Privacy policy
Effective from 2 October 2026.
This policy explains what personal data we process when you use anti-slip.io, for what purposes and on what legal basis, who we share it with, how long we keep it and what rights you have. It also describes the cookies and similar technologies used on the website. A short summary is available in our GDPR information notice.
1. Data controller
The controller of your personal data is Robert Chmura, running a business under the name e-nubes Robert Chmura, ul. Wierzbowa 22, 64-930 Dolaszewo, Poland, tax ID (NIP) 7641974691 ("we", "us").
You can contact us about personal data:
- by email: service@anti-slip.io,
- by phone: +48 882 186 624,
- by post: e-nubes Robert Chmura, ul. Wierzbowa 22, 64-930 Dolaszewo, Poland,
- through the contact form.
We have not appointed a data protection officer, as we are not required to (Article 37 GDPR).
2. What data we process
"Request a call" form - your first name, email address and phone number.
"Send a message" form - your first name, email address and your message, including any data you put in it (for example the name of a building or a description of a floor).
With every form we also record the page it was sent from, the language version and the date and time it was sent. We use your IP address briefly to protect the forms from spam (see section 3).
Correspondence and calls - the data you give us by email or phone and, if we work together, the data needed to prepare a quote, carry out the work and issue an invoice.
Analytics and advertising data (only with your consent) - identifiers stored in cookies, information about your device and browser, approximate location derived from your IP address, the pages you visit, where you came from (for example a search engine or an ad) and events on the website, such as sending a form or clicking our phone number or email address.
Technical data - every time a page is requested, the hosting server automatically logs the request (including the IP address, date and time, page address and browser type).
Giving us your data in a form is voluntary, but without your name and contact details we cannot reply. Please do not send us special categories of data (for example health data) unless it is necessary.
3. Purposes, legal bases and retention
Replying to your request or message and preparing a quote, trial or test
Legal basis: Article 6(1)(b) GDPR (steps taken at your request before entering into a contract). If you write on behalf of a company or institution - Article 6(1)(f) GDPR (our legitimate interest in answering enquiries and contacting the people who represent our clients).
Retention: until the matter is closed and, if we do not go on to work together, no longer than 12 months after our last contact.
Automatic confirmation sent to the email address given in the form
Legal basis: Article 6(1)(f) GDPR (letting you know we have received your enquiry and what happens next).
Retention: as for the enquiry itself.
Protecting the forms from spam (Google reCAPTCHA and a limit on submissions from one IP address)
Legal basis: Article 6(1)(f) GDPR (security of the website).
Retention: the IP address used for the submission limit is kept only in the server's memory, for 10 minutes; reCAPTCHA data is processed by Google as described in section 4.
Entering into and performing a contract for our services (for example anti-slip treatment, testing or cleaning)
Legal basis: Article 6(1)(b) GDPR and, for people representing a client, Article 6(1)(f) GDPR.
Retention: for the term of the contract and then until any claims become time-barred.
Invoicing, tax and accounting
Legal basis: Article 6(1)(c) GDPR (obligations under tax and accounting law).
Retention: for as long as those laws require, as a rule 5 years from the end of the calendar year in which the tax payment was due.
Establishing, pursuing or defending legal claims
Legal basis: Article 6(1)(f) GDPR.
Retention: until the claims become time-barred.
Visitor statistics (Google Analytics 4)
Legal basis: your consent - Article 6(1)(a) GDPR and Article 399 of the Polish Electronic Communications Law (Prawo komunikacji elektronicznej).
Retention: until you withdraw your consent; Google Analytics keeps the data for 14 months.
Measuring and personalising Google ads (Google Ads)
Legal basis: your consent - Article 6(1)(a) GDPR and Article 399 of the Polish Electronic Communications Law.
Retention: until you withdraw your consent; the cookies expire after the periods given in section 6.
Running the website securely and remembering your cookie choice
Legal basis: Article 6(1)(f) GDPR (a working, secure website).
Retention: server logs for a short period set by the hosting provider; your cookie choice for 6 months.
You can withdraw your consent at any time with the "Cookie settings" link in the footer. Withdrawing consent does not affect the lawfulness of processing carried out before it was withdrawn.
4. Who we share data with
We do not sell personal data. We share it only with the companies that help us run the website and our business, and only as far as they need it for their work:
- Railway Corporation (USA) - website hosting,
- Resend (Plus Five Five, Inc., USA) - sending the emails from the contact forms and the confirmations,
- Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) - Google Tag Manager, Google Analytics, Google Ads, Google reCAPTCHA and Google Maps,
- the provider of our email and IT services, where our correspondence is stored,
- if we work together: our accountants, lawyers and courier and postal companies,
- public authorities, where the law requires it.
For advertising and reCAPTCHA, Google may also act as a separate controller. How Google processes data is described in the Google Privacy Policy and on the page How Google uses information from sites or apps that use its services.
5. Transfers outside the European Economic Area
Railway, Resend and Google (Google Ireland Limited and its parent company Google LLC) are based in, or use infrastructure in, the United States, so data may be transferred outside the European Economic Area. Such transfers rely on the European Commission's adequacy decision (EU-US Data Privacy Framework) for organisations certified under it, or on standard contractual clauses approved by the European Commission (Article 46(2)(c) GDPR). You can ask for a copy of these safeguards at service@anti-slip.io.
6. Cookies and similar technologies
Cookies are small text files stored by your browser. On your first visit we ask for your consent to the cookies that are not strictly necessary. Until you give it, no analytics or advertising cookies are stored. You can change your choice at any time with the "Cookie settings" link in the footer; withdrawing consent removes those cookies from your browser.
Necessary - the website needs them to work, so they do not require consent (Article 399(3) of the Polish Electronic Communications Law):
| Name | Provider and purpose | Expires |
|---|---|---|
cc_cookie | anti-slip.io - remembers your cookie choice | 6 months |
NEXT_LOCALE | anti-slip.io - remembers the language when you switch it | when you close the browser |
theme | anti-slip.io (browser storage) - remembers the light or dark theme when you choose one | until deleted |
_GRECAPTCHA | Google reCAPTCHA - protects the forms from spam and bots | 6 months |
Analytics (with your consent) - show us how many people visit the website, what they read and where they come from:
| Name | Provider and purpose | Expires |
|---|---|---|
_ga | Google Analytics - tells visitors apart | 2 years |
_ga_* | Google Analytics - keeps the session state | 2 years |
Advertising (with your consent) - let us measure how well Google ads work (for example whether a form was sent after an ad was clicked) and show ads that match your interests:
| Name | Provider and purpose | Expires |
|---|---|---|
_gcl_* | Google Ads - records an ad click | 90 days |
We use Google Consent Mode. If you do not consent to analytics or advertising cookies, Google tags store no cookies and send no identifiers, but they may send Google basic signals without identifiers (for example that a page was viewed), which are used to estimate statistics in aggregate. When you arrive from a Google ad, the information about the ad click may be passed in the page address instead of a cookie.
The Google map on the contact page and in the contact section loads from Google's servers when you scroll to it. Google then receives your IP address and browser information and may use its own cookies as described in the Google Privacy Policy.
You can also block or delete cookies in your browser settings. Blocking the necessary cookies may, however, stop parts of the website from working, such as the forms.
7. Your rights
You have the right to:
- access your data and receive a copy of it (Article 15 GDPR),
- have your data corrected (Article 16 GDPR),
- have your data erased (Article 17 GDPR),
- restrict processing (Article 18 GDPR),
- data portability for data we process on the basis of your consent or a contract (Article 20 GDPR),
- object to processing based on our legitimate interest (Article 21 GDPR),
- withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal,
- lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl), or with the supervisory authority in your EU country of residence.
To exercise your rights, write to service@anti-slip.io or to the postal address in section 1. We will reply without undue delay and within one month at the latest. In particularly complex cases this may be extended by a further two months, and we will let you know.
8. Automated decisions and profiling
We do not make decisions about you based solely on automated processing that produce legal effects or similarly significantly affect you. If you consent to advertising cookies, Google may tailor the ads you see to your interests. This has no legal effect on you.
9. Data security
Connections to the website are encrypted (HTTPS). Form submissions go straight to our company inbox and are not stored in a website database. Only the people who need the data to handle an enquiry or a job can access it. We use providers that apply appropriate technical and organisational safeguards.
10. Links to other websites
The website links to other sites, including our shop at e-nubes.com and our Facebook, Instagram and LinkedIn profiles. We do not embed their plugins, so they receive no data until you click a link. Once you are on another website, its own privacy policy applies.
11. Changes to this policy
We update this policy when the way the website processes data or the law changes. The current version, with its effective date, is always available on this page. If a change concerns cookies that need consent, we will ask for your consent again.