Privacy policy

1. Data controller

The controller of personal data is Decision Interface P.S.A. (a simple joint-stock company) with its registered office at Aleja Wilanowska 115/44, 02-765 Warszawa, Poland, tax identification number (NIP) 5214169992, register number (KRS) 0001248975. Contact on privacy matters: hi@hi-di.cloud.

2. What data we collect

The site idecisioninterface.com is the company's presentation site. It requires neither registration nor sign-in. We collect the following data:

• Necessary cookies — we store in the browser the chosen interface language (key di:locale) and the fact that the cookie notice has been dismissed (key di-cookie-notice-v2). We use no tracking, analytical or marketing cookies.
• Newsletter subscription — if you subscribe, we collect your e-mail address and the chosen interface language (so that notifications reach you in your language). Before adding you to the list we send a message with a confirmation link (double opt-in). You may unsubscribe at any time — the unsubscribe link is in every message (one-click unsubscribe compliant with RFC 8058).
• Contact form data — when you send the form we collect the fields you provide: name, e-mail address, optionally company name, the message itself and the chosen interface language. The message goes straight to our mailbox.
• Vercel Web Analytics — we use Vercel's privacy-friendly analytics, which gathers anonymous statistics (page views, countries, device types) without cookies and without personal identifiers. No personal data, GDPR-compliant without a consent requirement.
• Server logs — Vercel (our hosting provider) automatically collects anonymous technical logs (IP address, user agent, request path) necessary for the site to work and to protect it against attacks.

3. Purposes of processing and legal bases

• Providing the site for browsing — Article 6(1)(f) GDPR (the controller's legitimate interest in keeping the service running).
• Sending the newsletter — Article 6(1)(a) GDPR (your voluntary consent given through double opt-in).
• Answering contact enquiries — Article 6(1)(b) GDPR (steps towards concluding a contract) or (f) (legitimate interest).
• Browsing statistics — Article 6(1)(f) GDPR (legitimate interest — anonymous statistics without personal data).
• Security of the service — Article 6(1)(f) GDPR (protection against abuse and attacks).

4. Retention periods

• Browser cookies — until deleted by the user or until the session expires.
• Newsletter subscriber list — until you unsubscribe. After unsubscribing the address stays on the list marked “unsubscribed” for 24 months — this protects against accidental re-addition and evidences that the withdrawal of consent was carried out.
• Contact form messages — up to 24 months from the last contact.
• E-mail correspondence — up to 24 months from the last contact.
• Vercel Web Analytics statistics — up to 12 months (Vercel's policy), anonymous aggregates.
• Server logs — up to 30 days (Vercel's policy).

5. Recipients of the data

We use the following processors:

• Vercel Inc. (site hosting and Web Analytics) — USA, EU standard contractual clauses.
• Resend Inc. (sending the newsletter and contact-form notifications) — USA, EU standard contractual clauses. Resend keeps the subscriber list and the sending history on EU servers.
• Zoho Corporation (the @idecisioninterface.com mailbox, EU data centre).
• home.pl S.A. (domain registration) — Poland.

We do not pass data to third parties for marketing or sales purposes.

6. Your rights

Under the GDPR you have the right to:

• access your data (Article 15)
• rectification (Article 16)
• erasure — the “right to be forgotten” (Article 17)
• restriction of processing (Article 18)
• data portability (Article 20)
• object to processing (Article 21)
• lodge a complaint with a supervisory authority — in Poland the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warszawa)

To exercise these rights, write to hi@hi-di.cloud.

7. Changes to this policy

This policy may be updated. Every change will be published on this page together with the date it takes effect. Using the site after a change means accepting it.