Privacy Policy

Who is responsible

The controller of personal data collected through this website is EnjoyGroup Sp. z o.o., ul. Brzeska 8/4, 21-500 Biała Podlaska, Poland, NIP 5372686054. You can reach us at hello@mascotiq.eu.

What we collect, and why

When you send the enquiry form

The form asks for your name, email address and a description of your project. Optionally you may add a company name, phone number, country, quantity, deadline, budget and file attachments. We use this solely to answer your enquiry and, if it turns into an order, to carry out the contract.

Legal basis: Art. 6(1)(b) GDPR — steps preparatory to a contract — and, where no contract follows, Art. 6(1)(f), our legitimate interest in responding to business enquiries.

Files you attach

Sketches, brand guidelines and other files you upload are treated as your confidential material. They are used only to assess and carry out your project, are not shown to anyone outside the people working on it, and are not used to train anything.

Technical data

Our server records the usual request data: IP address, time, requested address, browser identification. This is standard web server logging, kept for security and troubleshooting. Separately, to stop automated spam, the form keeps a hashed IP address for ten minutes to count submissions. The hash cannot be reversed to the original address, and it is deleted automatically.

Legal basis: Art. 6(1)(f) GDPR — legitimate interest in keeping the site available and free of abuse.

What we do not do

• We do not run advertising or analytics trackers on this site.
• We do not sell, rent or trade your data.
• We do not profile you or make automated decisions about you.
• We do not send marketing email unless you have separately asked for it.

Who else processes your data

We use a small number of service providers. Each processes data on our instructions only.

• Hosting. The website and its mail are hosted on servers in the European Union. —
• Traffic protection. Requests to this site pass through a DDoS protection service before reaching our server, which means that provider sees your IP address and request headers. —
• Telegram. Form submissions are also delivered to us as a Telegram message, which means the content you submit passes through Telegram’s infrastructure. If you would rather it did not, write to us directly by email instead.

How long we keep it

• Enquiries that do not become orders: 24 months, then deleted.
• Order and contract data: as long as Polish accounting and tax law requires — five years from the end of the tax year.
• Files you attached: deleted with the enquiry, or at the end of the project on request.
• Server logs: kept by our hosting provider under their standard retention practice. We do not access them except to investigate a security or availability incident. Write to us if you need the exact period for your records.
• Anti-spam hashes: ten minutes.

Transfers outside the EEA

Telegram operates infrastructure outside the European Economic Area. Where your enquiry is delivered through Telegram, that transfer is covered by Art. 49(1)(b) GDPR — necessary for the performance of a contract concluded at your request. The traffic protection provider named above may also process data outside the EEA;