Privacy policy
1. Who we are (data controller)
The controller of your personal data within the meaning of Regulation (EU) 2016/679 (the "GDPR") is TENFOUR TECH SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, entered in the Polish National Court Register (KRS) under number 0001253910, with its registered office at Kamienna 12/33, 31-403 Kraków, Poland ("TenFour Tech", "we").
Contact on data-protection matters: info@10-4.tech or by post to the address above.
2. What data we collect
- Inquiry and access-request data — name, organization, work email, phone number, and the content of your message when you contact us or request a demonstration.
- Verification data — information needed to confirm eligibility for access to controlled technology (e.g. professional affiliation, country of establishment), where legally required.
- Technical data — server logs (IP address, time of access, requested resource) generated when you visit this site. This site sets no analytics or advertising cookies.
- Evaluation data — flight-log or sensor data your organization expressly shares with us for a demonstration or integration. We treat any incidental personal data it contains under this policy.
Providing contact data is voluntary, but without it we cannot respond to an inquiry or arrange a demonstration.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Responding to inquiries and demo requests | Art. 6(1)(b) — steps prior to entering into a contract; Art. 6(1)(f) — our legitimate interest in business communication |
| Verifying eligibility and export-control screening | Art. 6(1)(c) — compliance with legal obligations; Art. 6(1)(f) — legitimate interest in lawful technology transfer |
| Conducting demonstrations and evaluations | Art. 6(1)(b) — performance of a contract or pre-contractual steps |
| Site security and server logs | Art. 6(1)(f) — legitimate interest in securing our services |
| Establishing, exercising or defending legal claims | Art. 6(1)(f) — legitimate interest |
We do not use your data for advertising, profiling, or automated decision-making producing legal effects.
4. Recipients of data
Access to personal data is limited to authorized TenFour Tech personnel. We may share data with: (a) IT and hosting providers acting as processors under Art. 28 GDPR agreements; (b) professional advisers (legal, accounting) bound by confidentiality; and (c) public authorities where disclosure is required by law, including export-control review. We do not sell or rent personal data.
Imagery and telemetry captured during demonstrations do not leave the instrumented range without written authorization from the participating program.
5. Transfers outside the EEA
We store data within the European Economic Area. If a transfer outside the EEA becomes necessary (e.g. a service provider), it will take place only under Chapter V GDPR safeguards — an adequacy decision or the European Commission's Standard Contractual Clauses — and we will inform you where required.
6. Retention
- Inquiry correspondence — up to 24 months after the last contact, unless a business relationship follows.
- Contract and evaluation records — for the duration of the relationship and thereafter for the limitation periods of legal claims and tax-law retention duties.
- Eligibility and export-control records — for the period required by applicable law.
- Server logs — up to 12 months.
After these periods data is deleted or anonymized.
7. Your rights
Under Arts. 15–21 GDPR you have the right to:
- access your data and obtain a copy;
- rectify inaccurate or incomplete data;
- erasure ("right to be forgotten"), where applicable;
- restriction of processing;
- data portability, for data processed on the basis of contract;
- object to processing based on our legitimate interests, on grounds relating to your particular situation.
To exercise any right, write to info@10-4.tech. We respond within one month (Art. 12(3) GDPR).
You also have the right to lodge a complaint with the supervisory authority: the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, PUODO), ul. Stawki 2, 00-193 Warsaw, Poland — uodo.gov.pl.
If you are located in another EU/EEA country, you may instead lodge a complaint with the supervisory authority of your place of habitual residence, place of work, or place of the alleged infringement (Art. 77 GDPR). The full list of national authorities is available at edpb.europa.eu.
8. Cookies
This site does not set analytics, advertising, or tracking cookies. Only technically necessary storage may be used to deliver the page you requested.
9. Controlled technology
10-4 is controlled technology. Access to technical materials and demonstrations is restricted to verified, eligible parties and may be subject to export-control review. Submitting an inquiry does not guarantee access.
10. Sanctions compliance
We do not provide services, transfer technology, or enter into any business relationship with persons or entities located in, organized under the laws of, or ordinarily resident in countries or territories subject to comprehensive international sanctions or embargoes, or with persons designated on applicable sanctions lists (including those of the EU, UN, and OFAC). Especially Russia.
Inquiries originating from such countries or persons will not be processed beyond what is necessary to document the refusal and comply with the law.
11. Changes to this policy
We may update this policy as the program evolves or the law requires. The current version is always published on this page with its "last updated" date.
← Back to 10-4 Tech