← Home
Privacy Policy
Last updated: 23 October 2026
This Policy explains how we process personal data of people using the xentim.com website (the "Site"), including those who submit the contact form or use the free demo analysis of a recording.
1. Data controller
The controller of personal data is TATO STUDIO sp. z o.o., with its registered office in Poznań, ul. 28 Czerwca 1956 r. 174/28, 61-507 Poznań, Poland, entered in the Register of Entrepreneurs of the National Court Register (KRS) kept by the District Court Poznań – Nowe Miasto i Wilda in Poznań, 8th Commercial Division, under KRS 0000995718, NIP (VAT) 9721332292, REGON 523373905, share capital PLN 5,000.00 (the "Controller").
Contact for data protection matters: contact@xentim.com.
2. What data we process, for what purpose and on what legal basis
| Activity | Data | Purpose | Legal basis (GDPR) |
|---|---|---|---|
| "Book a demo" / contact form | full name, company or site, email or phone, message | responding to your enquiry, business contact, preparing an offer | Art. 6(1)(b) (steps prior to a contract) and (f) (legitimate interest – handling enquiries and direct marketing) |
| Free recording analysis (lead magnet) | uploaded video file, email address, your query | performing, at your request, a free demo analysis and sending you the result | Art. 6(1)(b) and (f) |
| Newsletter | email address, language version, date of subscription and confirmation | sending the Xentim newsletter (once a month) after you confirm the subscription with the link in an email | Art. 6(1)(a) (consent); you can withdraw consent at any time with the unsubscribe link in every email |
| Use of the Site | technical data (IP address, browser type), cookies and browser storage | operating and securing the Site | Art. 6(1)(f) |
3. Recordings submitted for analysis
If you use the free analysis, the uploaded file may contain images of people or vehicle number plates. In that case:
- we automatically blur faces and number plates for the purpose of presenting the result,
- we delete the original file immediately after the analysis and delete the result after 7 days,
- by submitting a recording you declare that you are entitled to provide it and have a legal basis to process any personal data of individuals visible in it; with respect to those individuals you remain the controller and we act on your behalf.
Xentim does not use facial recognition or biometric identification and does not create biometric templates.
4. Recipients of data
Data may be entrusted to trusted providers acting on our behalf:
- Vercel Inc. – hosting of the Site and functions, possible temporary file storage,
- Resend and Amazon Web Services (Amazon SES) – sending email,
- home.pl (nazwa.pl sp. z o.o.) – hosting of the Controller's email.
Some providers may process data outside the European Economic Area (e.g. in the USA). Such transfers take place on the basis of Standard Contractual Clauses or the Data Privacy Framework.
5. Retention period
- enquiry data – for the time necessary to handle it and contact you, and then for the limitation period of possible claims or until an effective objection is raised,
- newsletter – until you unsubscribe (withdraw consent); unconfirmed sign-ups are not stored and the confirmation link expires after 7 days,
- recordings for analysis – the original until the analysis is completed, the result for 7 days,
- data processed on the basis of legitimate interest – until an objection is raised.
6. Your rights
You have the right to: access your data, rectify it, erase it, restrict processing, data portability, and to object to processing based on legitimate interest. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland). To exercise your rights, write to contact@xentim.com.
7. Voluntariness
Providing data is voluntary but necessary to receive a response to your enquiry or to perform the free analysis.
8. Cookies and browser storage
The Site uses cookies and browser storage to the extent necessary for its operation and to remember user choices (e.g. language). You can manage cookies in your browser settings.
With your consent (banner on your first visit) we use Google Analytics 4, a tool provided by Google Ireland Limited, to understand how many people visit the Site and which pages they read. Google Analytics then sets cookies and processes technical data such as a truncated IP address, approximate location, device type and pages visited. The legal basis is your consent (Art. 6(1)(a) GDPR). Without consent, no Google Analytics cookies are set. You can withdraw consent at any time by clearing the site data in your browser, which shows the banner again. Data may be transferred to Google LLC in the USA under the EU-US Data Privacy Framework.
9. Changes to the Policy
This Policy may be updated. The current version is always available on the Site, together with the date of the last update.