Privacy Policy
Effective Date: September 1, 2026 · Applies to all visitors of BrightSoftwareCore digital properties.
1.1 Data Controller
The data controller responsible for personal data collected through this website and related service channels is BrightSoftwareCore, registered at ul. Floriańska 15, 31-019 Kraków, Poland. All inquiries regarding data processing should be directed to [email protected].
1.2 Data We Collect
When you submit a project inquiry form or engage our services, we collect the following categories of personal data: full name, business email address, phone number, company name, project description details, and any information voluntarily provided in correspondence. We do not collect payment card data directly — all financial transactions are processed through PCI-DSS compliant third-party processors.
1.3 Purpose of Processing
Personal data is processed exclusively for the following purposes: responding to project inquiries and providing technical proposals, executing contracted software engineering services, maintaining client communication throughout active engagements, fulfilling statutory tax and accounting obligations under Polish commercial law, and improving the quality of our digital service delivery.
1.4 Legal Basis (GDPR)
Our processing activities are grounded in the following legal bases under Regulation (EU) 2016/679: Article 6(1)(b) — performance of a contract or pre-contractual measures taken at your request; Article 6(1)(c) — compliance with a legal obligation; and Article 6(1)(f) — legitimate interests in maintaining accurate business records and preventing fraud.
1.5 Data Retention
Personal data submitted through contact forms is retained for a period of 24 months following the last meaningful interaction, after which it is securely anonymized or deleted. Project-related documentation is retained for 5 years in compliance with Polish accounting regulations. Data processed under consent may be withdrawn at any time by contacting our data protection officer.
1.6 Data Sharing & Third Parties
BrightSoftwareCore does not sell, rent, or trade personal information. Data may be shared with the following categories of processors only: cloud hosting providers operating within the European Economic Area, email delivery services used for transactional correspondence, and payment processors for invoicing purposes. All third-party processors are bound by Data Processing Agreements (DPAs) ensuring GDPR compliance.
1.7 International Transfers
All personal data is stored on servers located within the European Economic Area. Should any transfer outside the EEA become necessary, we will ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.
1.8 Your Rights
Under the GDPR, you have the right to: access your personal data, rectify inaccurate data, request erasure ("right to be forgotten"), restrict processing, data portability, and object to processing based on legitimate interests. To exercise any of these rights, contact [email protected]. You also have the right to lodge a complaint with the Polish supervisory authority (Urząd Ochrony Danych Osobowych).