1. Who we are (Data Controller)
Velox Agency ("Velox", "we", "us", "our") operates the website veloxagency.eu and provides digital marketing services (SEO, Google Ads, Meta Ads).
The data controller responsible for your personal data under the EU General Data Protection Regulation (GDPR) is:
Nijat Talibzade Wąwozowa 18, 02-796 Warszawa, Poland Email: audit@veloxagency.eu
For all privacy and data-protection matters, contact us at: audit@veloxagency.eu
2. What personal data we collect
a) Information you give us through our forms When you submit our contact form or free-diagnostic form, we collect the data you provide, which may include: your name, email address, company name, website URL, marketing budget / ad spend, languages, competitors, marketing goals, and the content of your message.
b) Analytics and usage data (only with your consent) If you consent via our cookie banner, we collect information about how you use our website through third-party analytics tools (see Section 6 and our Cookie Policy). This may include your IP address, device and browser information, pages visited, and interactions.
c) Technical data Our hosting and security infrastructure automatically processes limited technical data (such as IP address) as necessary to deliver and secure the website, on the basis of our legitimate interest in operating a secure service.
We do not intentionally collect special categories of personal data (e.g. health, political, or biometric data).
3. How we use your data and our legal basis
Purpose · Data used · Legal basis (GDPR Art. 6)
- Responding to your enquiry / diagnostic request — Form submission data — Art. 6(1)(b) — steps prior to a contract, and/or Art. 6(1)(f) legitimate interest in responding
- Providing our services if you become a client — Contact and project data — Art. 6(1)(b) — performance of a contract
- Website analytics and marketing measurement — Analytics/cookie data — Art. 6(1)(a) — your consent
- Securing and operating the website — Technical data — Art. 6(1)(f) — legitimate interest
- Complying with legal obligations — As required — Art. 6(1)(c) — legal obligation
We do not use your form data for automated decision-making or profiling.
4. Where your data is stored and who can access it
Form submissions are stored in our own content-management database hosted by Neon (PostgreSQL hosting) in the European Union (Frankfurt, eu-central-1 region). A notification is also sent to our internal email (audit@veloxagency.eu).
Our website and infrastructure is provided by:
- Vercel Inc. — website hosting and content delivery.
- Neon — database hosting (EU region).
- Resend — transactional email delivery for form notifications.
Analytics data (only if you consent) is processed by:
- Google LLC — Google Analytics 4 and Google Ads.
- Meta Platforms, Inc. — Meta Pixel.
These providers act as our data processors (or, for analytics, independent/joint controllers as applicable) and are contractually bound to protect your data. Where providers are outside the EEA, transfers are safeguarded by mechanisms such as Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.
We do not sell your personal data.
5. How long we keep your data
- Form enquiries that do not become clients: 12 months, after which they are deleted.
- Client data: for the duration of our engagement and for
5 yearsafterwards as required by Polish accounting/tax law - Analytics data: retained according to the analytics provider's settings .
6. Cookies and tracking
We use cookies and similar technologies. Non-essential cookies (analytics and marketing) are only set after you give consent via our cookie banner. You can change or withdraw your consent at any time. For full details, see our Cookie Policy.
7. Your rights under GDPR
You have the right to: access, rectify, erase, restrict, or object to our processing of your data; data portability; withdraw consent at any time (where processing is based on consent); and lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych — UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.
To exercise any of these rights, contact us at audit@veloxagency.eu. We will respond within one month.
8. How we protect your data
We use industry-standard security measures including HTTPS encryption, HTTP security headers, access controls, and consent-gated tracking. No method of transmission over the internet is 100% secure, but we take reasonable steps to protect your data.
9. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest version. Material changes will be communicated where appropriate.
10. Contact
For any questions about this Privacy Policy or your data: audit@veloxagency.eu — Nijat Talibzade, Wąwozowa 18, 02-796 Warszawa, Poland