Privacy Policy

Last updated: September 2026

§ 1. Administrator of Personal Data

The data controller for personal data collected via optingo.eu is Optingo Digital Sp. z o.o., 181B Jerozolimskie Ave., 02-222 Warsaw. Email: sales@optingo.eu. VAT ID: PL7011048379. KRS: 0000915658.

The controller has not appointed a data protection officer. For all matters concerning the protection of personal data, please contact sales@optingo.eu.

We care about the security of the data entrusted to us. We process it in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Polish law.

§ 2. Purposes and Legal Bases of Data Processing

PurposeLegal basisRetention
Contact form queriesArticle 6(1)(b) GDPRUntil consideration + 3 years
Implementation and consulting servicesArticle 6(1)(b) GDPRContract duration + 5 years
Marketing communication — individuals who have given consentArticle 6(1)(a) GDPR — consentUntil consent withdrawn
Direct marketing of our own services to business contactsArticle 6(1)(f) GDPR — legitimate interestUntil objection is raised, no longer than 4 years from last contact
Website traffic analysisArticle 6(1)(f) GDPR26 months
RemarketingArticle 6(1)(a) GDPR — consentUntil consent withdrawn
Handling of GDPR rights requestsArticle 6(1)(c) GDPR3 years from resolution
Legal complianceArticle 6(1)(c) GDPRPer applicable law

The legal basis for processing data for marketing purposes depends on how the data was obtained:

  • Consent — where the user has given their own consent to receive marketing information. Consent may be withdrawn at any time, without affecting the lawfulness of processing carried out before its withdrawal.
  • Legitimate interest — where the data of a contact person representing a business entity was obtained in connection with B2B activity, for example at industry events, through business contacts or from publicly available industry sources. The controller’s legitimate interest is direct marketing of its own services, as indicated in recital 47 GDPR. The right to object may be exercised at any time — once raised, the data will no longer be used for this purpose.

Regardless of the legal basis, commercial information is sent electronically in accordance with the regulations on the provision of electronic services and electronic communications law.

The controller maintains a register of consents given and withdrawn, and of objections raised, including the date, scope and manner in which they were submitted.

§ 3. Recipients of Data

Personal data may be transferred to the following categories of recipients:

  • IT and hosting service providers — Cloudflare, Inc. (website infrastructure)
  • CRM system provider — Creatio (storage and processing of contact data)
  • Analytical and marketing tool providers — Google LLC (Google Analytics, Google Ads), Meta Platforms Ireland Ltd. (Facebook Pixel), LinkedIn Ireland (Insight Tag), Matomo (traffic analytics)
  • Email and marketing automation providers
  • Accounting and legal service providers — to the extent necessary
  • Public bodies — where legally required

Use of artificial intelligence tools. Within the CRM system, the controller uses artificial intelligence features provided by the system vendor (Creatio.ai) to support the handling of enquiries and the work of the sales team. Data processed by these features may include the content of enquiries and contact data.

These features support human work and do not independently make decisions producing legal effects or similarly significantly affecting the individuals concerned. No automated decision-making within the meaning of Article 22 GDPR takes place.

§ 4. Transfer of Data Outside the EEA

Some suppliers (including Google LLC, Meta Platforms) are based in the United States. Data may be transferred to third countries under a European Commission adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses approved by the European Commission. A copy of the safeguards can be obtained at sales@optingo.eu.

§ 5. User Rights

Data subjects have the following rights:

  • Right of access
  • Right to rectification
  • Right to erasure (right to be forgotten)
  • Right to restriction of processing
  • Right to data portability
  • Right to object
  • Right to withdraw consent at any time

How to exercise these rights:

  • Withdrawal of marketing consent — via the „Unsubscribe" link in every marketing message or by email to sales@optingo.eu.
  • Objection to marketing — by email to sales@optingo.eu; actioned without delay and without the need to provide reasons.
  • Other rights — by email to sales@optingo.eu. A response is provided within one month of receiving the request; in complex cases this period may be extended by a further two months, of which the individual will be informed.

The controller may request additional information necessary to identify the person submitting the request.

You also have the right to file a complaint with the President of the Office for Personal Data Protection (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl).

§ 6. Cookie Files

optingo.eu uses cookies — small text files stored on the user’s device.

  • Necessary (always active) — required for the site to work, no consent needed.
  • Analytical — traffic analysis and quality improvement (Google Analytics 4 with IP anonymization, Matomo).
  • Marketing — tailored advertising and remarketing (Google Ads, Meta Pixel, LinkedIn Insight Tag).
  • Behavioral analytics — anonymized heat maps and session recordings.

Analytical and marketing scripts are loaded only after the relevant consent has been given in the cookie preferences panel. Consent can be changed or withdrawn at any time in the same panel or in the browser settings.

§ 7. Data Security

  • SSL/TLS connection encryption
  • Hashed password storage
  • Regular data backups
  • Software updates to the latest versions
  • Restricted access for authorized employees only

§ 8. Links to External Services

The site may contain links to external websites (e.g. LinkedIn, YouTube, the Creatio site). The controller is not responsible for the privacy policies of these websites.

§ 9. Changes to the Privacy Policy

The controller reserves the right to update this Privacy Policy. Changes take effect upon publication of the new version. Last update: September 2026.

Archived versions of the Privacy Policy, together with the dates on which they were in force, are retained by the controller and made available on request.

§ 10. Contact for Personal Data Matters

Email: sales@optingo.eu. Mail: Optingo Digital Sp. z o.o., 181B Jerozolimskie Ave., 02-222 Warsaw.

This privacy policy is effective from September 19, 2026. The previous version is available on request.