Data Privacy Policy

Effective Date: October 2026 • Formulated in accordance with Regulation (EU) 2016/679 (GDPR).

1. Data Controller Identification

The controller responsible for processing personal data on Ironstride (accessible via https://ironstrideak.info) is:

2. Categories of Processed Information

We process personal data strictly necessary for platform operation and user interaction:

• Inquiry Submission Records: Full name, electronic mail address, movement program area, and message contents submitted through the contact desk.
• Technical Transmission Logs: Anonymized IP addresses, browser types, timestamps, and routing telemetry required for web server integrity and denial-of-service defense.
• Assessment Calculations: Numerical answers selected within the 4-step Mobility Self-Assessment Quiz are evaluated locally inside the client browser and are not linked to identifiable profiles.

3. Legal Bases for Processing (GDPR Article 6)

Personal data is gathered and processed pursuant to:

• Article 6(1)(b) GDPR: Performance of pre-contractual steps upon user request, specifically responding to direct inquiries submitted via the platform.
• Article 6(1)(f) GDPR: Legitimate interest of the Data Controller in ensuring technical stability, investigating security incidents, and managing general corporate communications.
• Article 6(1)(a) GDPR: Explicit user consent where specific checkboxes are provided.

4. Data Retention Limits

Correspondence collected via contact forms is retained for a maximum of 12 months following the completion of communications, unless longer retention is required under statutory documentation or legal compliance rules. Technical server logs are erased after 30 days.

5. Rights of the Data Subject

Every individual whose data is processed by the Data Controller holds rights under Chapter III GDPR:

• Right of Access (Article 15): Right to obtain confirmation and copies of personal data processed.
• Right to Rectification (Article 16): Right to rectify outdated or inaccurate data without undue delay.
• Right to Erasure (Article 17): Right to request erasure where data is no longer necessary.
• Right to Restriction (Article 18): Right to limit processing during verification disputes.
• Right to Data Portability (Article 20): Right to receive data in a structured, machine-readable format.
• Right to Object (Article 21): Right to object to processing founded upon legitimate interests.
• Right to Lodge a Complaint: Right to lodge a formal complaint with the Polish supervisory authority: Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.

6. Third-Party Disclosures & Transfers

We do not sell, rent, or transfer personal data. Data is shared exclusively with vetted technical processors (such as European server hosting infrastructure) operating under binding Article 28 GDPR processing agreements. No data is transferred outside the European Economic Area (EEA).

7. Contact for Data Protection Matters

To exercise your statutory data protection rights, email our data desk at: [email protected] or address written requests to: ZAKŁAD OPIEKI MEDYCZNEJ CER-MED SP. Z O.O., ul. Przemysłowa 21, 63-700 Krotoszyn, Poland.