This Privacy Policy explains how Lemonmind sp. z o.o. (“we”, “us”, “our”), operating the openProd.io platform, collects, uses, and protects your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Polish data protection law.
1. Data Controller
Lemonmind sp. z o.o. ul. Azymutalna 9, 80-298 Gdansk, Poland NIP: 9571141336 | REGON: 521268736 Email: hello@openprod.io
2. Data We Collect
2.1 Account & Contact Data
When you register, request a demo, or contact us, we may collect:
- Full name
- Email address
- Company name and job title
- Phone number
2.2 Usage Data
When you use our platform, we collect:
- Features accessed and actions performed
- Content uploaded or created
- Timestamps and session duration
2.3 Technical Data
We automatically collect:
- IP address
- Browser type and version
- Operating system
- Device identifiers
- Referring URLs and pages visited
3. Purposes and Legal Bases
We process your personal data for the following purposes under Article 6 GDPR:
| Purpose | Legal Basis |
|---|---|
| Providing and maintaining our services | Performance of a contract (Art. 6(1)(b)) |
| Account creation and management | Performance of a contract (Art. 6(1)(b)) |
| Responding to inquiries and support requests | Legitimate interest (Art. 6(1)(f)) |
| Sending product updates and marketing communications | Consent (Art. 6(1)(a)) |
| Analytics and service improvement | Legitimate interest (Art. 6(1)(f)) |
| Ensuring security and preventing fraud | Legitimate interest (Art. 6(1)(f)) |
| Compliance with legal obligations | Legal obligation (Art. 6(1)(c)) |
4. Cookies
4.1 What Are Cookies
Cookies are small text files stored on your device when you visit our website. They help us provide a better user experience and understand how our site is used.
4.2 Types of Cookies We Use
Essential Cookies — Required for the website to function properly. These cannot be disabled. They handle session management, security, and basic functionality.
Analytical Cookies — Used to understand how visitors interact with our website. We use Google Analytics (via Google Tag Manager) to collect anonymous usage statistics. These cookies are only activated after you provide consent.
4.3 Managing Cookies
When you first visit our website, a cookie consent banner will appear. You can choose to:
- Accept All — enables both essential and analytical cookies
- Essential Only — only essential cookies are used; no analytical tracking
You can change your preference at any time by clearing your browser’s local storage and refreshing the page. You can also configure cookie settings in your browser.
5. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes described in this policy:
- Account data: retained for the duration of your account and up to 12 months after deletion, unless longer retention is required by law.
- Usage and technical data: retained for up to 26 months.
- Marketing consent records: retained for the duration of consent plus 3 years after withdrawal.
- Invoicing and financial data: retained for 5 years as required by Polish tax law.
6. Your Rights
Under the GDPR, you have the right to:
- Access your personal data (Art. 15)
- Rectify inaccurate data (Art. 16)
- Erase your data (“right to be forgotten”) (Art. 17)
- Restrict processing (Art. 18)
- Data portability — receive your data in a structured, machine-readable format (Art. 20)
- Object to processing based on legitimate interests (Art. 21)
- Withdraw consent at any time, without affecting the lawfulness of processing prior to withdrawal (Art. 7(3))
- Lodge a complaint with the Polish supervisory authority:
Prezes Urzędu Ochrony Danych Osobowych (UODO) ul. Stawki 2, 00-193 Warszawa https://uodo.gov.pl
To exercise your rights, contact us at hello@openprod.io. We will respond within 30 days.
7. Third-Party Services
We use the following third-party services that may process your data:
- Google Analytics (via Google Tag Manager) — website analytics. Google may process data in the United States. Google Privacy Policy
We only share personal data with third parties when necessary to provide our services, and we ensure appropriate data protection agreements are in place.
8. International Data Transfers
Where personal data is transferred outside the European Economic Area (EEA), we ensure adequate protection through:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Transfers to countries with an adequacy decision from the European Commission
9. Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- Encryption of data in transit (TLS) and at rest
- Access controls and authentication mechanisms
- Regular security assessments
- Employee training on data protection
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via our website or email. The “Last updated” date at the top of this page indicates the most recent revision.
11. Contact
If you have questions about this Privacy Policy or our data practices, contact us:
Lemonmind sp. z o.o. ul. Azymutalna 9, 80-298 Gdansk, Poland Email: hello@openprod.io