Privacy Policy
This Privacy Policy outlines how we process personal data collected via the OriginPass application form (in compliance with GDPR).
1. Data Controller and Privacy Contact
The data controller for personal data related to the OriginPass form is Dominik Dudziński. This initiative is part of the technology ecosystem supported by the InfoDPP.eu knowledge hub — an independent resource for EU DPP regulations. For any privacy-related inquiries, you can contact us at: contact@originpass.eu.
2. Data collected, purpose, and legal basis
Through the form, we collect: email address, company name, industry, expected DPP rollout scale, and submission timestamp. We use this data to process inquiries, qualify pilot candidates, and facilitate business-related communication. The legal basis is taking steps prior to entering into a contract (GDPR Art. 6(1)(b)) and our legitimate interest in handling inquiries effectively (GDPR Art. 6(1)(f)).
3. Data recipients and hosting (EU strictly)
After form submission, data is processed using Netlify (hosting), Supabase (lead database), Resend (email delivery), and Umami (traffic analytics and basic form-interaction analytics such as field focus, select open, and option selection). We do not send the full message body or the full email address to the analytics tool. Lead data is stored exclusively within the European Union / European Economic Area and is not transferred outside the EEA. Access to the data is limited, and administrative accounts should be protected with appropriate technical safeguards such as strong passwords and 2FA.
4. Data retention period
We retain lead form data for up to 12 months from the last contact, unless we receive a valid erasure request earlier or applicable law requires a longer retention period.
5. Your rights
Under the GDPR, you have the right to request access, rectification, erasure, and restriction of processing regarding your personal data. You also have the right to data portability and the right to object to processing. Requests related to deletion or the exercise of your rights can be sent to: contact@originpass.eu. Furthermore, you can lodge a complaint with the appropriate Data Protection Authority.