Back to Home

Privacy Policy

Last updated: March 31, 2026

1. Data Controller

The data controller responsible for your personal data is:

Tech Definition Kamil Kwiatkowski

Gabrieli Zapolskiej 45a/33, 25-435 Kielce, Poland

NIP: 6551976852

Email: privacy@techdefinition.io

This Privacy Policy applies to the website techdefinition.io ("Website"). For the Tala mobile application, please refer to the separate privacy policy available at tala.baby.

2. What Data We Collect

a) Data you provide voluntarily:

• Contact form: name, email address, project type, and message content.

b) Data collected automatically (only with your consent):

• Analytics data: IP address (anonymized), browser type, device type, operating system, pages visited, time spent on pages — collected via Google Analytics.
• Cookie preferences: your cookie consent choice, stored locally on your device.

We do not collect sensitive personal data (health data, biometric data, etc.) through this Website.

3. Legal Basis for Processing (Art. 6 GDPR)

We process your data on the following legal bases:

• Consent (Art. 6(1)(a)) — for analytics cookies (Google Analytics). You can withdraw consent at any time by clearing your cookies or declining via the cookie banner.
• Legitimate interest (Art. 6(1)(f)) — for responding to your contact form inquiries. Our legitimate interest is to communicate with potential partners and users who reach out to us.
• Legal obligation (Art. 6(1)(c)) — where required to comply with applicable laws (e.g., tax or accounting obligations).

4. How We Use Your Data

• To respond to inquiries submitted through the contact form.
• To analyze website traffic and improve user experience (with your consent).
• To comply with legal obligations.

5. Data Sharing and Processors

We do not sell, rent, or trade your personal data. We share data only with the following trusted service providers (Data Processors) who act on our behalf:

• Hosting: Vercel Inc. — website hosting and delivery.
• Analytics: Google LLC (Google Analytics) — website usage analytics, only when you consent to analytics cookies.
• Email: SMTP provider — for delivering contact form messages.

Each processor is bound by a Data Processing Agreement (DPA) that meets the requirements of Art. 28 GDPR.

6. Data Retention

• Contact form data: retained for up to 3 years from the date of your last inquiry, then deleted.
• Analytics data: retained for 14 months (Google Analytics default for anonymized data), then automatically deleted.
• Cookie consent preferences: stored locally on your device until you clear your browser data.

7. International Data Transfers

Some of our processors (Vercel, Google) may transfer data outside the European Economic Area (EEA). In such cases, transfers are protected by:

• Standard Contractual Clauses (SCCs) approved by the European Commission, or
• The EU-US Data Privacy Framework, where applicable.

8. Your Rights Under GDPR and U.S. State Privacy Laws

A. European Economic Area (GDPR)

You have the following rights regarding your personal data:

• Right of access (Art. 15) — request a copy of the data we hold about you.
• Right to rectification (Art. 16) — correct inaccurate or incomplete data.
• Right to erasure (Art. 17) — request deletion of your data ("right to be forgotten").
• Right to restriction (Art. 18) — request that we limit the processing of your data.
• Right to data portability (Art. 20) — receive your data in a structured, machine-readable format.
• Right to object (Art. 21) — object to processing based on legitimate interest.
• Right to withdraw consent — at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact us at privacy@techdefinition.io. We will respond within 30 days.

B. California Residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with additional rights regarding your personal information:

• Right to Know — You have the right to request that we disclose what personal information we collect, use, disclose, and sell about you.
• Right to Delete — You have the right to request the deletion of your personal information, subject to certain exceptions.
• Right to Correct — You have the right to request the correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing — We do not sell or share your personal information for cross-context behavioral advertising. No opt-out is required.
• Right to Non-Discrimination — We will not discriminate against you for exercising any of your CCPA/CPRA rights.

Categories of personal information collected: Identifiers (name, email), Internet activity (analytics data via Google Analytics with consent). We do not collect sensitive personal information as defined by CPRA.

To exercise your rights, contact us at privacy@techdefinition.io. We will verify your identity and respond within 45 days.

C. Other U.S. States

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and other states with comprehensive privacy laws have similar rights to access, delete, and correct their personal data. We do not sell personal data or engage in targeted advertising. To exercise your rights under any applicable state law, contact us at privacy@techdefinition.io.

9. Right to Lodge a Complaint

If you believe that your data has been processed unlawfully, you have the right to lodge a complaint with a supervisory authority. In Poland, this is:

Prezes Urzędu Ochrony Danych Osobowych (UODO)

ul. Stawki 2, 00-193 Warszawa

Website: uodo.gov.pl

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this page periodically.

*Last Updated: March 2026*