Privacy Policy

Controller and scope

Igor Hajducki, based in Wrocław, Poland, operates this website under the professional and portfolio brand DroneCube Analytics. He is the data controller and personally determines the purposes and means of processing website enquiry data. For contact and privacy requests, email contact@dronecubeanalytics.com.

This policy covers use of dronecubeanalytics.com, contact and project enquiries, and associated security and communications. It does not fully describe processing under a later commercial project or contract, which depends on the engagement, dataset and applicable legal requirements.

Information processed

The form may process your name, email address, project or use-case information, type of data, dataset size, requested outputs or services, an optional dataset link, and project description. A full legal name is not required. Not every project detail is personal data in every case. Correspondence may include further information you provide. Technical information needed for Turnstile and request handling may include IP addresses, browser/device information and verification tokens.

Providing information is voluntary. Fields marked as required must be completed to submit the form.

Optional dataset links

Providing a dataset link is optional. The form receives a link; it does not upload the dataset itself. Linked material may be reviewed only as necessary to assess or discuss your enquiry, with access limited to what is reasonably necessary for that discussion or evaluation. Avoid unnecessary personal data, special-category data or confidential information not required to evaluate the project.

Purposes and legal bases

Information is used to respond to enquiries, understand the requested work, discuss scope, data and potential deliverables, take steps toward possible cooperation or a contract, maintain necessary business correspondence, and protect the website and form from spam, abuse and automated attacks.

The legal basis depends on the circumstances. For an individual enquiring about potential cooperation, Article 6(1)(b) GDPR applies where processing is necessary to take steps at that person’s request before entering into a contract. It does not automatically apply to a person acting on behalf of an organisation.

For correspondence on behalf of an organisation and reasonable administration and security of correspondence, Article 6(1)(f) GDPR applies where justified by legitimate interests: responding to legitimate business enquiries, maintaining necessary correspondence, and protecting the website and form from spam, abuse and automated attacks.

Cloudflare, security and email

The site uses Cloudflare infrastructure to serve and protect the website, Cloudflare Workers for the contact-form backend, Cloudflare Turnstile for bot and abuse protection, and Cloudflare Email Routing for the public contact address. Cloudflare acts as a service provider and, where applicable, a processor; its role depends on the service and processing involved.

Turnstile helps distinguish legitimate visitors from automated abuse and protects the contact form. Turnstile tokens are verified on the server. The form also uses HTTPS and server-side validation. Cloudflare explains its technical-signal processing and roles in the Turnstile Privacy Addendum.

Project enquiries may be delivered through email infrastructure used by DroneCube Analytics, including Cloudflare Email Routing and the mailbox provider receiving correspondence. These providers process information in connection with delivering and operating their services.

International processing

Providers such as Cloudflare and the mailbox provider may process data in multiple jurisdictions, including outside the European Economic Area. Where required by applicable data-protection law, providers may use recognised transfer safeguards. The applicable arrangements depend on the service and processing; no single mechanism is assumed to cover every activity. See Cloudflare’s Data Processing Addendum. Questions about transfers can be sent to the privacy contact above.

Retention

Ordinary enquiries that do not lead to cooperation may be retained for up to 12 months after the last substantive contact. They are then deleted when no longer needed, unless further retention is necessary for legal obligations, establishing, exercising or defending legal claims, or an ongoing project or contractual relationship.

If an enquiry leads to paid work or a contract, information relevant to that relationship may be retained separately for periods required by applicable accounting, tax or legal obligations. Deleting an email does not necessarily remove all backup copies immediately; backup and provider security records follow the applicable systems’ retention and deletion arrangements.

Your rights

Where applicable under the GDPR, you may request access, rectification, erasure, restriction of processing or data portability, and object to processing. Particular rights depend on the legal basis and circumstances. Send privacy requests to contact@dronecubeanalytics.com.

You may complain to the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych / UODO) in Poland, or another applicable supervisory authority under the GDPR.

Cookies, storage and tracking

The website itself does not intentionally use advertising or marketing tracking technologies, including advertising trackers, marketing pixels, Google Analytics, Meta Pixel or newsletter tracking. Essential technical or security-related technologies, including cookies or browser storage where applicable, may be used by infrastructure and security providers such as Cloudflare. This is not a claim that the site uses no cookies or that every provider technology is exempt from consent requirements. External websites have their own privacy practices.

Automated decision-making

The current contact-enquiry process does not use automated decision-making that produces legal or similarly significant effects.