Privacy Policy

§1 General provisions

  1. The controller of your personal data is Quantoo sp. z o.o., with its registered office at ul. Jana Dekerta 18, 30-703 Kraków, entered into the Register of Entrepreneurs of the National Court Register under KRS number 0000384419, Tax Identification Number (NIP): 6762438436, National Business Registry Number (REGON): 121489770. You can contact the Controller in writing at the address indicated in the preceding sentence.
  2. The Controller has not appointed a Data Protection Officer. For matters relating to personal data protection, please contact us by email at: kontakt@quantoo.pl .
  3. The Privacy Policy is an integral part of the Terms and Conditions. By using the services we offer, you entrust us with your information. This document serves only to help you understand what information and data are collected, for what purposes, and how they are used. This data is very important to us, so please read this document carefully as it defines the principles and methods of processing and protecting personal data. This document also defines the principles of using cookies. "Cookies" .
  4. We hereby inform you that we comply with the principles of personal data protection and all legal regulations provided for in the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
  5. At the request of the person whose personal data is processed, we provide comprehensive information on how we use their personal data. We always strive to provide clear information about the data we collect, how we use it, the purposes for which it is collected and to whom we transfer it, the protection we provide for such data when transferred to other entities, and we provide information on the institutions to contact in case of doubt.

§2 Privacy Policy

  1. We respect your privacy. We want to ensure that you have a comfortable experience when using our services.
  2. We value the trust you place in us by entrusting us with your personal data to provide our services. We always use personal data fairly and in a way that does not betray your trust, and only to the extent necessary to provide our services.
  3. As a User, you have the right to receive full and clear information about how we use your personal data and for what purposes it is required. We always provide clear information about the data we collect, how and with whom we share it, and provide information about who to contact if you have any questions.
  4. If you have any questions regarding our use of your personal data, we will immediately take steps to clarify and resolve such concerns. We will fully answer all related questions.
  5. We will take all reasonable steps to protect your data from improper and uncontrolled use.
  6. The legal basis for processing your personal data is:
    1. Article 6(1)(a) – the data subject has consented to the processing of their personal data for one or more specific purposes. This applies in particular to analytical cookies and user behavior tracking tools (PostHog), which are activated only after the User has given their consent via the cookie banner.
    2. Article 6(1)(b) – processing is necessary for the performance of a contract to which the data subject is a party, or to take steps at the request of the data subject before entering into a contract
    3. Article 6(1)(c) – processing is necessary to comply with a legal obligation to which the controller is subject
    4. Article 6(1)(f) – processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party
  7. Your personal data related to the conclusion and performance of the contract will be processed for the duration of its execution, as well as for a period no longer than required by law, including the provisions of the Civil Code and the Accounting Act, i.e., no longer than 10 years from the end of the calendar year in which the last contract was performed.
  8. Your personal data processed for the purpose of concluding and performing future contracts will be processed until you object.
  9. Data collected by analytical tools (including PostHog) based on your consent is stored for a period no longer than 12 months from the date of collection or until the User withdraws consent.
  10. You have the right to: access your personal data and receive a copy of the personal data being processed, rectify any inaccurate data; request deletion of your data (the right to be forgotten) in the event of the circumstances specified in Article 17 of the GDPR; request restriction of data processing in the cases specified in Article 18 of the GDPR; object to data processing in the cases specified in Article 21 of the GDPR; and transfer the data provided, processed by automated means.
  11. If you believe that your personal data is being processed unlawfully, you may file a complaint with the supervisory authority (Personal Data Protection Office, ul. Stawki 2, Warsaw). If you require additional information regarding personal data protection or wish to exercise your rights, please contact us by mail at the following address.
  12. We comply with all applicable data protection laws and regulations and will cooperate with data protection authorities and authorized law enforcement agencies.
  13. If you have any questions, please contact us using the page from which you were redirected to this Privacy Policy. Your contact request will be promptly forwarded to the appropriate person.
  14. To help us respond or respond to the information you provided, please provide your name and surname.

§3 Scope and purpose of collecting personal data

  1. We process personal data to provide services, for accounting purposes, and—with the User's separate consent—to analyze how the website is used and improve its functionality.
  2. We collect, process and store the following user data:
    1. name and surname,
    2. electronic mail address (e-mail),
    3. telephone number (mobile, landline),
    4. information about the web browser used,
    5. IP address and approximate geographic location (country, region),
    6. Behavioral data collected by analytics tools: pages visited, time spent on the page, clicks, mouse movements, page scrolling, navigation paths,
    7. Device specifications: device type, operating system, screen resolution,
    8. other personal data voluntarily provided to us.
  3. Providing the data indicated in point 2 letters a-c is entirely voluntary and is done by submitting the contact form. The data indicated in point 2 letters d-e (browser information, IP address, and location) are always collected for technical and statistical purposes in an anonymous form, based on the Controller's legitimate interest (Article 6 paragraph 1 letter f of the GDPR). The data indicated in point 2 letters f-g (behavioral and technical device data collected by analytical tools) are processed only after the User has consented to analytical cookies.
  4. We may transfer personal data to servers located outside your country of residence or to affiliated third parties based in other countries, including countries within the European Economic Area (EEA). When using the PostHog cloud-based tool (PostHog Cloud), data may be processed on servers located in the European Union (eu.posthog.com) or the United States. For data transfers to the United States, standard contractual clauses (SCCs) approved by the European Commission are used. PostHog's privacy policy is available at: https://posthog.com/privacy .
  5. Your data may be accessed by entities providing services necessary to operate the website, such as:
    1. Hosting companies providing hosting or related services to the Administrator
    2. IT service and support companies performing maintenance or responsible for maintaining IT infrastructure
    3. PostHog, Inc. - Provider of an analytical tool for analyzing user behavior on the website (event tracking, session recordings, heat maps). Data is transferred to PostHog only after the User consents to analytical cookies.

§4 Cookies

  1. We use cookies or similar technologies (hereinafter collectively referred to as "cookies"), which are IT data, in particular text files, intended for use on the website and stored on the end devices of users browsing the website. Information collected using cookies allows us to tailor services and content to individual needs and user preferences, and is also used to compile general statistics regarding user use of the website. Data collected using cookies is collected solely for the purpose of performing specific functions for users and is encrypted to prevent unauthorized access.
  2. We use cookies on our website:
    1. Internal Cookies – files placed and read from the User's Device by the Website's IT system
    2. External Cookies – files placed and read from the User's Device by the IT systems of external Services. Scripts from external Services that may place Cookies on the User's Devices have been intentionally placed on the Website through scripts and services made available and installed on the Website.
    3. Session cookies – files placed and read from the User's Device by the Website during a single session of a given Device. After the session ends, the files are deleted from the User's Device.
    4. Persistent Cookies – files placed and read from the User's Device by the Website until they are manually deleted. These files are not deleted automatically after the Device session ends, unless the User's Device configuration is set to delete cookies after the Device session ends.
  3. The following types of cookies are used on our website:
    1. Necessary cookies – enabling the use of services available on the website, in particular authentication cookies used for services that require authentication. They do not require the User's consent.
    2. Security cookies – used to detect authentication abuse. They do not require user consent.
    3. Analytical/performance cookies – enabling the collection of information about how websites are used. This category includes cookies generated by the PostHog tool, used to analyze user behavior (events, session recordings, heat maps, funnel analysis). These cookies are activated only after the user has given their consent.
    4. Functional cookies – enabling the "remembering" of user-selected settings and personalization of the user interface.
    5. Advertising cookies – enabling the delivery of advertising content to users tailored to their interests.
  4. Web browsing software (web browser) usually allows cookies to be stored on the end device by default. Users browsing the website can independently change their cookie settings at any time. Detailed information about the possibilities and methods of handling cookies is available in the software (web browser) settings.
  5. When you first visit the website, we display a cookie banner that allows you to express or refuse consent to individual categories of cookies. Cookies other than strictly necessary cookies are only saved after obtaining the user's express, active consent (opt-in). You may withdraw your consent at any time or change its scope through the cookie settings available on the website.

    Information on how to configure cookie settings in web browsers:

§5 Analytical Tools – PostHog

  1. Our website uses the analytics tool PostHog, provided by PostHog, Inc. This tool allows us to analyze how the website is used in order to improve it and tailor it to the needs of our users.
  2. PostHog may collect and process the following data:
    1. anonymous or pseudonymous session/user identifier,
    2. IP address (may be shortened or anonymized),
    3. Device and browser information (type, version, operating system, resolution),
    4. visited URLs and subpages,
    5. interaction events: clicks, scrolling, form filling,
    6. Session recordings (session replay) - if this feature is enabled, mouse movements and interactions with page elements can be recorded; fields containing sensitive data (e.g., passwords, payment details) are automatically masked and not recorded,
    7. heat maps and conversion funnel analyses.
  3. Data collected by PostHog is processed based on the User's consent (Article 6, Section 1, Letter a of the GDPR), expressed by accepting analytical cookies in the cookie banner. PostHog acts as a data processor on behalf of the Controller under a data processing agreement.
  4. You may withdraw your consent to PostHog's data collection at any time by changing your cookie settings on the website. Withdrawing consent does not affect the lawfulness of processing that took place before your consent was withdrawn.
  5. For more information about PostHog, Inc.'s data processing practices, please refer to PostHog's privacy policy, available at: https://posthog.com/privacy .

§6 Social Media Plugins

  1. Plug-ins, so-called social network plug-ins, may be present on our website.
    1. Facebook is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. To view Facebook plugins, go to: https://developers.facebook.com/docs/plugins
    2. Twitter is operated by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. To view Twitter plugins, go to: https://dev.twitter.com/web/tweet-button
  2. The plug-in only provides its provider with information about which of our websites you accessed and when. If you are logged in to your Facebook or Twitter account while viewing or using our website, the provider can link your interests, information preferences, and other data.
  3. To prevent the Plug-in on our website from recording your visit to your selected user account, you must log out of your account before browsing our website.

§7 Rights and obligations

  1. We have the right, and in cases specified by law, also the statutory obligation, to provide selected or all information regarding personal data to public authorities or third parties who submit such a request for information based on applicable provisions of Polish law.
  2. The user has the right to:
    1. Access to personal data - The User has the right to obtain access to their personal data, upon request submitted to the Administrator
    2. Correction of personal data - The User has the right to request that the Administrator immediately correct personal data that is incorrect or supplement incomplete personal data
    3. Delete personal data - The User has the right to request that the Administrator immediately delete personal data. The Administrator reserves the right to suspend the execution of a request to delete data in order to protect the Administrator's legitimate interest.
    4. Restrictions on the processing of personal data - The User has the right to restrict the processing of personal data in the cases indicated in Article 18 of the GDPR
    5. Portability of personal data - The User has the right to obtain personal data from the Controller in a structured, commonly used, machine-readable format
    6. Objecting to the processing of personal data — The User has the right to object to the processing of their personal data in the cases specified in Article 21 of the GDPR
    7. Withdrawal of consentYou have the right to withdraw your consent to the processing of your personal data based on consent at any time (Article 6, paragraph 1, letter a of the GDPR), including consent to analytical cookies and behavioral tracking using PostHog. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
    8. Lodging a complaint - The User has the right to lodge a complaint with the supervisory authority responsible for personal data protection (UODO, ul. Stawki 2, Warsaw).