Privacy Policy
1. Who we are
Marcin Daniun Automatyka (brand: Mardan Automatyka), ul. Suwalska 52, 19-300 Ełk, Poland, VAT ID PL8481837200, is the controller of the personal data described here. Contact: contact@palletdesigner.com. We have no data protection officer.
2. What we do with your data
| Activity | Data | Why and on what basis | How long |
|---|---|---|---|
| Visiting the website | IP address, time, page, browser type | delivering and securing the site (legitimate interest); the website is hosted by Cloudflare, requests to our own server (forms, downloads, licence portal) are logged by us | our server log: 90 days |
| Visit statistics | aggregated, anonymised page views, referrers and clicks from a cookie-free tool on our own server; no identifier of you is kept | knowing how the site is used (legitimate interest) | raw events: 24 months, then aggregates only |
| Contact and quote forms | name, company, e-mail, phone, message | answering you, preparing a quote (steps before a contract, legitimate interest) | 3 years after last contact |
| Demo account | company, name, e-mail; in the demo: IP address, reverse DNS, browser, every request to the demo server and the names of documents you create | giving you the demo and keeping it safe and fair (contract, legitimate interest) | account: 12 months after expiry; demo log: 90 days |
| Trial download | e-mail, company, country, licence key issued | delivering and limiting the trial (contract) | 12 months |
| Shop | name, company, address, e-mail, VAT number, order, payment status (we do not receive card numbers) | fulfilling your order, issuing the licence, accounting (contract, legal obligation) | accounting data: 5 years after the end of the tax year; licence data: for the licence plus 3 years |
| Licence verification | licence key, hardware fingerprint, computer name, operating system version, software version, IP address, time | checking that the licence is valid and used on the agreed number of computers (contract) | for the licence plus 12 months; verification logs at the licence service: 30 days |
| Licence portal | e-mail, licence and computer list, transfers; login with a one-time link sent by e-mail | self-service management of your licences (contract) | for the licence plus 12 months |
| Support | e-mails, phone notes, files you send us | helping you (contract, legitimate interest) | 3 years after the case |
| Business e-mails to companies | name, job title, business e-mail, company, country, what we sent and whether you replied; taken from company websites, trade directories, fairs and professional networks | telling companies in automation and packaging about our software (legitimate interest, see section 3) | 12 months after the last message without reply; objections: kept as a “do not contact” entry indefinitely |
| Newsletter | e-mail, company, your consent | sending news you asked for (consent) | until you unsubscribe |
| AI Add-on | the request text and files you submit in the Software and the product, pallet and layer data needed for the task | providing the AI function (contract); details in the AI Add-on Data Terms | we keep counts and timestamps, not content; the provider deletes content within 30 days |
We do not sell data and we do not profile you. We do not make automated decisions with legal effect.
3. Business e-mails and your right to object
We write to people in companies that build or run palletising machines, using business contact data published for that purpose. Our legitimate interest is to offer professional software to the companies that can use it. We send a short message first, we keep your data only for this purpose, and we stop at once when you object. Object by replying “no”, by the unsubscribe link in the message or by writing to contact@palletdesigner.com. Where the law of your country requires consent before such a message, we ask for it in a single message or do not write at all.
4. Who receives your data
| Recipient | Role | Where | Safeguard |
|---|---|---|---|
| Paddle.com Market Ltd (UK) and Paddle.com Inc. (USA): shop, payments, invoices, refunds | independent controller | UK, USA | UK adequacy decision; standard contractual clauses (Paddle’s policy: https://www.paddle.com/legal/privacy) |
| Keygen LLC: licence service | processor | USA | standard contractual clauses |
| Anthropic Ireland Ltd: language model for the AI Add-on (standard variant) | processor | processing in the USA | standard contractual clauses; no training on your data |
| cyber_Folks S.A. (Poland): hosting of our server: forms, demo, licence portal, statistics and backend | processor | EEA | data processing agreement |
| Cloudflare, Inc.: hosting of the website, file downloads (Cloudflare R2, EU jurisdiction), DNS and network protection | processor | global; downloads stored in the EU | EU-US Data Privacy Framework, standard contractual clauses |
| Google Ireland Ltd (Google Workspace): e-mail, spreadsheets used for contact and lead lists | processor | EU and USA | Google Cloud Data Processing Addendum, Data Privacy Framework |
| EmailLabs (Vercom S.A., Poland): sending of licence, demo and support e-mails | processor | EEA | data processing agreement |
| Woodpecker (Poland): sending of business e-mails and replies tracking | processor | EU (France) | data processing addendum |
| GetResponse S.A. (Poland): newsletter | processor | EEA | data processing agreement |
| Accountant, lawyers, authorities | independent controllers | Poland | legal obligation |
The exact list of tools in use at a given time is available on request.
5. Transfers outside the European Economic Area
Some recipients process data in the United Kingdom (adequacy decision) and the United States (standard contractual clauses approved by the European Commission; where the recipient is certified, also the EU-US Data Privacy Framework). You can ask us for a copy of the clauses.
6. Cookies
See the Cookie Policy. Today the site sets no analytics or advertising cookies.
7. Your rights
You can ask for access to your data, correction, deletion, restriction, a copy in a portable format, and you can object to processing based on legitimate interest, at any time for direct marketing. Write to contact@palletdesigner.com. You can complain to the Polish supervisory authority (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl) or to the authority of your country.
8. Security
Encrypted connections, access limited to the owner and the processors named above, backups, logs kept short. The Software does not send your project data to us; the AI Add-on sends only what the AI Add-on Data Terms describe.
9. Changes
We update this policy when tools or activities change. The date at the top shows the current version; material changes are announced on the website and, for customers, by e-mail.