Privacy policy

1. Who is responsible for your information?

The controller is Bartłomiej Mech, trading as BXM MULTIMEDIA APLIKACJE INTERNETOWE BARTŁOMIEJ MECH, ul. Korzystna 7, 03-626 Warszawa, Poland. The business is registered in Poland’s Central Register and Information on Economic Activity (CEIDG), with tax identification number NIP 1132479129 and REGON 142112170.

For privacy enquiries, email bxm@bxm.pl, call +48 537 48 48 44, or write to the address above.

This policy applies to bxmmultimedia.com, operated by our Polish business. BXM.pl and bxmmultimedia.de provide separate notices in their respective languages. Your privacy choice is separate on each domain.

2. What we collect and why

The contact form asks for your name or company name, email address, phone number and message. You may also provide details of your project, required features, schedule, budget, existing website, materials and preferred contact method. The message includes the source page and identifies bxmmultimedia.com as the English-language website.

We use this information to answer your enquiry, discuss your requirements, prepare a proposal and take steps you request before entering into a contract. Form messages are sent to the BXM team at bxm@bxm.pl and b.mech@bxm.pl. Your message is forwarded in the language you wrote it. Sending the form does not subscribe you to a newsletter or create a client account.

Providing information is voluntary. Fields marked with an asterisk are required to use the form. You can contact us by email or phone instead. Please do not include passwords, payment details or sensitive personal information unless it is necessary for your enquiry.

3. Legal grounds

We process service enquiries and requested pre-contractual steps under Article 6(1)(b) of the GDPR. Other correspondence, website security and the establishment, exercise or defence of legal claims are based on our legitimate interests under Article 6(1)(f). Where processing is required by law, including accounting obligations, Article 6(1)(c) applies.

Remembering your theme preference is optional and requires your consent. Visiting the website, closing the privacy notice or sending an enquiry does not give consent to marketing.

If you contact us as an employee or representative of a business, correspondence is based on our legitimate interest in business communication under Article 6(1)(f) GDPR. Article 6(1)(b) applies when the requested steps relate to a contract with you personally.

4. Security and retention

The form uses HTTPS, session-based verification, input validation, an anti-bot field, sending limits and duplicate checks. A shared technical record of sending attempts helps protect the English and German websites. It contains timestamps, status information and keyed cryptographic hashes of the IP address, email address and message, rather than their readable contents. Entries older than 24 hours are removed the next time the record is used.

If sending fails, your entries remain visible in the returned form. After successful handover to the mail service, refreshing the page does not send the message again. The short session confirmation expires after five minutes. The form does not send automatic replies to arbitrary visitor-supplied addresses.

We retain correspondence for as long as necessary to deal with your enquiry and our working relationship, and subsequently where required to meet legal obligations or protect legal claims within the applicable statutory periods. Access to mailboxes is restricted to authorised people.

5. Service providers and international processing

Your information is handled by the BXM team responsible for your enquiry. Where necessary, we use hosting, email, security and infrastructure providers, including OVHcloud and Cloudflare. Information may also be provided to authorities where required by law. We do not sell your contact information.

International infrastructure may involve processing outside the European Economic Area. Such processing requires an applicable GDPR transfer safeguard, such as an adequacy decision or standard contractual clauses. You can request information about the relevant safeguards at bxm@bxm.pl.

6. Cookies and browser preferences

An essential session cookie helps protect the contact form and prevent repeat submissions. Security infrastructure may also use technical cookies to detect abuse. The server processes connection information, including IP addresses, request times and requested pages, for operation, security and website statistics.

The current browser tab may remember animation and guide choices, such as pausing movement or hiding a tip. These session preferences are not used for advertising.

If you choose “Remember my theme”, we store your light or dark theme preference in localStorage. “Essential only” lets you change the theme without retaining that preference for later visits. Your privacy choice is remembered for 180 days on this domain. You can change it at any time using “Privacy settings” at the bottom of the page. Withdrawing consent removes the saved theme preference and does not affect earlier lawful processing.

You can also delete website data or restrict cookies in your browser. Blocking the essential session may prevent the contact form from working. This website version does not install advertising pixels or Google Analytics.

Storage on, and access to information on, your device are governed by Article 399 of the Polish Electronic Communications Law, implementing the European ePrivacy rules. Storage strictly necessary for transmission or a service you expressly request is exempt from consent. Optional theme storage starts only after you choose to allow it.

7. External links and applications

Links to maps, reviews, social networks and other websites open separate services with their own privacy policies. Following a link sends the information needed to open that service. Email links open your chosen email app.

The careers enquiry tool prepares a message locally in your browser. You send it, together with any CV you choose to attach, through your own email app. We use the information to respond to and assess that specific application. Any further recruitment process, or consideration for future opportunities, is addressed separately.

The contact page includes an OpenStreetMap map. When the map enters the visible area of the page, your browser downloads map tiles from tile.openstreetmap.org. The OpenStreetMap Foundation then receives connection data, including your IP address and browser information. The purpose is to display our locations; our legal basis is a legitimate interest in making it easier to contact us under Article 6(1)(f) GDPR. See the provider’s privacy policy.

8. Your rights

You may request access to and a copy of your personal data, correction, deletion or restriction of processing. Where the GDPR provides for them, you also have rights to data portability, to object to processing based on legitimate interests, and to withdraw consent.

The rights that apply depend on the purpose and legal grounds for processing. We may ask for information needed to verify your identity before acting on a request. Contact bxm@bxm.pl. You may complain to the Polish Personal Data Protection Office (UODO) or another competent supervisory authority.

We do not use contact form information to make solely automated decisions that produce legal or similarly significant effects on you. Automated anti-spam checks protect correspondence.

We respond to rights requests without undue delay, normally within one month of receipt. Where the GDPR permits, this may be extended by two further months; we will explain the extension and its reasons within the first month. You may object to processing based on legitimate interests on grounds relating to your particular situation.

9. Changes to this policy

We update this policy when the website’s operation or applicable requirements change. The revision date appears at the top. Each language domain provides its own privacy information and identifies the source of its contact messages.