Who we are
This policy is issued by Glitch Group sp. z o.o., ul. Gen. Romana Abrahama 12/47, 03-984 Warszawa, Poland, entered in the National Court Register (KRS) under number 0001259140, NIP 1133209188, REGON 545430773 ("Glitch Group", "we", "us"). iPro.One is a brand of Glitch Group, run as a film and series production studio. Glitch Group is the controller of the personal data described on this page.
Questions about this policy or about your data can be sent toover@ipro.one. We have not appointed a Data Protection Officer; this address reaches the person responsible for privacy.
What this policy covers
It explains what happens to personal data when you visit ipro.one, send us a message through one of its forms, open the investor area or watch a film embedded on the site. It covers the English, Polish and Chinese versions alike.
Data we process and why
Contact form
The form on the Contact page asks for your name, email address, the topic of your message and the message itself; company and timeline are optional. We use them only to read and answer your message. Legal basis: our legitimate interest in answering messages sent to us (Art. 6(1)(f) GDPR) or, when you ask about working with us, steps taken at your request before a contract (Art. 6(1)(b) GDPR).
Booking brief form
The brief form on the Booking page asks for your name, email address, company (optional), the service you are interested in, a timeline, a budget band and a short description of your goal. We use them to assess the request and prepare a proposal. Legal basis: Art. 6(1)(b) and (f) GDPR, as above.
How a message reaches us
Both forms send your entries to our own address, /api/contact, a Cloudflare Pages Function on our domain. It checks the entries and passes them on, server to server, to Formspree, which delivers them to our mailbox. The site itself keeps no copy of your message; the function records only whether the delivery succeeded and which form was used, never what you wrote. A hidden field that people never see helps us filter out automated spam.
Calendly
The Booking page has a button that opens our Calendly scheduling page in a new tab. Nothing from Calendly loads on our site. If you follow the link and book a call, Calendly processes your booking under its own privacy policy.
Hosting and security logs
The site is hosted on Cloudflare Pages. To deliver pages and protect the site against abuse, Cloudflare processes standard connection data such as your IP address, browser type and the time of each request. Legal basis: our legitimate interest in a secure, reliable service (Art. 6(1)(f) GDPR).
Investor area
The pages under /investors are protected by a password. When you enter the correct password, our server sets one cookie that keeps the area open for 24 hours (see the table below). The cookie holds only its expiry time and a signature; it contains no personal data, and we do not store the password you type.
Fonts, films and images
All fonts, background films, posters, partner logos and sounds are served from our own domain. We do not load fonts from Google Fonts or any other font service; Chinese text uses the fonts already installed on your device.
Some film stills on the home, Work and Booking pages are loaded from YouTube's image server (i.ytimg.com, operated by Google). To show them your browser connects to that server, which therefore receives your IP address and basic browser data. We ask your browser not to send the address of our page with these requests, and they set no cookies. Legal basis: our legitimate interest in showing our own films (Art. 6(1)(f) GDPR).
YouTube videos
Films play through YouTube in its privacy-enhanced mode (youtube-nocookie.com). The player is not loaded until you click play. From that moment your browser connects to YouTube, and Google's own cookies, storage and privacy policy apply to that connection; seepolicies.google.com/privacy (opens in a new tab).
Analytics
The site is prepared for Cloudflare Web Analytics, which we may switch on to see aggregated page views and load times. It works without cookies and without any identifier stored on your device, and it does not follow you across other websites. When it is switched on, your browser loads a small script from static.cloudflareinsights.com. At the date of this version it is not active.
Cookies and local storage
We use no advertising, tracking or analytics cookies. The site stores only the small technical entries listed below, none of which identifies you or is shared with anyone. Session storage is cleared when you close the tab; local storage stays until you clear your browser data.
| Name | Purpose | Duration | Essential |
|---|---|---|---|
punica_accessCookie, HttpOnly, only on /investors | Keeps the investor area open after you enter the password. | 24 hours | Yes |
ipro-intro-seenLocal storage | Plays the home page intro only on your first visit. | Until you clear site data | Yes |
ipro-profileSession storage | Performance level measured by the intro (ULTRA, HIGH or LITE); on LITE the site shows posters instead of background films. | Until the tab is closed | Yes |
ipro-belt-t0, ipro-belt-off-0, ipro-belt-off-1Session storage | Keeps the partner and client belts moving smoothly from page to page. | Until the tab is closed | Yes |
ipro-localeLocal storage | Remembers the language of the site you last used. | Until you clear it | Yes |
ipro-locale-hint-closedLocal storage | Remembers that you closed or used the language suggestion, so it does not come back. | Until you clear it | Yes |
| YouTubeThird party, set by Google | Set by YouTube only after you click play on a film. | Set by Google | No, only on your click |
Because the site stores only what it needs to work as you asked, and nothing for analytics or advertising, we do not show a cookie banner. You can delete all of these entries at any time in your browser settings; the site keeps working, it will simply play the intro again and forget your language.
Who receives your data
Depending on which part of the site you use, your data may reach:
- Formspree, Inc., which delivers messages sent through our forms to our mailbox.
- Cloudflare, Inc., which hosts and secures the site and, when switched on, provides Web Analytics.
- Google LLC and Google Ireland Limited, which serve the YouTube film stills and, after your click, the YouTube player.
- Calendly LLC, only if you follow the link to our scheduling page.
Formspree and Cloudflare act as our processors under Art. 28 GDPR. Google, for YouTube, and Calendly act as independent controllers for your interaction with their services.
International transfers
Formspree, Cloudflare, Google and Calendly are based in the United States and may process data outside the European Economic Area. Such transfers rely on the safeguards recognised by the GDPR, such as the EU-US Data Privacy Framework or standard contractual clauses, as offered by each provider.
Note for legal review: confirm the transfer mechanism currently offered in the Formspree and Cloudflare data processing agreements before publication.
How long we keep your data
- Messages from the forms: as long as needed to answer and follow up, then up to 12 months in case you get back in touch. If a contract follows, the accounting retention rules apply (generally 5 years under Polish law).
- Hosting and security logs: a short period under Cloudflare's standard retention, used only to deliver and protect the site.
- Entries in your browser: as listed in the table above.
Note for legal review: confirm the exact retention periods against the current Formspree and Cloudflare terms.
Your rights
Under the GDPR you may access your data, have it corrected or erased, restrict or object to its processing, receive it in a portable format and, where processing is based on consent, withdraw that consent at any time. To use any of these rights, write toover@ipro.one. You may also lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, or with the supervisory authority of your own EU country.
Children
The site is not directed at children, and we do not knowingly collect personal data from anyone under 16.
Automated decisions
We do not use your data for automated decisions or profiling with legal or similarly significant effects.
Security
The whole site runs over encrypted HTTPS behind Cloudflare's security services, form secrets stay on the server, and the investor cookie is signed, HttpOnly and sent only over HTTPS.
Changes to this policy
We will update this policy when the site or the way it handles data changes. The version date at the top shows the latest revision.
Contact
Any question about this policy or your personal data:over@ipro.one, Glitch Group sp. z o.o., ul. Gen. Romana Abrahama 12/47, 03-984 Warszawa, Poland.
