Privacy policy

Last updated: 7 August 2026

This policy explains what data we collect on gwise.pl, why we process it, who we entrust it to and what rights you have. It also describes the cookies and analytics tools we use.

1. Data controller

The controller of your personal data is the company listed below. We have not appointed a data protection officer - for any privacy matter, write directly to the address given here.

2. What data we collect

We receive data in three situations: when you fill in a form, when your browser connects to our server, and when you consent to analytics cookies.

• Contact form and brief - full name, email address, optionally phone number, company name and the message content.
• Calculator - full name, email, optionally phone and company, plus your answers about the process you want to quote: process type, number of people, time spent and hourly cost.
• Technical data - IP address, browser type and version, operating system, date and time of the request and the referring page. The server records these in its logs, to the extent necessary for the operation and security of the site.
• Analytics data - information about how you use the site: pages visited, time on site, clicks, scrolling, traffic source, device type and approximate city-level location. We collect this only after you give consent to analytics cookies.

We do not collect special categories of data (such as health, opinions or memberships) - please do not include them in your message.

3. Purpose and legal basis

• Responding to enquiries and contact - based on pre-contractual steps (Art. 6(1)(b) GDPR) and our legitimate interest in handling correspondence (Art. 6(1)(f) GDPR).
• Ensuring site operation and security, including protecting forms against spam - based on our legitimate interest (Art. 6(1)(f) GDPR).
• Statistics and analysis of site usage - solely on the basis of your consent (Art. 6(1)(a) GDPR) given in the cookie banner. You can withdraw that consent at any time.
• Establishing, pursuing or defending claims - based on our legitimate interest (Art. 6(1)(f) GDPR).

4. Cookies

Cookies are small files stored by your browser. We use two kinds:

• Essential - the session identifier needed to handle forms and CSRF protection, plus a record of your cookie decision and the date you made it, stored in the browser's local storage. These require no consent and are not used for analytics.
• Analytics - they let us understand how you use the site and what is worth improving. They only start after you click accept in the cookie banner.

We do not use advertising cookies or marketing tracking. We do not sell your data and do not share it with data brokers.

5. Analytics and third-party tools

Once you consent to analytics cookies, we run the following tools:

• Google Analytics 4 (Google Ireland Limited) - traffic statistics: number of visits, traffic sources, pages viewed, device type. The script loads only after consent; before that we send no events to Google.
• Microsoft Clarity (Microsoft Ireland Operations Limited) - click maps and session recordings, i.e. a record of cursor movement, scrolling and clicks. Text typed into form fields is masked and does not reach the recordings. This script also loads only after consent.
• Google Search Console (Google Ireland Limited) - aggregated statistics on the site's visibility in search: queries, impressions and clicks. The tool stores no cookies in your browser and does not show us data identifying individual people.
• Google reCAPTCHA (Google Ireland Limited) - protects forms against bots. The script loads on your first interaction with a form, regardless of analytics consent, based on our legitimate interest in preventing abuse.

Fonts are served from our own server - your browser does not connect to Google Fonts or any other external service for them.

6. Cookie consent and how to withdraw it

On your first visit we show a cookie banner. You can accept analytics cookies or choose the essential-only option - in which case no analytics tool starts at all. We store your decision in the browser's local storage so we do not have to ask on every visit.

You can withdraw consent at any time, and just as easily as you gave it: click "Cookie settings" in the footer of any page, or the button below, and then choose the essential-only option. We then immediately delete those tools' cookies stored on the gwise.pl domain, and the page reloads without the analytics scripts. Withdrawing consent does not affect the lawfulness of processing carried out beforehand.

Change cookie consent

You can also block cookies upfront in your browser settings or install a Google Analytics opt-out add-on.

7. Data recipients

We entrust data only to trusted providers acting on our behalf or as independent controllers within their own services:

• hosting and email providers running the site and delivering our replies,
• Google Ireland Limited - Analytics, Search Console, reCAPTCHA,
• Microsoft Ireland Operations Limited - Clarity,
• authorities entitled under the law, where they submit a valid request.

8. Transfers outside the EEA

Google and Microsoft may also process data outside the European Economic Area, including in the United States. This is based on the European Commission's adequacy decision (Data Privacy Framework) or on standard contractual clauses. We will provide a copy of the safeguards used on request.

9. How long we keep data

• Correspondence and form data - for as long as needed to handle the enquiry and any cooperation, then for up to 3 years (the limitation period for claims) or until you effectively object.
• Server logs - up to 12 months.
• Analytics data - according to each tool's settings: up to 14 months in Google Analytics; in Microsoft Clarity session recordings for up to 30 days and aggregated data for up to 13 months.

10. Your rights

You have the right to: access your data and obtain a copy of it, rectify it, erase it, restrict processing, data portability, object to processing based on our legitimate interest, and withdraw consent at any time.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland) or your local supervisory authority.

To exercise these rights, write to gracjan@gwise.pl.

11. Profiling

We do not make decisions about you based solely on automated processing and do not apply profiling that produces legal effects. We review analytics statistics in aggregate and do not combine them with data from forms.

12. Security

The site runs exclusively over an encrypted HTTPS connection. Forms are protected with a CSRF token and anti-spam verification, and only the people handling enquiries have access to the mailbox.

13. Providing data

Providing data in a form is voluntary but necessary for us to reply or prepare a quote. Consent to analytics cookies is entirely voluntary - refusing it does not limit your use of the site in any way.

14. Changes to this policy

We update this policy whenever the scope of the data we process or the set of tools we use changes. The date of the latest change is shown at the top of the page.