Privacy policy

1Controller and contact

The controller of the personal data described in this policy is Visera Prosta Spółka Akcyjna (a Polish simple joint-stock company) with its registered office in Gdańsk, Poland, entered in the National Court Register (KRS) under number 0001045662, tax ID (NIP) 5842837497, REGON 525779362 (“Visera”, “we”). Visera is the maker of Obsigen and the owner of obsigen.com.

For anything related to personal data, write to contact@obsigen.com. We have not appointed a data protection officer, as we are not required to.

2Scope

This policy covers the situations in which we decide on the purposes and means of processing: visits to the site, forms and correspondence, customer relations and our social media profiles.

It does not cover data that customers enter into the Obsigen application - documents, files and conversations. We process that data only on the customer’s instructions, as a processor, under a data processing agreement (DPA). If your data reached Obsigen because one of our customers entered it - for example your employer or a business partner - that customer is the controller, and requests about that data should be addressed to them.

3Visiting the site

The site uses no cookies, stores nothing in the browser, uses no tracking pixels and loads no scripts, fonts or images from other companies’ servers. Details: Privacy settings.

Like every web server, ours records technical data about requests in a log: IP address, date and time, the address of the page requested, the referring page and browser information. We use it to keep the site running and secure, for example to detect an attack, and for the visit statistics described below. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). The log is kept for no longer than 90 days.

Visit statistics are calculated with Matomo from the server log only - the pages contain no counter, script or pixel. We import the log data into Matomo installed on our own infrastructure, with IP anonymisation. We analyse the results in aggregate form - page views of individual pages - without profiling and without combining them with other data. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR): knowing which content is read. Statistics data is kept for no longer than 25 months. Description: Privacy settings.

4Forms and correspondence

When you send a form - a demo request or a message from the contact page - or write to us by e-mail, we process the data you provide: name, e-mail address, company name, the message and, if you provide them, the deployment model, how you heard about Obsigen and any other data contained in the message.

The form does not save your submission in a database. The server sends it by e-mail to the team mailbox and records in its log only the form type, the topic and whether sending succeeded - no personal data. To protect the form against abuse, the server briefly records a hash of the sender’s IP address and the time of sending; records older than 60 seconds are deleted automatically.

Providing data is voluntary, but without an e-mail address we cannot reply. You can withdraw your consent at any time; this does not affect the lawfulness of processing before the withdrawal.

5Customers

If we sign a contract, we process the data of people who represent the customer or contact us on its behalf: name, business e-mail address and phone number, and job title. The purpose is to conclude and perform the contract, manage the account and provide support. The legal basis is the contract (Art. 6(1)(b) GDPR) and, for people acting on the customer’s behalf, our legitimate interest in performing it (point (f)). This data is kept for the term of the contract and the limitation period for claims.

Accounting records, such as invoices, are kept for the period required by Polish tax and accounting law - as a rule 5 years from the end of the year in which the tax payment deadline expired (Art. 6(1)(c) GDPR).

6Social media

We run Obsigen profiles on LinkedIn and Facebook. The links in the footer are plain links - the site loads no plugins or scripts from these services. When you visit our profiles, your data is processed primarily by their operators, LinkedIn Ireland Unlimited Company and Meta Platforms Ireland Limited, under their own privacy policies. For profile statistics we are joint controllers with them. We use messages and comments you leave for us there to reply (Art. 6(1)(f) GDPR).

7Recipients

Data from the site and correspondence may be received only by entities that help us run the business, under contracts with us: the site’s hosting provider, the e-mail provider, the accounting firm and legal advisers - to the extent their tasks require - and public authorities where the law requires it. We do not sell data and do not pass it to advertising networks.

8Transfers outside the EEA

The site and its forms run on a server in the European Economic Area. If any of our providers processes data outside the EEA, we rely on a European Commission adequacy decision or on standard contractual clauses approved by the Commission.

9Your rights

You have the right to:

• access your data and receive a copy;
• have your data rectified or erased, or its processing restricted;
• data portability for data provided to us on the basis of consent or a contract;
• object to processing based on our legitimate interest;
• withdraw your consent at any time.

Send requests to contact@obsigen.com. We reply within one month; for complex requests this may be extended by two further months - we will let you know if so. You also have the right to lodge a complaint with the President of the Personal Data Protection Office in Poland or with the supervisory authority in the EU country where you live or work.

We do not make decisions about you based solely on automated processing and we do not profile you.

10Changes

This is version 1.1 of 14 October 2026. Change from version 1.0 of 9 October 2026: a description of visit statistics (Matomo, based on the server log) added in section 3. When the policy changes, we will publish the new version on this page with its date and a description of the changes. In case of discrepancies, the Polish version prevails.