Privacy Policy

Effective date: July 17, 2026  ·  Last updated: July 17, 2026

1. About Softteam & This Policy

Softteam is a commercial brand — not a holding company, investment fund, or financial institution. This website (softteam.io) is operated under the Softteam brand.

The Softteam brand operates through independent legal entities, each responsible for data processing within its respective jurisdiction:

Both entities operate under the General Data Protection Regulation (GDPR) as all EU-registered companies are required to do. If you are unsure which entity is responsible for your data, please contact us at contact@softteam.io.

2. Data We Collect

We collect personal data only when you voluntarily provide it or when you visit our website. This includes:

• Contact data — name, email address, company name, and any information you include when submitting a project inquiry or investor inquiry via our contact links.
• Usage data — IP address, browser type, pages visited, time spent on pages, and referral source. This data is collected automatically through standard server logs and/or analytics tools.
• Communication records — the content of any email or message you send to us.

We do not collect sensitive personal data (such as health, financial, or biometric data) through this website.

3. How We Use Your Data

We use the data we collect for the following purposes:

• To respond to project submissions, investor inquiries, and other communications you initiate.
• To evaluate potential business partnerships, co-building opportunities, or investment discussions.
• To improve and maintain the functionality of this website.
• To comply with legal obligations applicable to SSOFTTEAM OÜ or SOFTTEAM PL sp. z o.o.

4. Legal Basis for Processing (GDPR)

We process your personal data on the following legal grounds:

• Consent (Art. 6(1)(a) GDPR) — when you voluntarily contact us or submit an inquiry.
• Legitimate interests (Art. 6(1)(f) GDPR) — to operate our business, evaluate potential projects, and maintain business communications.
• Legal obligation (Art. 6(1)(c) GDPR) — where required by applicable law.

5. Data Retention

We retain personal data only as long as necessary for the purposes described above:

• Inquiry data (project, investor): up to 3 years from last communication, unless a business relationship is established (in which case applicable contract law governs retention).
• Website analytics data: typically up to 26 months, depending on the tools used.

6. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data. We may share data with:

• Service providers — email hosting, analytics, and other infrastructure providers who process data on our behalf under data processing agreements.
• Legal authorities — when required by law or to protect our legitimate legal interests.

Any transfers of personal data outside the EEA are subject to appropriate safeguards as required by GDPR.

7. Cookies

This website may use cookies and similar tracking technologies, including:

• Functional cookies — necessary for the website to operate correctly.
• Analytics cookies — to help us understand how visitors use the site (e.g., Google Analytics or similar). These may be disabled in your browser settings.

By continuing to use this website, you consent to the use of cookies as described above. You may withdraw consent by clearing your browser cookies or adjusting your browser settings at any time.

8. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — request correction of inaccurate or incomplete data.
• Right to erasure — request deletion of your personal data ("right to be forgotten").
• Right to restriction — request that we limit processing of your data in certain circumstances.
• Right to data portability — request your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at contact@softteam.io. We will respond within 30 days.

You also have the right to lodge a complaint with the relevant supervisory authority: the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee) or the Polish Personal Data Protection Office (Urząd Ochrony Danych Osobowych, uodo.gov.pl).

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. However, no internet transmission is entirely secure, and we cannot guarantee absolute security.

10. Links to Other Websites

This website may contain links to third-party websites. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies independently.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect the most recent revision. Continued use of the website after changes constitutes acceptance of the updated policy.

12. Contact

For any questions about this Privacy Policy or your personal data, please contact us: