Saved themes are publicly visible to every visitor — do not put private data in the theme name or in the "author" field.
- Themes are immutable (they cannot be edited or deleted — every edit creates a new entry).
- The controller reserves the right to remove themes containing offensive or unlawful content, or content inconsistent with the character of the site.
- Saving a theme does not require an account — you provide the name and signature voluntarily.
2.5 Copyright
All content, code, graphics and screenshots published on the site are the property of Studio Apps Sp. z o.o. and are protected by copyright. Screenshots of client products are published with permission or in anonymised form (following the rules described in the methodology on each subpage).
Copying, modifying and distributing the content without the controller's permission is prohibited, except for permitted personal use (quoting with the source stated).
2.6 Liability
- The site is provided "as is" — with no guarantee of continuous availability.
- The controller is not liable for damage arising from use of the site, unless it results from wilful misconduct.
- Product numbers shown on the site come from genuine production reports — they are verifiable under NDA. UI visualisations marked "SAMPLE DATA" contain fictitious data to protect clients covered by an NDA.
2.7 Complaints
Complaints about how the site works should be sent to kontakt@studioapps.pl. Handling time: 14 working days.
2.8 Final provisions
- These terms apply from the date of publication.
- The controller reserves the right to amend the terms — the current version is always at
/legal#regulamin.
- Matters not covered here are governed by Polish law, in particular the Civil Code (Kodeks cywilny), the GDPR and the Polish Act on Providing Services by Electronic Means.
- The competent court is the court with local jurisdiction over the controller's registered office.
GDPR information
Section 3 · in force since 2026-05-12
This section summarises how we meet the information obligations arising from Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).
3.1 Legal basis for processing
We process your data solely on the basis of Art. 6(1)(f) GDPR — the legitimate interest of the controller. Specifically:
- Replying to your enquiry — the business's interest in communicating.
- Traffic analysis (Pulse) — an interest in optimising the site, with no individual profiling.
- Security — an interest in protecting our infrastructure.
We do not rely on "consent" (Art. 6(1)(a)) or "contract" (Art. 6(1)(b)) as a basis, because we do not conclude contracts through the site — every contract is signed offline after the first contact.
3.2 Profiling and automated decisions
We do not apply profiling or decisions based solely on automated processing to visitors of the site. Pulse analytics aggregates data at the site level (country / city / device / source) — without building individual user profiles, without fingerprinting and without tracking cookies.
3.3 Transfers outside the EEA
Hosting for the site is provided by Vercel Inc. (registered office: USA). Vercel participates in the EU-U.S. Data Privacy Framework (DPF), which is a legally recognised transfer mechanism. The remaining processors (Supabase, Microsoft 365) operate from servers located within the EU.
3.4 Data security
- Connection encryption: HTTPS / TLS 1.3 (Vercel default).
- Database: Row Level Security in Supabase (Postgres).
- API keys: rotated, stored in the macOS Keychain + Vercel encrypted env.
- Database backup: daily, 7-day retention.
- Breach notification: within 72 hours to UODO and to the people affected.
3.5 Contact on GDPR matters
Please send all enquiries and requests for access, rectification, erasure or objection to kontakt@studioapps.pl. We reply within a maximum of 30 days (Art. 12(3) GDPR), which may be extended to 60 days in complex cases.
The supervisory authority is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO — the Polish data-protection authority): ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.
Cookie policy
Section 4 · in force since 2026-05-12
4.1 The short answer
The site does not use tracking cookies. You will not see an "I agree" banner — we do not need consent, because we do not collect anything that would require it.
4.2 What that means in practice
Our own analytics tool Pulse uses cookieless tracking — anonymous session identifiers generated from fragments of the request headers (country, device), with nothing stored on the user's device. The identifiers are single-use and do not allow tracking between visits. You confirm your consent to this kind of analytics when you submit the contact form (the optional "Pulse analytics" checkbox); simply browsing the site without submitting the form requires no consent, because the data is fully anonymous at the technical level (Article 173(3)(2) of the Polish Telecommunications Act — the exemption for data that is strictly technically necessary).
4.3 Necessary cookies (the only ones used)
| Name |
Purpose |
Lifetime |
Provider |
__vercel_* |
Session security, protection against DDoS |
Session |
Vercel |
localStorage (theme) |
Remembering the chosen colour scheme |
Until cleared by the user |
This site |
All of the above are necessary for the site to work and require no consent under Article 173 of the Polish Telecommunications Act and EDPB guidelines 03/2022.
4.4 Analytics
We collect anonymous traffic statistics for our own purposes — we use our cookieless analytics tool Pulse. The data is aggregated at the site level, with no identification of individuals.
4.5 How to clear local data
To remove the saved colour scheme (localStorage), use your browser's DevTools: Application → Storage → Local Storage → studioapps.pl → Clear, or simply clear the site data in your browser settings.
Impressum (DACH)
Section 5 · in force since 2026-05-12 · required by DDG § 5 (DE) and ECG § 5 (AT)
This section is required by German law (Telemediengesetz § 5) and Austrian law (E-Commerce-Gesetz § 5) for websites accessible in DE/AT.
5.1 Anbieter (site operator)
- Studio Apps Sp. z o.o.
- Sitz / Registered office: ul. Warszawska 40, lok. 2A, 40-008 Katowice
- Poland / Polen
5.2 Vertretungsberechtigter (representation)
The company is represented by its Management Board as entered in the Krajowy Rejestr Sądowy (the Polish commercial register). Current details of the Board members are available in the public KRS register (number 0001226501) at ekrs.ms.gov.pl.
5.3 Kontakt (contact)
5.4 Handelsregister / Steuernummer (registers)
- KRS (Krajowy Rejestr Sądowy, the Polish equivalent of the Handelsregister): 0001226501
- Registry court: District Court Katowice-Wschód, 8th Commercial Division of the Krajowy Rejestr Sądowy
- Date of entry: 03.04.2026
5.5 Verantwortlich für den Inhalt (responsibility for content)
Pursuant to § 55(2) of the German RStV / § 25 of the Austrian MedienG: responsibility for the content lies with the Management Board of Studio Apps Sp. z o.o. — details as in section 5.1. The composition of the Board is publicly available in the KRS.
5.6 Streitschlichtung (dispute resolution)
The European Commission provides a platform for online dispute resolution (ODR): https://ec.europa.eu/consumers/odr.
We are neither obliged nor willing to take part in dispute-resolution proceedings before a consumer arbitration board within the meaning of the German Verbraucherstreitbeilegungsgesetz (VSBG) — we settle all disputes directly.
5.7 Haftungsausschluss (disclaimer)
The content of the site is prepared with due care. Even so, we do not guarantee that it is current or complete. Links to external sites are verified at the time of publication — we are not responsible for changes made on external sites after our publication.