Privacy Policy
Last updated: March 2026
1. Data Controller
The data controller is Sergas. For any questions regarding your personal data, contact us at the email address provided on our Contact page.
2. Data We Collect
We collect data you provide directly: name, company name, email address, phone number, and any notes submitted via our forms. When you book a meeting, we also store the selected time slot and calendar event details. If you consent to analytics, we collect anonymous usage data (pages visited, scroll depth, click events) using a non-identifying visitor hash.
3. Purpose of Processing
Your data is processed to: (a) respond to your inquiries, (b) schedule and manage meetings, (c) send booking confirmation emails, and (d) improve our website through anonymised analytics. The legal basis is your consent (Art. 6(1)(a) GDPR) and our legitimate interest in providing requested services (Art. 6(1)(f) GDPR).
4. Cookies
We use strictly necessary cookies for site functionality (e.g. admin authentication, cookie consent preference). Analytics tracking is only activated if you grant consent via the cookie banner. No third-party advertising cookies are used.
5. Analytics
With your consent, we track page views, clicks, scroll depth, and session duration using a custom first-party analytics system. Data is stored in our own database and is not shared with third parties. Visitor identification uses an anonymous hash derived from non-personal browser characteristics — no personal data is used for tracking.
6. Your Rights (RODO/GDPR)
Under GDPR you have the right to: access your data, rectify inaccurate data, request erasure, restrict processing, data portability, and object to processing. To exercise any of these rights, contact us via the Contact page. You also have the right to lodge a complaint with the supervisory authority (UODO in Poland).
7. Data Retention
Contact form submissions and booking data are retained for 2 years from the date of submission, after which they are permanently deleted. Analytics data is retained in aggregated form and individual session records are purged after 12 months.
8. Contact
For any privacy-related questions or requests, reach us through the Contact page on our website.