Privacy policy

Who controls your data

Your personal data is controlled jointly — as joint controllers within the meaning of Article 26 GDPR — by:

HEX-NET Sp. z o.o., ul. Franciszka Klimczaka 1, 02-797 Warsaw, Poland, entered in the National Court Register (KRS) under number 0001191786, REGON 542599939, NIP (tax ID) 9512628812;

HEXAGON NETWORK INT LTD, Ealing Cross, 1st Floor, 85 Uxbridge Road, London W5 5TH, United Kingdom, registered with Companies House under number 16085570.

For any data protection matter, write to rodo@hexagon-network.com or by post to the registered office of HEX-NET Sp. z o.o.

Browser storage and statistics

This website uses no third-party analytics tools (such as Google Analytics), no advertising pixels and no external fonts — every file is served from our own server.

Necessary (no consent needed): your browser stores your choice about statistics (localStorage “hx:zgody”) and a note that the welcome animation has already been shown (sessionStorage). Neither identifies you.

Statistics (only with your consent): we count visits in HEX-NET’s own system (hex-admin) on our own server. We store a random browser identifier (localStorage “hx:sid”) and a session identifier (sessionStorage), the pages you view and the time spent on them, how you arrived (a referring page outside the site, UTM campaign parameters, click identifiers gclid, fbclid and li_fat_id), screen size, browser language and clicks on contact and external links. The legal basis is consent (Article 6(1)(a) GDPR). You can withdraw it at any time under “Privacy settings” in the footer — the identifier is then removed from your browser.

If you arrive from a link in one of our emails that contains a personal token (the mr_o parameter) and you consent to statistics, we may link the visit to your contact record in our database (CRM). The token is removed from the page address as soon as you arrive.

The server records standard technical data for each request (IP address, date and time, page address, browser type). We use it only to keep the website secure and working (legitimate interest — Article 6(1)(f) GDPR) and keep it for a short time.

Email, phone and contact form enquiries

When you write to or call us, we process the data you give us (name, email address, phone number, message) to reply and continue the conversation. The legal basis is our legitimate interest (Article 6(1)(f) GDPR) and, where the conversation concerns a contract, Article 6(1)(b) GDPR.

The form on the contact page saves your enquiry in our enquiry system (hex-admin) on our own server: your name, email address, optionally your phone number and company name, your message and the wording of the consent you gave, the address of the page the form was sent from and — if you have consented to statistics — the source of your visit (UTM parameters and referring page). To prevent abuse we store a hash of your IP address and, from the browser headers, the type of device and browser and your approximate country; we delete this technical data after 12 months. Based on the domain of your email address we may match the enquiry to a company in our contact database and decide how urgently to reply. The legal basis for processing data from the form is your consent (Article 6(1)(a) GDPR), which you can withdraw at any time by writing to rodo@hexagon-network.com — withdrawal does not affect the lawfulness of processing before it.

We keep correspondence until the matter is resolved and then for as long as it may be needed to establish, pursue or defend claims, or as required by law.

Recruitment

Applications for jobs and internships are accepted at job@hexagon-network.com. We process CV data to run the recruitment process (Article 6(1)(b) and (c) GDPR and Article 22¹ of the Polish Labour Code); any data you provide voluntarily beyond what the law requires is processed on the basis of your consent (Article 6(1)(a) GDPR), which you can withdraw at any time. When the recruitment ends we delete your application unless you agree to be considered for future openings.

Events, competitions and newsletter

Conference registration, competition entries and ticket purchases take place on the websites of our individual brands (including dyrektormarketinguroku.pl, executivesummit.eu and innovativeleader.eu). The privacy policies of those websites describe how data is processed there.

If you ask for our newsletter, we will store your email address on the basis of your consent (Article 6(1)(a) GDPR). You can withdraw it at any time by replying to any message or writing to us.

Recipients and transfers outside the EEA

Data may be received by companies that process it on our behalf: hosting, email and IT service providers and our accountants — only to the extent needed to provide their services.

The joint controller HEXAGON NETWORK INT LTD is established in the United Kingdom. Data is transferred to the United Kingdom on the basis of a European Commission decision finding an adequate level of data protection in that country (Article 45 GDPR).

Your rights

You have the right to access, rectify and erase your data, to restrict its processing, to data portability and to object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of earlier processing.

You can also lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw), and in matters concerning HEXAGON NETWORK INT LTD with the Information Commissioner’s Office (ICO) in the United Kingdom.

Changes to this policy

We update this policy when the way the website works or the law changes. The current version is always available at this address.