Privacy policy

1. Controller

The controller of personal data processed in connection with the mandala.sh website is Mandala sp. z o.o., registered office in Warsaw (ul. 11 Listopada 62/1, 03-445 Warszawa, Poland), entered in the National Court Register (KRS) under number 0000987738, tax ID (NIP) 1133068440, REGON 522849790, operating under the Mandala Software House brand. For any matters regarding personal data, write to us at hello@mandala.sh.

2. What data we process

The website requires no registration and contains no forms.

We process technical data recorded in server logs: IP address, date and time of the request, the address of the visited page and the browser type.

Based on the IP address we determine an approximate location (country, city) using the MaxMind GeoLite2 database stored on our server. The IP address is not shared with third parties in the process and the result is not stored.

If you e-mail us, we process your address and the content of your message.

3. Purposes and legal bases

Server logs keep the website running and secure, the approximate location is used to tailor the home page content, and correspondence data is used to reply to you. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR).

4. Cookies

We only use essential cookies: to remember your chosen language and your acknowledgement of the cookie notice. We don't use analytics or marketing cookies.

5. Recipients

Data may be processed by the infrastructure providers we use to run the website, only to the extent necessary for it to work.

6. Retention

We keep server logs for no longer than 30 days. We keep correspondence for as long as needed to handle it.

7. Your rights

You have the right to access, rectify and erase your data, to restrict its processing and to object. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO).

8. Changes

We publish updates to this policy on this page together with the date of the last change.