Privacy policy
No cookies, no analytics, no tracking. Here is what we do collect.
This policy explains what personal data we collect through kosmok.space, why, and what you can do about it. We collect as little as we can: the site has no cookies, no analytics and no tracking scripts, and the fonts are served from our own server.
Who we are
The controller of your personal data is Kosmok prosta spółka akcyjna, ul. Ratuszowa 11/235, 03-450 Warszawa, Poland, KRS 0001063642, NIP 7011170005. For anything about your data, write to contact@kosmok.space.
What we collect and why
| Where | What | Why, and the legal basis |
|---|---|---|
| Contact form | Name, email address, your message | To reply to you and continue the conversation. Our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR), or steps before a contract you asked for (Art. 6(1)(b)). |
| Pitch deck form | Email address, and optionally your name and organisation | To send you the deck and follow up on it. Our legitimate interest in talking to investors (Art. 6(1)(f)). |
| Investor updates (optional checkbox) | Email address, name | To send occasional updates. Your consent (Art. 6(1)(a)), which you can withdraw at any time. |
| Emails and job applications | Whatever you send us, for example a CV | To answer you or run the recruitment you applied for (Art. 6(1)(b)). If you agree, we keep your application for future roles (Art. 6(1)(a)). |
| Server logs | IP address, date and time, requested page, browser type | To keep the site running and secure. Our legitimate interest (Art. 6(1)(f)). |
Giving us your data is voluntary, but without an email address we cannot reply. We do not use your data for automated decision-making or profiling.
Who else sees it
We use a few service providers, who process data only on our instructions:
- OVHcloud hosts the website, keeps the server logs and delivers form messages by email.
- Microsoft hosts our mailbox (Microsoft 365).
- Form messages and contacts are kept in our internal CRM, which runs on our own server.
Microsoft may process data outside the European Economic Area. Where it does, the transfer is covered by the EU Standard Contractual Clauses or the EU-US Data Privacy Framework. We do not sell your data or share it for marketing.
How long we keep it
- Enquiries and deck requests: as long as the conversation is active, then up to 2 years, unless it turns into a contract.
- Investor updates: until you unsubscribe or withdraw consent.
- Job applications: until the recruitment ends, or 12 months if you agreed to be considered for future roles.
- Server logs: for the period set by our hosting provider, then deleted.
Your rights
You can ask us for access to your data, a copy of it, correction, deletion, restriction of processing, or data portability. You can object to processing based on our legitimate interest, and withdraw consent at any time without affecting what happened before. Write to contact@kosmok.space and we will answer within a month.
If you think we handle your data unlawfully, you can complain to the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa).
Changes
If we change how we handle data, we will update this page and the date below.
Last updated: 20 October 2026