Privacy Policy
Last updated: September 2026
§ 1. Administrator of Personal Data
The data controller for personal data collected via optingo.eu is Optingo Digital Sp. z o.o., 181B Jerozolimskie Ave., 02-222 Warsaw. Email: sales@optingo.eu. VAT ID: PL7011048379. KRS: 0000915658.
The controller has not appointed a data protection officer. For all matters concerning the protection of personal data, please contact sales@optingo.eu.
We care about the security of the data entrusted to us. We process it in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Polish law.
§ 2. Purposes and Legal Bases of Data Processing
| Purpose | Legal basis | Retention |
|---|---|---|
| Contact form queries | Article 6(1)(b) GDPR | Until consideration + 3 years |
| Implementation and consulting services | Article 6(1)(b) GDPR | Contract duration + 5 years |
| Marketing communication — individuals who have given consent | Article 6(1)(a) GDPR — consent | Until consent withdrawn |
| Direct marketing of our own services to business contacts | Article 6(1)(f) GDPR — legitimate interest | Until objection is raised, no longer than 4 years from last contact |
| Website traffic analysis | Article 6(1)(f) GDPR | 26 months |
| Remarketing | Article 6(1)(a) GDPR — consent | Until consent withdrawn |
| Handling of GDPR rights requests | Article 6(1)(c) GDPR | 3 years from resolution |
| Legal compliance | Article 6(1)(c) GDPR | Per applicable law |
The legal basis for processing data for marketing purposes depends on how the data was obtained:
- Consent — where the user has given their own consent to receive marketing information. Consent may be withdrawn at any time, without affecting the lawfulness of processing carried out before its withdrawal.
- Legitimate interest — where the data of a contact person representing a business entity was obtained in connection with B2B activity, for example at industry events, through business contacts or from publicly available industry sources. The controller’s legitimate interest is direct marketing of its own services, as indicated in recital 47 GDPR. The right to object may be exercised at any time — once raised, the data will no longer be used for this purpose.
Regardless of the legal basis, commercial information is sent electronically in accordance with the regulations on the provision of electronic services and electronic communications law.
The controller maintains a register of consents given and withdrawn, and of objections raised, including the date, scope and manner in which they were submitted.
§ 3. Recipients of Data
Personal data may be transferred to the following categories of recipients:
- IT and hosting service providers — Cloudflare, Inc. (website infrastructure)
- CRM system provider — Creatio (storage and processing of contact data)
- Analytical and marketing tool providers — Google LLC (Google Analytics, Google Ads), Meta Platforms Ireland Ltd. (Facebook Pixel), LinkedIn Ireland (Insight Tag), Matomo (traffic analytics)
- Email and marketing automation providers
- Accounting and legal service providers — to the extent necessary
- Public bodies — where legally required
Use of artificial intelligence tools. Within the CRM system, the controller uses artificial intelligence features provided by the system vendor (Creatio.ai) to support the handling of enquiries and the work of the sales team. Data processed by these features may include the content of enquiries and contact data.
These features support human work and do not independently make decisions producing legal effects or similarly significantly affecting the individuals concerned. No automated decision-making within the meaning of Article 22 GDPR takes place.
§ 4. Transfer of Data Outside the EEA
Some suppliers (including Google LLC, Meta Platforms) are based in the United States. Data may be transferred to third countries under a European Commission adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses approved by the European Commission. A copy of the safeguards can be obtained at sales@optingo.eu.
§ 5. User Rights
Data subjects have the following rights:
- Right of access
- Right to rectification
- Right to erasure (right to be forgotten)
- Right to restriction of processing
- Right to data portability
- Right to object
- Right to withdraw consent at any time
How to exercise these rights:
- Withdrawal of marketing consent — via the „Unsubscribe" link in every marketing message or by email to sales@optingo.eu.
- Objection to marketing — by email to sales@optingo.eu; actioned without delay and without the need to provide reasons.
- Other rights — by email to sales@optingo.eu. A response is provided within one month of receiving the request; in complex cases this period may be extended by a further two months, of which the individual will be informed.
The controller may request additional information necessary to identify the person submitting the request.
You also have the right to file a complaint with the President of the Office for Personal Data Protection (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl).
§ 6. Cookie Files
optingo.eu uses cookies — small text files stored on the user’s device.
- Necessary (always active) — required for the site to work, no consent needed.
- Analytical — traffic analysis and quality improvement (Google Analytics 4 with IP anonymization, Matomo).
- Marketing — tailored advertising and remarketing (Google Ads, Meta Pixel, LinkedIn Insight Tag).
- Behavioral analytics — anonymized heat maps and session recordings.
Analytical and marketing scripts are loaded only after the relevant consent has been given in the cookie preferences panel. Consent can be changed or withdrawn at any time in the same panel or in the browser settings.
§ 7. Data Security
- SSL/TLS connection encryption
- Hashed password storage
- Regular data backups
- Software updates to the latest versions
- Restricted access for authorized employees only
§ 8. Links to External Services
The site may contain links to external websites (e.g. LinkedIn, YouTube, the Creatio site). The controller is not responsible for the privacy policies of these websites.
§ 9. Changes to the Privacy Policy
The controller reserves the right to update this Privacy Policy. Changes take effect upon publication of the new version. Last update: September 2026.
Archived versions of the Privacy Policy, together with the dates on which they were in force, are retained by the controller and made available on request.
§ 10. Contact for Personal Data Matters
Email: sales@optingo.eu. Mail: Optingo Digital Sp. z o.o., 181B Jerozolimskie Ave., 02-222 Warsaw.
This privacy policy is effective from September 19, 2026. The previous version is available on request.