Privacy Policy

GDPR-compliant privacy notice.

Last updated: September 28, 2026

This Privacy Policy explains how Unvertical sp. z o.o. ("Unvertical", “we”, “us”, “our”) processes personal data in connection with this website (unvertical.com), in accordance with Regulation (EU) 2016/679 (the “GDPR”) and the Polish Personal Data Protection Act of 10 May 2018.

1. Data controller

The data controller for personal data processed in connection with this website is:

Unvertical Spółka z Ograniczoną Odpowiedzialnością (Unvertical Sp. z o.o.)
ul. Hetmańska 25, 15-727 Białystok, Poland
Entered in the Register of Entrepreneurs of the National Court Register (Krajowy Rejestr Sądowy) kept by the District Court in Białystok, XII Commercial Division of the National Court Register, under KRS number 0001249880
NIP 5423516506 · REGON 545082020 · Share capital: PLN 5,000
privacy@unvertical.com

For any matter concerning your personal data — including the exercise of any of your rights described below — please use the email address above.

2. What personal data we collect

We only collect personal data that you voluntarily submit to us through the forms on this website.

The contact form collects:

  • your name;
  • your email address;
  • the content of your message.

The quote request form collects:

  • your first and last name;
  • your email address;
  • your country;
  • your company or organization;
  • your job title (optional);
  • technical details of your planned deployment — such as the subscription plan you are interested in, your Linux distribution, the number of nodes, storage capacity, and a description of your environment — and any additional details you choose to provide.

The NVMC early access application form collects:

  • your first and last name;
  • your email address;
  • your country;
  • your company or organization;
  • your job title (optional);
  • technical details of your environment — such as your storage backend, Linux distribution, number of compute nodes, memory configuration, dataset size, timeline, and a description of your environment — and what you would like to achieve.

Apart from these forms, we ask you for nothing. To measure website traffic we use our own self-hosted, cookie-free analytics, described in section 5; it does not identify you and does not store your IP address. To protect the forms from spam, the form pages use Cloudflare Turnstile, also described in section 5. We do not use cookies, advertising trackers, retargeting pixels, or social-media trackers.

We process the data you submit through the forms on this website solely to read your inquiry, quote request, or early access application, evaluate it, and respond to it — including, for a quote request, preparing and sending you a quote, and, for an early access application, assessing whether your environment is a fit for the program.

The legal basis is:

  • Article 6(1)(b) GDPR — processing necessary to take steps at your request prior to entering into a contract — for quote requests, early access applications, and when your inquiry concerns our products or services; or
  • Article 6(1)(f) GDPR — our legitimate interest in responding to correspondence addressed to us — for any other inquiry.

We do not use your data for marketing, profiling, or any purpose other than handling your inquiry, quote request, or early access application.

The separate legal basis for our website analytics is stated in section 5.

4. Form processor — Formward

Form submissions are routed through Formward, a service provided by EGF Fastighetsservice AB (Sweden), which acts as our data processor. Formward receives the data you submit through the forms, stores it on our behalf, and forwards it to us by email.

Formward stores submissions on servers located in Sweden and may retain them in accordance with its own terms and privacy policy: https://formward.eu/privacy.

Form submissions are processed and stored within the European Economic Area; we do not use Formward features that would transfer your submission outside it.

5. Other technical processing

  • Hosting. This website is a static site hosted on statichost.eu, a service provided by Variable Object Assignment (Sweden), which acts as our data processor. When your browser requests a page, statichost.eu necessarily receives your IP address in order to deliver it; it does not store personal data related to website visits. To serve the site, statichost.eu relies on data center infrastructure from Hetzner Online GmbH (Germany) and on the content delivery network of BunnyWay d.o.o. (Slovenia). The data does not leave the European Economic Area. statichost.eu’s privacy policy is available at https://www.statichost.eu/privacy/.

  • Analytics. To understand which parts of our website are used, we run our own installation of GoatCounter, an open-source, privacy-focused analytics tool, on a server we control at analytics.cloud.unvertical.com. No analytics company or advertising network is involved, and we share this data with no one.

    When you open a page, a small script sends us the address of that page (including any query string), its title, the address of the page that referred you if you arrived through a link, your screen width, and whether the request appears automated. Your IP address and User-Agent header necessarily reach our server, as they do on any web request, but neither is ever written to disk. They are used only to look up a randomly generated identifier, which groups together the pages seen during a single visit so that we can distinguish a returning visit from a new one. The table connecting your IP address and browser to that random identifier is held in our server’s memory alone and is discarded after at most eight hours, after which the stored statistics can no longer be connected to you by us or by anyone else. From the IP address we derive only a country, and from the User-Agent only a coarse browser and operating-system name; neither the address nor the full header is retained. Nothing is written to your device — no cookies, no localStorage, no tracker ID — and we do not track you across websites, build profiles, or seek to identify individual visitors.

    This analytics installation runs on infrastructure rented from netcup GmbH (Germany), which acts as our data processor. The data does not leave the European Economic Area.

    The legal basis is Article 6(1)(f) GDPR — our legitimate interest in maintaining and improving this website on the basis of aggregate usage statistics. Because the measurement neither stores information on nor reads information from your device, it does not require consent under Article 5(3) of the ePrivacy Directive as implemented in Polish law. You may object at any time under Article 21 GDPR (see section 8), and you can prevent the collection entirely by blocking analytics.cloud.unvertical.com in your browser or with a content blocker.

  • Spam protection. The contact, quote request, and NVMC early access form pages load Cloudflare Turnstile, a bot-detection service provided by Cloudflare, Inc. (United States), to keep automated spam out of our inbox. When you open one of these pages, Turnstile runs a short, non-interactive check in your browser and sends Cloudflare technical signals — your IP address, TLS fingerprint, User-Agent header, and the identity of this website. The result is attached to your form submission as a one-time token, which our form processor Formward verifies with Cloudflare before accepting the submission. Turnstile does not receive the contents of the form. It is not loaded on any other page of this website.

    Cloudflare processes these signals on our behalf, as our processor, to tell humans from bots, and as an independent controller to improve its bot detection. Its Turnstile privacy addendum is available at https://www.cloudflare.com/turnstile-privacy-policy/. Because Cloudflare is established in the United States, this involves a transfer of that technical data outside the European Economic Area, protected by the EU–U.S. Data Privacy Framework and/or by the Standard Contractual Clauses adopted by the European Commission, as applicable.

    The legal basis is Article 6(1)(f) GDPR — our legitimate interest in protecting our forms and inbox from automated abuse. The check is strictly necessary to provide the form submission you request, and it is used for no other purpose.

  • Web fonts. This site loads typefaces from the Google Fonts service operated by Google Ireland Limited. When your browser loads a font, it connects to Google’s font CDN, which receives your IP address. Google does not set cookies for Google Fonts requests. Google’s privacy notice is available at https://policies.google.com/privacy.

We do not embed advertising, social-media trackers, third-party analytics, comment widgets, or any other third-party scripts. The only scripts this website loads are our own analytics script and, on the form pages only, the Cloudflare Turnstile script described above.

6. How long we keep your data

We retain form submissions (contact messages, quote requests, and early access applications) for up to 24 months from the date of submission, after which they are deleted from our systems. If a submission leads to an ongoing business relationship, related correspondence may be retained for the duration of that relationship and for any further period required by Polish accounting and commercial law.

We keep the website statistics described in section 5 for as long as we operate this website, and do not delete them on a schedule. They contain no IP address and no User-Agent string. The pages seen during a single visit share a randomly generated identifier, but the means of connecting that identifier to any person exists only in our server’s memory and is discarded within eight hours; from that point the statistics are anonymous, are no longer personal data, and the storage limitation in Article 5(1)(e) GDPR does not apply to them.

7. Recipients

We do not sell, rent, or share your personal data with third parties for their own purposes. The only recipients of your data are:

  • members of our team who handle inquiries;
  • our processors: Formward (form delivery) and the email service we use to deliver responses;
  • Variable Object Assignment (Sweden), operator of statichost.eu, which hosts this website and handles the technical connection data described in section 5 as our processor;
  • Cloudflare, Inc. (United States), which provides the spam protection on our form pages described in section 5, as our processor and, for improving its bot detection, as an independent controller; and
  • netcup GmbH (Germany), which provides the server infrastructure on which our own analytics installation runs, as our processor.

8. Your rights under the GDPR

You have the right to:

  • access the personal data we hold about you (Art. 15 GDPR);
  • have inaccurate or incomplete data rectified (Art. 16);
  • have your data erased — the “right to be forgotten” (Art. 17);
  • restrict processing (Art. 18);
  • object to processing based on our legitimate interests (Art. 21);
  • request data portability (Art. 20), where applicable;
  • withdraw consent at any time, where consent is the legal basis (Art. 7(3)), without affecting the lawfulness of processing carried out before withdrawal;
  • lodge a complaint with a supervisory authority (Art. 77). In Poland, this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, “UODO”), https://uodo.gov.pl/.

To exercise any of these rights, write to privacy@unvertical.com. We will respond within one month of receiving your request, as required by Article 12(3) GDPR.

9. Automated decision-making

We do not carry out automated decision-making, including profiling, within the meaning of Article 22 GDPR.

10. Children

This website addresses a business audience. We do not knowingly collect personal data from children under the age of 16. If you believe a minor has submitted personal data through this site, please contact us and we will delete it.

11. Changes to this policy

We may update this notice from time to time. The “Last updated” date at the top of this page reflects the most recent change. Where a material change affects data we have already collected, we will communicate it separately where feasible.