Legal documents
A clear explanation of what data we process, why, and what rights you have.
Last updated: July 2026
The controller of personal data processed in connection with the use of this website and contact with JR Hermes is Iwona Szponar, operating a sole proprietorship (JR Hermes is the brand under which the business operates, not its registered name). Tax ID (NIP): 557-161-24-95, REGON: 362162127, address: ul. Marszałka Piłsudskiego 10, 88-300 Mogilno, Poland. Contact: office@jrhermes.com, tel. +48 609 890 170.
We only process data you provide voluntarily — most often through the contact form, an email, a newsletter sign-up, or during a phone call. This may include: full name, company name, tax ID, email address, phone number, industry, approximate annual revenue, information about the systems/tools you use, selected reasons for reaching out, and the content of your inquiry. All of these fields, except name and email, are optional and are used solely to help us prepare a more relevant response faster.
The contact form sends the submitted data to a script running on our server, which automatically forwards it by email to us and sends a confirmation to your email address. Data from the form is not stored in any database — the server uses it only to send these two emails and does not retain it.
For security reasons (protection against automated spam), the script temporarily stores a hash of the sender's IP address in a file on the server, to limit the number of submissions from a single source in a short time (up to a few submissions per hour). The entry is automatically discarded and overwritten after this time and is not combined with any other personal data. The legal basis here is our legitimate interest — protecting the form against misuse (Article 6(1)(f) GDPR).
Data from inquiries is kept for as long as needed to respond and for any further collaboration, and afterward for a period required by law. Accounting and tax documentation related to services provided is kept for 5 years, counted from the end of the tax year in which the tax obligation arose (in accordance with the Accounting Act and the Tax Ordinance Act).
Data may be shared only to the extent necessary to deliver the service — e.g. with accountants, lawyers or tax advisors we work with, always bound by a non-disclosure agreement (NDA). We do not sell or share data with third parties for marketing purposes.
You have the right to: access your data, rectify it, erase it, restrict its processing, data portability, and to object to processing. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland. To exercise your rights, write to office@jrhermes.com.
This website does not use cookies for analytics, statistics, or marketing purposes. We do not use Google Analytics or similar tracking tools.
The website stores in your browser (via localStorage, technically not a cookie but functionally similar) exactly two pieces of technical information: (1) that you closed the Google Fonts notice bar, so it isn't shown again on every visit, and (2) that your browser's language preference has already been checked once, so we can suggest the right language version of the site automatically. Neither piece of information is ever sent to our server or used for profiling — it stays only in your browser, and you can remove it at any time by clearing your browsing data.
The connection to this website is encrypted (HTTPS). Access to contact-form data and to the mailbox is limited to authorized people, who are bound by confidentiality. We use reasonable technical and organizational measures (including the anti-spam mechanisms and submission-rate limit described above) to protect data against loss, unauthorized access, alteration, or disclosure.
The website and the office@jrhermes.com mailbox are hosted on servers operated by OVH (OVH Groupe SAS, France / OVH Sp. z o.o. in Poland). Data submitted through the contact form and the content of email correspondence physically pass through OVH's infrastructure as our hosting provider — in this respect, OVH acts as a processor handling data on our behalf, under its own security policies and GDPR compliance as a provider based in the European Union. This relationship is governed by a Data Processing Agreement with OVH under Article 28 GDPR, which forms an integral part of the hosting service agreement.
This website uses Google Fonts, loaded directly from Google's servers (fonts.googleapis.com, fonts.gstatic.com). This causes your browser's IP address to be sent to Google when the page loads — regardless of whether you have a Google account. This is the only external connection (besides OVH) that this website makes.
This website is aimed at business owners and company managers (B2B services) and is not intended for individuals under the age of 16. We do not knowingly collect personal data from minors. If this should happen without a legal guardian's knowledge, please contact office@jrhermes.com — the data will be removed promptly.
We reserve the right to update this policy, e.g. due to changes in the law or the website's functionality. The current version is always available at this address.
