Privacy policy

Heuresia is the controller of the personal data described here. We are based in Warsaw, Poland, and this policy follows the EU General Data Protection Regulation (GDPR). Questions about it go to hello@heuresia.com.

Most of it you give us directly:

• Contact form: your name, email address, organisation, the lane you picked (investor, pharma, lab, scientist, candidate, press or other) and your message.
• Job applications: the role you are applying for, links you share (portfolio, LinkedIn, GitHub, publications) and anything you attach or write.
• Newsletter: your email address.
• Email: when you write to one of our addresses, the contents and metadata of that email.

The rest is technical. Our hosting provider records server logs (IP address, browser type, pages requested, timestamps) to keep the site running and secure. We do not run advertising trackers or profiling on this site.

• To answer your enquiry and take any next steps you asked for. Basis: our legitimate interest in running the company, or steps taken at your request before a contract (Article 6(1)(f) and (b) GDPR).
• To assess job applications. Basis: steps taken at your request before a contract, and Polish labour law. We keep an application for future roles only with your consent.
• To send the newsletter you signed up for. Basis: your consent, which you can withdraw at any time with the unsubscribe link.
• To keep the site secure and diagnose faults. Basis: our legitimate interest.

We do not sell personal data, and we make no automated decisions about you that have legal or similarly significant effects.

• Enquiries: up to 12 months after our last exchange, longer if we go on to work together.
• Applications: for the length of the recruitment process and up to 6 months after it closes. With your consent, up to 12 months for future roles.
• Newsletter: until you unsubscribe.
• Server logs: for the period set by our hosting provider, typically 30 to 90 days.

Records we must keep by law, for example for accounting, are kept for the statutory period.

People at Heuresia who need it to respond to you. Beyond that, providers who process data on our behalf under contract: hosting, email, form handling and newsletter delivery. Some of these are outside the European Economic Area. Where that is the case we rely on adequacy decisions or the European Commission’s standard contractual clauses. We disclose data to authorities only where the law requires it.

This site sets no cookies for tracking or advertising. It may store a small amount of data in your browser to remember interface preferences. Our email and newsletter providers may use their own cookies on their own pages; their policies apply there.

Under the GDPR you can ask us to:

• Show you the data we hold about you, and give you a copy.
• Correct it, delete it, or restrict how we use it.
• Hand it over in a portable format.
• Stop processing it where we rely on legitimate interest.
• Withdraw consent where we rely on it, without affecting what was done before.

Write to hello@heuresia.com. We answer within one month. You can also complain to the Polish supervisory authority, the President of the Personal Data Protection Office (Urząd Ochrony Danych Osobowych), or to the authority in your own EU country.

This site is not aimed at anyone under 16 and we do not knowingly collect their data. If you think a child has given us data, tell us and we will delete it.

We update this page when our practices change. The date at the top is the date of the current version. Substantive changes to how we use data you have already given us are announced by email where we have your address.

Heuresia, Warsaw, Poland. hello@heuresia.com.