Privacy Policy

1. Data Controller

The controller of personal data is:

Piwi Femma Mariusz Kurczewski S.K.A.
ul. Pomorska 41
90-203 Łódź
NIP (Tax ID): 7252317668
e-mail: piwifemma@piwifemma.com.pl

Website: https://piwifemma.com.pl

2. Contact Form

When contacting us via the contact form, we process the following data:

  • first and last name,
  • e-mail address,
  • phone number (if provided),
  • message content.

Purpose of processing:

  • responding to your inquiry,
  • direct contact regarding the matter described in the form.

Legal basis:

  • Article 6(1)(a) GDPR (consent given by ticking the mandatory checkbox),
  • Article 6(1)(f) GDPR (legitimate interest of the controller consisting in handling inquiries).

Consent to be contacted is voluntary; however, failure to provide it makes it impossible to submit the form.

3. Marketing Communication (Newsletter)

If the user gives voluntary marketing consent in the form, we process:

  • e-mail address,
  • first name (if provided),
  • statistical data regarding message opens and clicks (campaign effectiveness analysis).

Purpose:

  • sending the newsletter,
  • providing information about services, promotions, and news.

Legal basis:

  • Article 6(1)(a) GDPR (consent),
  • Article 10 of the Polish Act on Providing Services by Electronic Means,
  • Article 172 of the Polish Telecommunications Law.

Consent may be withdrawn at any time via the “unsubscribe” link included in each e-mail or by contacting the Controller.

4. B2B Cold Mailing

We may process data of persons representing business entities (e.g., first name, last name, position, business e-mail address, phone number) for the purpose of establishing cooperation.

The data may come from publicly available sources (e.g., company websites, business registers, industry platforms).

Legal basis:

  • Article 6(1)(f) GDPR (legitimate interest of the controller consisting in conducting B2B sales activities).

The data subject has the right to object to the processing of their data for marketing purposes.

5. Recruitment

If a CV is sent by e-mail, we process the data contained in the application documents for the purpose of conducting the recruitment process.

Legal basis:

  • Article 6(1)(a) GDPR (consent),
  • Article 6(1)(c) GDPR (legal obligations under labor law).

Data is stored for the duration of the recruitment process.

6. Analytics and Online Marketing

The website uses the following tools:

  • Google Analytics 4
  • Google Tag Manager
  • Microsoft Clarity
  • Meta Pixel (Facebook)
  • LinkedIn Insight Tag
  • Google Ads
  • Apollo (identification of companies visiting the website – B2B)
  • GetResponse (e-mail marketing)

Purpose of processing:

  • website traffic analysis,
  • website optimization,
  • conducting advertising campaigns,
  • remarketing,
  • conversion tracking,
  • identification of companies visiting the website (within the scope of business data).

Data is processed only after obtaining the user’s consent via the cookie banner.

Legal basis:

  • Article 6(1)(a) GDPR (consent),
  • Article 173 of the Polish Telecommunications Law (consent to cookies).

Profiling for marketing purposes may be applied; however, it does not produce legal effects concerning the user.

7. reCAPTCHA

The website uses Google reCAPTCHA to protect forms against spam.

This may involve the processing of the IP address and technical data by Google.

Legal basis:

  • Article 6(1)(f) GDPR (legitimate interest consisting in protecting the website against abuse).

8. Cookies

The website uses cookies:

  • essential – ensuring proper operation of the website,
  • analytical – for traffic analysis,
  • marketing – for advertising activities.

Users may manage their consents via the cookie banner and may change their preferences at any time.

9. Data Recipients

Data may be transferred to entities supporting the Controller, in particular:

  • hosting providers,
  • IT service providers,
  • providers of analytical and marketing tools (Google, Meta, LinkedIn, Microsoft),
  • the e-mail marketing system provider (GetResponse),
  • the Apollo tool provider.

These entities process data on the basis of data processing agreements.

10. Data Transfers Outside the EEA

Due to the use of tools provided by Google, Meta, LinkedIn, Microsoft, Apollo, and GetResponse, data may be transferred outside the European Economic Area, including to the United States.

Transfers are based on:

  • the European Commission’s adequacy decision (EU–US Data Privacy Framework),
    or
  • Standard Contractual Clauses.

11. Data Retention Period

Data is stored:

  • for the duration of correspondence,
  • for the period of limitation of claims,
  • until consent is withdrawn (marketing),
  • in the case of recruitment – for the duration of the process,
  • analytical data – in accordance with tool settings.

12. Rights of the Data Subject

Each individual has the right to:

  • access their data,
  • rectify their data,
  • erase their data,
  • restrict processing,
  • object to processing,
  • withdraw consent at any time,
  • lodge a complaint with the President of the Personal Data Protection Office (Poland).