01 — Privacy Policy

Who we are

Ajara (“Ajara”, “we”) is a company established in Poland that develops and tests chemical technologies. We are the controller of the personal data described in this policy. You can reach us at info@getajara.com.

What we process and why

Contact form and correspondence. Name, organisation, email address and the content of your message — to answer your request, verify your organisation (due diligence) and arrange access to materials and presentations. Legal basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract) and Art. 6(1)(f) GDPR (our legitimate interest in business communication). Form messages are transmitted to our mailbox by FormSubmit (formsubmit.co).

Secure room (getajara.com/room). Your email address, one-time sign-in codes and sign-in events (time, IP address, browser) processed by Cloudflare Access — to authenticate you, protect confidential materials and keep an access log. Legal basis: Art. 6(1)(b) and (f) GDPR.

Video playback. Technical data (IP address, device, playback events) processed by Cloudflare Stream to deliver the video to you.

Website operation. Server and security logs processed by Cloudflare as our hosting and content-delivery provider.

Recipients and transfers

Cloudflare, Inc. (hosting, content delivery, access control, video streaming) and FormSubmit (form delivery) process data on our instructions. Data may be transferred outside the European Economic Area under the EU–US Data Privacy Framework or Standard Contractual Clauses. We do not sell personal data and do not use it for advertising.

Retention

Requests and correspondence: for the duration of our discussions and up to 24 months after the last contact, or longer where required to perform or document an agreement. Access logs: for the period of your authorisation and up to 12 months afterwards.

Your rights

You have the right to access, rectify and erase your data, to restrict or object to processing, and to data portability (Art. 15–21 GDPR). Write to info@getajara.com; we respond within one month. You may also lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw).

We may update this policy. The current version is always published at getajara.com.

02 — Cookie Policy

Strictly necessary only

The public pages of getajara.com set no analytics or marketing cookies. One local preference (ajara-cookie-ok) remembers that you dismissed the cookie notice; it contains no personal data.

Secure room. Cloudflare Access sets strictly necessary cookies (for example CF_Authorization, CF_AppSession) to keep you signed in after you enter your one-time code. The Cloudflare Stream player may use local storage for playback settings such as volume and quality.

Security. Cloudflare may set security cookies (for example __cf_bm) to protect the site from automated traffic.

These cookies are necessary to provide the service you request and do not require consent under applicable Polish and EU law. You can delete them in your browser at any time; the secure room will then ask you to sign in again.

03 — GDPR / RODO

Data protection statement

Ajara processes personal data in accordance with Regulation (EU) 2016/679 (GDPR; in Poland: RODO) and the Polish Act of 10 May 2018 on the Protection of Personal Data.

Minimisation. We collect only what is needed to communicate with you and to secure access to confidential materials.

Security. Access to the secure room is by invitation only, confirmed with a one-time code sent to the invited email address. There are no passwords to leak. Every sign-in is logged, and access can be revoked at any time.

Confidentiality. Materials made available in the secure room are protected by contract. Access is personal and non-transferable.

Contact. For any data-protection request write to info@getajara.com with “RODO” in the subject line.