Privacy Policy

1. General information

This policy applies to the website operating at the following URL: https://esumo.pl

The Website operator and the controller of personal data is: Esumo sp. z o.o., 14 Gałczyńskiego Street, 05-091 Ząbki, Tax Identification Number (NIP): 1251686662.

The operator’s email address: hello@esumo.pl

The Operator is the Data Controller of your personal data in respect of the data you have provided voluntarily on the Website.

The website uses personal data for the following purposes:

• Handling enquiries submitted via the contact form
• Scheduling calls via the embedded booking calendar (Cal.com)
• Enquiries regarding collaboration and the provision of contracted services
• Presentation of the range and information about services

The website collects information about users in the following ways:

• Through data entered voluntarily in the contact form, which is sent to the Operator’s email inbox.
• Through data provided voluntarily when booking a call in the calendar (Cal.com).
• Through anonymous visitor analytics (Plausible Analytics), which operates without cookies.
• Through Google Analytics 4 - only after consent is given in the cookie banner.
• Through the Microsoft Clarity analytics tool - only after consent is given in the cookie banner.
• Through the logs maintained at server level by the hosting provider.

2. Data protection measures implemented by the Operator

The connection to the Website is encrypted (SSL/HTTPS certificate), ensuring that data submitted via the form is protected during transmission.

Access to messages sent via the form is restricted to the Operator and secured by a password and - where possible - two-factor authentication in the email tools used.

The operator regularly updates the software used for data processing and ensures that backups of the Website are maintained.

3. Web hosting

The website is hosted (and technically maintained) on a hosting provider’s server.

In order to ensure technical reliability, the hosting company maintains server-level logs. The following may be logged:

• resources identified by a URL (addresses of the requested resources - web pages, files),
• the time the query was received,
• time of sending the reply,
• client station name - identification carried out by the HTTP protocol,
• information about errors that occurred during the execution of HTTP transactions,
• the URL of the page the user previously visited (referrer link),
• information about the user’s browser,
• information about the IP address,
• information relating to the handling of emails sent to the Operator and sent by the Operator.

4. Your rights and further information on how your data is used

In certain situations, the Controller is entitled to disclose your personal data to other recipients if this is necessary for the performance of the contract concluded with you or for the fulfilment of the Controller’s obligations. This applies to the following categories of recipients:

• hosting company - on a data processing basis,
• an anonymous analytics provider (Plausible) - in respect of anonymised traffic data,
• Cal.com, Inc. - the booking calendar provider, in respect of data provided when scheduling a meeting (name, email address, chosen slot, optional project details),
• Google Ireland Limited (Google Analytics) - in respect of analytics data about how the Website is used, processed after consent is given,
• Microsoft (Clarity) - in respect of analytics data about how the Website is used, processed after consent is given.

Your personal data is processed by the Data Controller for no longer than is necessary to fulfil the purposes for which it was collected, and for the period required by separate legislation (e.g. accounting legislation).

You have the right to request the following from the Controller:

• access to your personal data,
• their corrections,
• deletion,
• restrictions on processing,
• data transfer,
• to object to the processing of personal data.

A complaint regarding the Controller’s actions may be lodged with the President of the Office for Personal Data Protection, ul. Stawki 2, 00-193 Warsaw.

Providing personal data is voluntary, but necessary in order to use the contact form and get in touch.

Your data is not used for automated decision-making or profiling.

As a rule, personal data is processed within the European Economic Area. In connection with the use of Cal.com, Google Analytics and Microsoft Clarity, data may be transferred to the United States on the basis of the European Commission's adequacy decision (EU-U.S. Data Privacy Framework) or standard contractual clauses.

5. Information on the forms

The website collects information provided voluntarily by the user, including personal data (first name and surname, email address, telephone number, company name and the content of messages), where such information is provided.

The website may store information about connection details (timestamps, IP address).

The data provided in the form is processed for the purpose specified by the form, i.e. to handle enquiries and to establish contact regarding collaboration. The context and description of the form clearly explain what it is used for.

Calls are scheduled via the embedded Cal.com calendar. Data provided during booking (name, email address, optional project details) is processed in order to organise and hold the meeting, with Cal.com, Inc. acting as a data processor in this respect.

6. Administrator logs

Information regarding users’ behaviour on the Website may be logged at server level. This data is used solely for the purposes of administering the Website and ensuring its security and reliability.

7. Analytics

The operator uses the Plausible Analytics tool to analyse traffic statistics on the Website. Plausible is a privacy-focused solution: it does not use cookies, does not collect personal data or create user profiles, and the data collected is solely in anonymised and aggregated form.

Plausible analytics data is processed on servers located within the European Union and is not transferred outside the European Economic Area.

With the user's consent, the Operator uses Google Analytics 4 (measurement ID: G-BSVH9PNWT7) to analyse use of the Website, including user and session counts, pages visited, traffic sources and basic information about the device, browser and approximate location. Google Analytics uses cookies, in particular _ga and _ga_<identifier>, to distinguish users and sessions.

Google Analytics is provided by Google Ireland Limited. The Google Analytics tag is only loaded after consent to analytics cookies has been given. Advertising features and ad personalisation remain disabled. Details about Google's processing of data: https://policies.google.com/privacy

With the user's consent, the Operator also uses Microsoft Clarity, a tool that helps understand how visitors use the Website - through click and scroll heatmaps and session replays (recordings of interactions with the page). Clarity uses cookies and similar technologies and processes information about interactions, the device and approximate location. The tool is activated only after consent is given in the cookie banner.

Clarity is provided by Microsoft; data may be processed in the United States under the rules described in section 4. Details: https://privacy.microsoft.com/en-us/privacystatement

The operator does not use the Facebook pixel or remarketing tools.

8. Cookies and consent

The website uses cookies and similar technologies (e.g. localStorage) to a limited extent:

• necessary and functional - remembering the selected theme (light/dark), remembering your cookie consent decision, and operating the embedded booking calendar (Cal.com),
• analytics (Google Analytics 4 and Microsoft Clarity) - activated only after consent is given in the cookie banner.

Basic visitor statistics (Plausible) operate without cookies and do not require consent.

Consent to analytics cookies can be given or declined in the banner shown on your first visit. You can change your decision at any time - using the “Cookie settings” button on this page or by clearing the site data in your browser. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

The website does not use cookies for marketing or advertising purposes.