Privacy Policy

Data controller

Cirran is operated by Sunscrapers Sp. z o.o., a company registered in Poland.

Registered address: Sunscrapers Sp. z o.o., Warsaw, Poland

For any privacy-related questions or data requests, contact us at contact@cirran.eu.

What data we collect

We collect only the data necessary to respond to your inquiry and deliver our consulting services. Specifically:

• Contact form submissions: your name, work email address, and the message you send us. You may optionally provide your company website, company size, and current cloud provider.
• Analytics: we use privacy-first, cookieless analytics that collect only aggregate page view data. No personal information is captured through analytics, and no individual visitors can be identified.

We do not use tracking cookies, advertising pixels, or any third-party data collection tools that profile visitors.

Legal basis for processing

We process your personal data on the following legal bases:

• Legitimate interest (Article 6(1)(f) GDPR): to respond to your inquiries and provide the consulting services you have requested.
• Consent (Article 6(1)(a) GDPR): where you have given explicit consent, for example by submitting our contact form.

Where your data is stored

All data collected through this website is processed and stored on infrastructure located within the European Union. We do not transfer personal data outside the EU/EEA. This applies to our hosting, email systems, and any third-party services we use.

How long we keep your data

Contact form submissions are retained for as long as necessary to respond to your inquiry and, if applicable, for the duration of a consulting engagement. We review and delete stored data that is no longer needed on a regular basis. You can request deletion at any time.

Your rights under GDPR

As a data subject under the General Data Protection Regulation, you have the following rights:

• Right of access: request a copy of the personal data we hold about you.
• Right to rectification: request correction of inaccurate or incomplete data.
• Right to erasure: request deletion of your personal data.
• Right to data portability: receive your data in a structured, machine-readable format.
• Right to object: object to processing based on legitimate interest.

To exercise any of these rights, email us at contact@cirran.eu. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

Changes to this policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.