Privacy notice

Last updated: 26 October 2026.

Who is responsible

Bartlomiej Baran Ventures Limited is the data controller. Mitigon is our brand. Our company number is 766025 and our registered office is Loughanmore, Castlebellingham, Co. Louth, Ireland.

For privacy questions or requests, email contact@mitigon.com.

Enquiries

When you submit the form, we receive your name, email address, optional company name and message. We use this information to reply, assess the proposed work and discuss a possible engagement.

Our legal basis is our legitimate interest in responding to business enquiries and developing relevant business relationships. Where you ask us to take steps towards a contract with you personally, we also rely on those pre-contract steps.

Providing information is voluntary. We need a name, reply address and message to handle a form enquiry. Do not include confidential documents, health information or personal data about other people.

How the form and email work

Cloudflare hosts the website and processes form submissions through a Worker. Its email service delivers the message to our Proton Mail inbox. Bartek reviews and replies to enquiries. The form does not create an account or store a separate copy in a website database.

Cloudflare processes connection information, such as IP addresses, request details and timestamps, to deliver and secure the service. The form uses temporary IP-based rate limits to reduce abuse. We do not put message content into application logs. Our legal basis for security processing is our legitimate interest in protecting the website and inbox.

Website analytics and cookies

We use Plausible Cloud to understand which pages visitors use and which external links they follow. It processes page paths, referral information, browser and device information, approximate location and event data. We do not send form fields or message content to Plausible.

Plausible does not use cookies or persistent visitor identifiers. It uses the IP address and browser information to calculate a daily identifier, without storing the raw IP address or browser string. Plausible states that visitor analytics data is processed and stored in the EU.

Our purpose is to improve the website using traffic statistics. Where the initial processing involves personal data, we rely on our legitimate interest in measuring website use with limited data. We do not use advertising trackers or session recordings.

The site code does not set cookies or use browser storage. Our hosting provider may use strictly necessary security technology. See Plausible’s data policy for its processing details.

Free tools

The RPN calculator performs calculations in your browser. We do not receive the entered scores as a form submission. A share link includes the scores and thresholds in its URL, so anyone you send that link to can see them. URLs can also appear in browser history and hosting request records. Do not place personal or confidential information in a share link.

Providers and international transfers

Our service providers are Cloudflare for hosting, security, form processing and email delivery; Proton Mail for our inbox; and Plausible for website analytics. They and their subprocessors process the information needed to provide those services. We may also disclose relevant records where required by law or needed to establish, exercise or defend legal claims.

Cloudflare operates a global network, so processing may take place outside the European Economic Area. Its data processing terms provide transfer safeguards, including standard contractual clauses where applicable. Proton AG is based in Switzerland. Proton states that its mail servers are in Switzerland, Germany and Norway. Switzerland has an EU adequacy decision.

For provider details, see Cloudflare’s data processing terms and Proton Mail’s privacy policy. You can contact us for information about the safeguards relevant to your data.

How long we keep information

• Enquiries that do not become client work: six months after the last meaningful contact, unless a specific legal obligation or dispute requires longer retention.
• Client records: for the engagement and as needed for support, legal obligations and legal claims. Accounting records are generally kept for at least six years after the relevant financial year.
• Technical and delivery records: for the period needed to deliver the service, prevent abuse and investigate incidents, subject to the providers’ retention arrangements. We do not maintain a separate enquiry log or submission database.
• Analytics: while needed to compare website performance over time. We review their continued usefulness and delete site data when no longer needed. Plausible deletes the salt used for daily visitor identifiers every 24 hours; this is separate from retention of analytics records.

Deletion from an active inbox may take longer to reach provider backups. Proton states that its backups are kept for up to 30 days.

Your rights

Depending on the circumstances, you can request access, correction, deletion, restriction or portability of your personal data. You can object to processing based on legitimate interests. We may need information to confirm your identity before responding.

You can complain to the Irish Data Protection Commission or the supervisory authority where you live or work. You do not need to contact us first.

We do not use website enquiries to make decisions with legal or similarly significant effects based solely on automated processing. Submitting an enquiry does not subscribe you to marketing.

Changes

We update this notice when our processing changes. The date above identifies the current version.