Data Controller
The controller of personal data collected through the website available at dreaming-software.com (hereinafter: “Website”) is Dreaming Software, VAT ID (NIP): 5252935425 (hereinafter: “Controller”).
Registered address: ul. Władysława Broniewskiego 24A lok. 142, 01-771 Warsaw, Poland
Contact: contact@dreaming-software.com
The Controller has not appointed a Data Protection Officer, as it is not legally required to do so under Art. 37 GDPR.
Legal Bases and Purposes of Processing
Handling inquiries and correspondence (contact form, e-mail)
Data scope: first name, e-mail address, message content, and any other data voluntarily provided by the user.
Legal bases:
- Art. 6(1)(b) GDPR — processing is necessary for steps taken at the request of the data subject prior to entering into a contract,
- Art. 6(1)(f) GDPR — the legitimate interest of the Controller in responding to inquiries and conducting business correspondence.
Retention period: correspondence data is retained for 3 years from the last contact, for the purposes of potential claims or defence against claims. If the correspondence results in a contract — for the duration of the contract and 5 years thereafter (accounting and tax requirements).
Website analytics (Google Analytics)
Data scope: technical data about activity on the Website — approximate location (country/city level), browser type, operating system, visit timestamps and pages, traffic source. This data is associated with pseudonymous identifiers stored in cookies.
Legal basis: Art. 6(1)(f) GDPR — the legitimate interest of the Controller in analysing Website traffic to improve its functionality and content.
Retention period: analytics data is retained by Google Analytics for 14 months.
Providing personal data in the contact form is voluntary, but necessary to receive a response to your inquiry.
Cookies and Tracking Technologies
The Website uses cookies solely through the Google Analytics service (ID: G-6RMTWTS37Y). These are analytical cookies — pseudonymous and not directly identifying users by name:
_ga— distinguishes users, expiry: 2 years,_gid— distinguishes users, expiry: 24 hours,_ga_*— maintains session state, expiry: 2 years.
The Website does not use marketing or advertising cookies. No user profiling or remarketing is performed. No decisions regarding Website users are made in an automated manner, including through profiling within the meaning of Art. 22 GDPR.
Users may block cookies in their browser settings or install the Google Analytics Opt-out Add-on.
Data Recipients and International Transfers
Personal data may be transferred to the following external entities acting on behalf of the Controller:
- Google LLC (Google Analytics) — an analytics service provider based in the USA. Data transfers to the USA are carried out on the basis of the European Commission’s adequacy decision of 10 July 2023 under the EU–US Data Privacy Framework (DPF), on which Google LLC is listed. Google Privacy Policy: policies.google.com/privacy
- Formspree Inc. — a contact form processing service provider based in the USA. Data transfers to the USA are carried out on the basis of Standard Contractual Clauses (SCCs) approved by the European Commission. Formspree Privacy Policy: formspree.io/legal/privacy-policy
The Controller does not sell personal data or share it with third parties for marketing purposes. Where required by applicable law, the Controller may be obliged to disclose data to authorised public authorities.
Your Rights
Under Art. 15–22 GDPR, you have the following rights:
- Right of access (Art. 15) — obtain confirmation of whether data is being processed and access to a copy of it,
- Right to rectification (Art. 16) — correction of inaccurate data or completion of incomplete data,
- Right to erasure (Art. 17) — the “right to be forgotten” in cases specified by the GDPR,
- Right to restriction of processing (Art. 18) — request suspension of processing operations,
- Right to data portability (Art. 20) — receive data in a structured, machine-readable format,
- Right to object (Art. 21) — to processing based on the Controller’s legitimate interest; upon objection, the Controller will cease processing unless it demonstrates compelling legitimate grounds overriding your interests or grounds for establishing, exercising, or defending legal claims,
- Right to withdraw consent — at any time, without affecting the lawfulness of processing carried out prior to withdrawal.
To exercise any of these rights, please contact the Controller: contact@dreaming-software.com
The Controller will respond without undue delay — no later than one month from receipt of the request (which may be extended by a further two months for complex or numerous requests).
Right to Lodge a Complaint
If you believe that the processing of your personal data infringes GDPR or other applicable data protection law, you have the right to lodge a complaint with the supervisory authority:
President of the Personal Data Protection Office (UODO)
ul. Stawki 2, 00-193 Warsaw, Poland
uodo.gov.pl
Users in other EU/EEA member states may also contact the data protection authority in their country of habitual residence.
Data Security
The Controller applies appropriate technical and organisational security measures to protect personal data against unauthorised access, loss, destruction, or disclosure. These measures include encrypted communication (HTTPS), restricted data access, and use of trusted and certified service providers.
Scope and Changes
This Privacy Policy applies solely to the Website available at dreaming-software.com. The Website may contain links to external websites — the Controller recommends reviewing their respective privacy policies.
The Controller reserves the right to amend this Privacy Policy. Any changes will be published on this page with an updated date.
Last updated: April 2026