HEFT7
Privacy policy
This privacy policy explains how personal data is processed when you use the HEFT7 website and contact us.
1. Data controller
The controller of the personal data processed in connection with the use of this website is:
MIRUSSOUND sp. z o.o.ul. Okrężna 21
62-080 Sierosław
Poland
Brand used on the website: HEFT7
KRS: 0001229666 · NIP: 7812107619 · REGON: 544279943
Contact on personal data protection matters: [email protected]
2. Hosting and technical data
When you visit the website, the hosting provider processes the technical data necessary to display it in your browser. This may include your IP address, the date and time of access, the page requested, and information about your browser and operating system.
The website is delivered through Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (“Cloudflare”). Cloudflare uses a global network of servers, so the technical data described above may also be processed outside the European Economic Area, including in the United States. Cloudflare is certified under the EU-U.S. Data Privacy Framework; standard contractual clauses are applied in addition. Cloudflare processes this data on our behalf as a processor under a data processing agreement.
Technical data is not used to identify individual users and is retained only for as long as necessary for the secure operation of the website, in accordance with Cloudflare’s data retention rules. More information: cloudflare.com/privacypolicy.
Legal basis: Article 6(1)(f) GDPR — our legitimate interest in providing the website securely and reliably.
3. Fonts
The fonts used on the website (Cormorant Garamond and Inter) are served directly from the website’s own server. When they load, your browser does not connect to the servers of external font providers, and no data is passed to third parties.
4. Forms, briefing requests and email
When you click “Send enquiry”, the data entered in the contact form (full name, company, email address, position, selected topic and description of your situation) is sent to HubSpot, the system we use to manage enquiries and contacts. When you request an Executive Briefing, we send your first name, company, email address and the name of the selected briefing in the same way. Data is sent only when you click the button. The website does not load HubSpot tracking code or set HubSpot cookies.
HubSpot provides this service as a processor under a data processing agreement. The contracting party for European customers is HubSpot Ireland Limited, 1 Sir John Rogerson’s Quay, Dublin 2, Ireland. Our HubSpot account is hosted in HubSpot’s European data centre. The parent company HubSpot, Inc. (USA) and its sub-processors may access data to the extent necessary to provide the service; HubSpot, Inc. is certified under the EU-U.S. Data Privacy Framework, and standard contractual clauses also apply. More information: legal.hubspot.com/privacy-policy.
If the form cannot be sent, the website opens your email program with a ready-made message. In that case, the data only reaches us once you send that message yourself.
We process the data contained in your enquiry in order to reply and, where appropriate, to prepare or carry out a collaboration.
Legal basis: Article 6(1)(b) GDPR (steps prior to entering into a contract) and Article 6(1)(f) GDPR (our legitimate interest in responding to enquiries).
Email service provider through which we receive enquiries and submission notifications: Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland (Google Workspace), acting as a processor. Google LLC is certified under the EU-U.S. Data Privacy Framework.
Retention period: if an enquiry does not lead to a collaboration, we delete it no later than 12 months after the last contact. If a collaboration is established, we keep the correspondence for its duration and thereafter for the period required by law.
5. Cookies and similar technologies
The website does not use analytics, tracking or marketing tools and does not store information in the browser’s local storage.
To protect the website against harmful traffic and automated attacks, Cloudflare may set strictly necessary security cookies, e.g. __cf_bm (bot protection, expires after 30 minutes of inactivity) or cf_clearance (confirmation that a security check has been passed). They are necessary for the secure operation of the website and do not require your consent (Article 6(1)(f) GDPR). They are not used for analytics or marketing purposes.
6. Recipients of data
Personal data may be disclosed only for the purposes described above and only to the following categories of recipients: Cloudflare, Inc. (hosting and delivery of the website), HubSpot Ireland Limited (management of enquiries and contacts) and Google Cloud EMEA Limited (email). Entities acting as processors process data on our behalf under a data processing agreement.
7. Your rights
Under the GDPR you have the right to:
- access your data (Article 15 GDPR),
- rectify your data (Article 16 GDPR),
- erase your data (Article 17 GDPR),
- restrict processing (Article 18 GDPR),
- data portability (Article 20 GDPR),
- object to processing based on Article 6(1)(f) GDPR (Article 21 GDPR).
To exercise your rights, contact us at: [email protected].
You also have the right to lodge a complaint with a supervisory authority, in particular the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.
8. Automated decision-making
We do not use automated decision-making or profiling.
9. Changes to this privacy policy
We may update this policy if the website’s functionality or legal requirements change. The current version is always available on this page.