Privacy Policy
Effective from: 1 November 2026
This policy explains what personal data we process in connection with the neohumanoidx.eu website, why we process it, and what rights you have. It provides the information required by Article 13 of Regulation (EU) 2016/679 (GDPR).
1. Controller
The controller is NEOHUMANOIDX sp. z o.o., ul. Żelazna 51/53, 00-841 Warsaw, Poland. The company is entered in the Polish National Court Register (KRS) under no. 0001233636; NIP (tax ID) 5273213401, REGON 544442082.
Contact on data protection matters: kontakt@neohumanoidx.eu, or by post to our registered office.
We have not appointed a Data Protection Officer.
2. In short
- There are no forms on this website. You can contact us only by e-mail.
- We use no analytics, advertising or tracking tools, and no cookies for such purposes.
- The website runs on Cloudflare infrastructure, which technically processes visitors' data such as IP addresses.
3. What data, for what purpose, on what legal basis
a) E-mail correspondence (kontakt@neohumanoidx.eu, contact@neohumanoidx.eu)
When you write to us, we process the data in your message: e-mail address, name, organisation, the content of the message and any other data you provide. Messages sent to kontakt@neohumanoidx.eu or contact@neohumanoidx.eu are automatically forwarded (Cloudflare Email Routing) to the company's internal mailbox.
- Purpose: answering your inquiry, preparing an offer or taking other steps before entering into a contract, and maintaining business contacts.
- Legal basis: Art. 6(1)(b) GDPR (steps taken at your request before entering into a contract) and Art. 6(1)(f) GDPR (our legitimate interest in answering correspondence and maintaining business relations, including with people representing our business partners).
- Retention: for as long as needed for the correspondence. After that, where justified, until the limitation period for possible claims expires (Art. 118 of the Polish Civil Code). If the correspondence becomes part of the documentation of a concluded contract, we keep it for the period required by law, e.g. tax and accounting rules (Art. 6(1)(c) GDPR).
b) Server logs and security
Whenever you visit the website, our hosting and CDN provider Cloudflare automatically processes technical data: IP address, date and time of the request, requested URL, browser and operating system type (user agent), and referring page.
- Purpose: delivering the website, keeping it secure and available (e.g. protecting it against attacks), and diagnosing errors.
- Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in a secure, properly functioning website).
- Retention: we receive no raw request logs, only aggregate statistics in the Cloudflare dashboard. Cloudflare keeps technical data for as long as needed to deliver and protect the service, under its own terms and privacy policy.
If Cloudflare's security system finds traffic suspicious, it may show a short browser check and set the cf_clearance cookie (see section 6).
c) Restricted /preview area (Cloudflare Access)
The /preview section is not public. Only authorised members of our team and collaborators can access it. When someone signs in, we process their e-mail address, sign-in and access data (date, time, IP address, verification result) and a session identifier stored in the CF_Authorization cookie.
- Purpose: access control and protection of non-public materials.
- Legal basis: Art. 6(1)(f) GDPR (protecting our resources and information), and for people we have a contract with, also Art. 6(1)(b) GDPR.
Sign-in uses a one-time code sent by e-mail.
- Retention: for as long as the person has access rights. Cloudflare Access logs are kept for 24 hours, and configuration change (administrator audit) logs for 18 months.
d) Analytics
We do not use analytics tools (e.g. Google Analytics) or advertising tools.
4. Recipients
Your data may be received by service providers that process it on our behalf:
- Cloudflare, Inc. (USA): website hosting (Cloudflare Pages), CDN and protection, e-mail forwarding (Email Routing) and access control (Cloudflare Access);
- a hosting provider based in Poland (EEA): hosting of the company's internal mailbox;
- where needed, our IT, accounting and legal service providers.
We may also disclose data to public authorities where the law requires it.
5. Transfers outside the European Economic Area
Cloudflare, Inc. is based in the USA, so data may be processed outside the EEA. Cloudflare, Inc. participates in the EU-U.S. Data Privacy Framework, and transfers rely on the European Commission's adequacy decision (Commission Implementing Decision (EU) 2023/1795 of 10 July 2023). Information on Cloudflare's participation in the Data Privacy Framework is available at dataprivacyframework.gov.
6. Cookies and browser storage
Under Article 399 of the Polish Electronic Communications Law of 12 July 2024 (Prawo komunikacji elektronicznej), storing information on your device or accessing it requires your consent, unless this is strictly necessary to provide a service you use. Our website uses only such strictly necessary mechanisms:
| Name | Type | Purpose | Who it affects | Duration |
|---|---|---|---|---|
| nx-ck | browser local storage (localStorage) | remembers that you closed the privacy notice | visitors who clicked "OK" | until you clear your browser data |
| cf_clearance | Cloudflare cookie | confirms that the browser passed a security check | only visitors shown a check | 30 minutes |
| CF_Authorization | Cloudflare Access cookie | keeps the signed-in session for /preview | authorised team members only | 24 hours |
We use no analytics, marketing or ad-network cookies. You can delete these entries at any time in your browser settings. The website will keep working, though the storage notice may appear again.
7. Your rights
You have the right to:
- access your data and receive a copy (Art. 15 GDPR);
- rectification (Art. 16);
- erasure (Art. 17);
- restriction of processing (Art. 18);
- data portability, for data processed by automated means on the basis of a contract (Art. 20);
- object to processing based on our legitimate interests, i.e. Art. 6(1)(f) GDPR (Art. 21). We will then stop processing the data for that purpose unless we demonstrate compelling legitimate grounds that override your interests, or the processing is needed to establish, exercise or defend legal claims.
To exercise your rights, write to kontakt@neohumanoidx.eu.
You can also lodge a complaint with the supervisory authority: the President of the Personal Data Protection Office (Prezes UODO), ul. Moniuszki 1A, 00-014 Warsaw, Poland, uodo.gov.pl.
8. Providing data is voluntary
Providing your data is voluntary, but we cannot reply to your message without an e-mail address. Technical data (e.g. IP address) is processed automatically, because the website cannot be displayed without it.
9. No automated decision-making
We do not make decisions about you based solely on automated processing, including profiling, within the meaning of Art. 22 GDPR.
10. External links
The website contains links to other services, e.g. Unitree, Hugging Face, GitHub, arXiv and LinkedIn. Once you follow them, their owners' privacy policies apply. We are not responsible for how those services process data.
11. Changes to this policy
We may update this policy, e.g. when our services or the law change. The current version is always available on this page, and the date at the top shows when it took effect.