Privacy Policy

This policy explains how OPTIMATIQ Sp. z o.o. processes personal data of visitors to optimatiq.com, in line with the EU General Data Protection Regulation (GDPR).

1. Data controller

The controller of your personal data is OPTIMATIQ Sp. z o.o., Święty Marcin 29/8, 61-806 Poznań, Poland, NIP: PL7831805709, REGON: 384284681, KRS: 0000802280.

For any privacy-related matter, contact us at [email protected] or by post at the address above.

2. Contact form and e-mail

When you use the contact form or write to us, we process your name, e-mail address, the content of your message and any other data you choose to include.

• Purpose: answering your enquiry and, if you wish, preparing an offer.
• Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in replying to messages addressed to us (Art. 6(1)(f) GDPR).
• Retention: a copy of the e-mail sent by the form is kept in the website’s e-mail log for up to 90 days. Correspondence is kept for as long as needed to handle your enquiry and any further cooperation, and then until possible claims become time-barred. You can ask us to delete it earlier.
• Providing data is voluntary, but without an e-mail address we cannot reply.

3. Analytics (Google Analytics)

With your consent, we use Google Analytics 4 to understand how visitors use the website, e.g. which pages are visited and how long visits last. Google Analytics uses cookies and processes data such as an online identifier, approximate location derived from your IP address, device and browser information, and pages visited.

• Legal basis: your consent (Art. 6(1)(a) GDPR). Analytics cookies are set only after you click “Accept all” or enable “Analytics” in the cookie settings. Until then, Google Analytics runs in Consent Mode, without cookies.
• Withdrawing consent: at any time via the “Cookie settings” link in the footer. Withdrawal does not affect processing carried out before it.
• Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may be transferred to Google LLC in the United States on the basis of the EU–US Data Privacy Framework.
• Retention: Google Analytics data is kept for 14 months. Google Analytics is not used for advertising.

4. Cookies

Cookie	Purpose	Type	Expires
cc_cookie	Stores your cookie choice	Strictly necessary	6 months
__cf_bm	Set by Cloudflare to protect the website against bots, if needed	Strictly necessary	30 minutes
_ga, _ga_*	Google Analytics: distinguishes visitors and sessions	Analytics (consent required)	2 years

You can also block or delete cookies in your browser settings. Blocking strictly necessary cookies may affect how the website works.

5. Hosting, security and server logs

To deliver and protect the website, our servers and our security provider automatically process technical data of each request: IP address, date and time, requested address, browser information. This is our legitimate interest in keeping the website available and secure (Art. 6(1)(f) GDPR). Server logs are kept for no longer than 12 months.

6. Recipients of data

We share data only with providers who process it on our behalf and under our instructions:

• hosting: a data centre provider in the European Union;
• content delivery and protection: Cloudflare, Inc. (data may be transferred to the USA on the basis of the EU–US Data Privacy Framework);
• e-mail: providers of the service that sends messages from the contact form and of our business mailboxes;
• analytics: Google Ireland Limited (only with your consent).

Some of these providers may process data outside the European Economic Area. In that case the transfer is based on the EU–US Data Privacy Framework or on standard contractual clauses approved by the European Commission. Data may also be disclosed to public authorities where required by law. We do not sell personal data.

7. Your rights

You have the right to access your data, to have it rectified or erased, to restrict its processing, to data portability, and to object to processing based on our legitimate interest. Where processing is based on consent, you may withdraw it at any time. To exercise your rights, contact us using the details in section 1.

You also have the right to lodge a complaint with the supervisory authority: the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, Poland.

8. Other information

• We do not make decisions based solely on automated processing, including profiling.
• Fonts and other website resources are served from our own server; the website does not load Google Fonts or social media plugins. Links to Facebook, LinkedIn and X (Twitter) in the footer are plain links: those services process your data only if you follow them.
• We may update this policy, e.g. when we add new features or services. The current version is always available on this page.