Privacy policy
Last updated: 29 October 2026
This policy explains what personal data we collect through www.driifloat.com, why, who receives it and what rights you have.
1. Who we are
The website is operated by Driifloat spółka z ograniczoną odpowiedzialnością (Driifloat sp. z o.o.), ul. Leśna 3, 95-040 Koluszki, Poland, registered in the National Court Register (KRS) under number 0000989408, NIP 7282865475, REGON 522934158.
We decide why and how the personal data described below is processed, so we are the data controller. You can reach us at support@driifloat.com.
2. What we collect, why, and on what basis
| What | Why | Legal basis (GDPR) |
|---|---|---|
| Contact and order-request form: name, email, phone, company, location type, city, country, your message, and any configuration or parts you selected | To answer your enquiry, send a quote and arrange delivery or a call | Art. 6(1)(b) steps at your request before a contract; Art. 6(1)(f) our legitimate interest in answering business enquiries |
| Newsletter / marketing opt-in (optional checkbox): name and email | To send newsletters, insights and product updates | Art. 6(1)(a) your consent, which you can withdraw at any time |
| Booking a call: the details you give Calendly (name, email, time slot) | To schedule the call | Art. 6(1)(b) and (f); handled by Calendly under its own terms |
| Spam and abuse protection: IP address and a bot-check result when you submit a form | To keep the forms secure and limit abuse | Art. 6(1)(f) our legitimate interest in security |
| Website analytics and performance (only if you accept analytics in the cookie banner): page views, device and browser type, approximate region, page speed | To understand how the website is used and to improve it | Art. 6(1)(a) your consent |
| Cookie choice: a small record of your cookie preference stored in your browser | To remember your choice | Art. 6(1)(f), strictly necessary |
| Locations map: loading the map shares your IP address and browser information with Google | To show partner locations on a map | Art. 6(1)(f) our legitimate interest |
We do not ask for sensitive personal data. Please do not include health information in free-text messages.
3. Who receives your data
We use service providers that process data on our behalf, under data-processing terms:
- Vercel Inc.: website hosting and, with your consent, analytics and speed measurement
- Resend: delivery of the emails sent from the contact form and the newsletter
- Calendly: scheduling of calls
- Cloudflare: bot protection on forms (Turnstile)
- Upstash: temporary rate limiting of form submissions
- Google: the map on the locations pages
Where it helps to answer your enquiry, for example for a delivery or installation in your region, we may pass it to a Driifloat reseller or local sales agent, who may then contact you about it. We do not sell personal data.
4. Transfers outside the EU/EEA
Some of these providers are based in, or can access data from, the United States. Where that happens we rely on an adequacy decision (for example the EU–US Data Privacy Framework) or the EU Standard Contractual Clauses.
5. How long we keep it
- Enquiries and orders: 24 months after the last contact, or longer where accounting or legal claims require it
- Newsletter: until you unsubscribe
- Analytics: up to 24 months, usually in aggregated form
- Cookie choice: until you clear your browser data or change it
6. Cookies and similar technologies
The website stores your cookie choice locally in your browser. Analytics and performance measurement run only if you accept them in the cookie banner. You can change your choice at any time with “Manage cookies” in the footer.
7. Your rights
You can ask us for access to your data, correction, deletion, restriction of processing and a portable copy, and you can object to processing based on our legitimate interest. Where processing is based on consent, you can withdraw it at any time without affecting what happened before. To use any of these rights, email support@driifloat.com.
You also have the right to complain to a data protection authority: in Poland the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, uodo.gov.pl), or the authority in the EU country where you live or work.
8. Children and security
The website is not directed at children and we do not knowingly collect their data. We use HTTPS, restrict access to enquiry data and choose providers with appropriate security measures. No system is completely secure.
9. Changes and contact
We may update this policy; the date above shows the latest version. Questions about it or your data: support@driifloat.com.