Privacy policy

Last updated: 1 April 2026

Enkaris (“we,” “our,” or “us”) is committed to protecting your privacy.
This Privacy Policy explains how we collect, use, and safeguard your information when you use our web applications (“the App”).

By using Enkaris, you agree to the practices described in this Privacy Policy.

1. Who is the data controller

The controller of personal data is Łukasz Olszewski, operating as an unregistered business under Polish law, correspondence address: Aleja Legionów 44K/20, 08-400 Garwolin, Poland, e-mail address: contact.enkaris@gmail.com.

2. Scope of this Privacy Policy

This Privacy Policy describes the rules for processing personal data in connection with the use of:

the website www.enkaris.com,
the web application app.enkaris.com,
contact forms, e-mails, and other communication channels related to Enkaris.

3. What data we process

Depending on how you use the Website or the Application, we may process in particular:

identification data such as first name, last name, and company name,
contact data such as e-mail address and phone number,
account data such as login e-mail address, user identifier, encrypted password, or data related to authentication,
data provided in the contact form or in correspondence,
technical and usage data such as IP address, session identifiers, system logs, and information about your device and browser,
business data entered into the Application by the User, including data concerning customers, revenue, costs, products, and subscriptions,
billing and accounting data, if the cooperation is paid.

4. Purposes and legal bases of processing

We process personal data for the following purposes:

providing electronic services and maintaining an Account – pursuant to Article 6(1)(b) GDPR,
handling inquiries and communication – pursuant to Article 6(1)(b) or 6(1)(f) GDPR,
concluding and performing a B2B agreement, issuing accounting documents, and handling settlements – pursuant to Article 6(1)(b) and 6(1)(c) GDPR,
ensuring security, preventing abuse, maintaining logs, backups, and diagnosing errors – pursuant to Article 6(1)(f) GDPR,
establishing, pursuing, or defending claims – pursuant to Article 6(1)(f) GDPR,
fulfilling legal obligations imposed on the controller – pursuant to Article 6(1)(c) GDPR,
sending marketing information by electronic means, if separate consent has been given – pursuant to Article 6(1)(a) GDPR.

5. Is providing data mandatory

Providing personal data is voluntary, but in many cases necessary in order to:
1. receive a response to a message,
2. conclude and perform an agreement,
3. create and maintain an Account,
4. issue a billing document.
Failure to provide the data may make it impossible to perform the above activities.

6. Data recipients

Personal data may be disclosed to entities whose services we use in connection with operating Enkaris, solely to the extent necessary to achieve the purposes described in this Privacy Policy, in particular to:

Vercel – for hosting and cloud infrastructure used for the website and the application,
OVH / OVHcloud – for domain registration, domain maintenance, and DNS infrastructure, where applicable,
Resend – for sending system and transactional e-mails, including messages related to login and account operation,
Google – in connection with:
- the use of Google Analytics for analytics and statistical purposes,
- sending e-mails via Gmail SMTP infrastructure used through Nodemailer,
Prisma - a provider of cloud-based database services,
legal, accounting, or technical advisors - solely to the extent necessary for the relevant purpose, including legal, accounting, technical, or security support.

Personal data may also be disclosed to other processors where necessary for the proper provision of services, compliance with legal obligations, or the establishment, exercise, or defense of legal claims.

7. Transfers outside the EEA

As a rule, we aim to process personal data within the European Economic Area.
If we use providers established outside the EEA or providers that transfer data outside the EEA, personal data may be transferred on the basis of appropriate legal safeguards, in particular standard contractual clauses or an adequacy decision.
Before publishing this Privacy Policy, verify and specify whether you use services that may involve transfers outside the EEA, for example certain cloud, e-mail, analytics, or payment services.

8. Data retention period

We store personal data no longer than necessary for the purpose for which it was collected, and thereafter for the period required by law or necessary for the establishment, pursuit, or defense of claims. As a rule:

contact data – for the duration of correspondence and then until the limitation period for claims expires,
account data – for as long as the Account is maintained, and after deletion for the period necessary for settlements, security, and defense of claims,
billing and accounting data – for the period required by tax and accounting law,
data processed on the basis of consent – until the consent is withdrawn or the purpose becomes obsolete,
technical logs and security data – for the period justified by security and diagnostic needs.

9. Rights of data subjects

Every person whose data we process has, where provided by law, the right to:

access their personal data,
rectify their personal data,
erase their personal data,
restrict processing,
data portability,
object to processing,
withdraw consent at any time where processing is based on consent,
lodge a complaint with the President of the Personal Data Protection Office in Poland (Prezes Urzędu Ochrony Danych Osobowych) or another competent supervisory authority.

10. How to exercise your rights

Requests concerning personal data may be sent by e-mail to contact.enkaris@gmail.com or in writing to Aleja Legionów 44K/20, 08-400 Garwolin, Polska.

11. Cookies and similar technologies

The Website and the Application may use cookies and similar technologies.
Necessary cookies are used to ensure the proper functioning of the Website and the Application, maintain sessions, provide security, and display content correctly.
Analytics, statistics, functionality, or marketing cookies may be used only where there is an appropriate legal basis, and where consent is required, only after obtaining such consent.
Users may manage cookie settings through their browser or through a consent management tool, if implemented.
Before publishing this Privacy Policy, specify the actual technologies used, cookie lifetimes, and the providers involved.

12. Data entered into the Application by the User

If the User enters personal data of their customers, contractors, employees, or other persons into the Application, the User is responsible for ensuring that such processing is lawful, including having an appropriate legal basis.
In such a case, the roles of the parties may depend on the specific factual situation:
1. the User may act as the controller of the personal data entered into the Application,
2. the Enkaris controller may act as a processor to the extent necessary to technically provide the service.
Where required, the parties should conclude a separate Data Processing Agreement.

13. Automated decision-making and profiling

As of the effective date of this Privacy Policy, personal data is not used to make decisions producing legal effects concerning users, or similarly significantly affecting them, solely by automated means, unless we inform users otherwise separately.

14. Data security

The controller applies appropriate technical and organizational measures to protect personal data, taking into account the nature, scope, context, and purposes of processing, as well as the risk of violating the rights and freedoms of natural persons.

15. Changes to this Privacy Policy

This Privacy Policy may be updated in the event of changes in law, changes to the way the Website or the Application operates, changes in the scope of services, or changes in the tools used.

16. Contact

If you have any questions or concerns regarding these Terms, please contact:

Łukasz Olszewski
Aleja Legionów 44k/20, 08-400 Garwolin, Poland
Email: contact.enkaris@gmail.com
Serwis: https://www.enkaris.com