This privacy policy, hereinafter also referred to as the “Policy”, describes the methods of collecting, processing and using data relating to Users of the website www.syzygy.pl/ (hereinafter referred to as the “Website”) and its components, as well as the procedures for protecting the personal data of Website Users. The Website is intended exclusively for businesses, and its purpose is to maintain B2B business relationships.
1. Data controller
1.1. The data controller for the personal data of website users is: Ars Thanea S.A., with its registered office at 3 Dziekońskiego Street, Warsaw, entered in the Register of Entrepreneurs of the National Court Register maintained by the District Court for the Capital City of Warsaw in Warsaw, 13th Commercial Division of the National Court Register, under KRS number 000065391332, Tax Identification Number (NIP): 5252391391, Statistical Identification Number (REGON): 140938516, with share capital of PLN 270,000.00 paid up in full (hereinafter also referred to as the ‘Controller’ or the ‘Company’).
1.2. The Controller has appointed Oskar Zacharski as Data Protection Officer. For any matters relating to the processing of personal data and the exercise of rights under data protection legislation, please contact the Data Protection Officer at the following email address: iod@arsthanea.com.
2. Processing of personal data – basic information
2.1. Personal data means any information relating to an identified or identifiable natural person. All personal data is collected, stored and processed on the Website in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter ‘the GDPR’).
2.2. The Website User provides their first name, surname and email address on the Website in order to establish contact with the Company and maintain a business relationship with the Website User.
2.3. Personal data is protected against access by third parties. The company uses the data solely for the purpose of contacting website users.
2.4. The controller does not process special categories of data.
2.5. The company does not process personal data for purposes for which explicit consent is required, where such consent has not been previously given.
3. Purposes of personal data processing
3.1. Personal data is collected, stored and used by the website with the consent of the data subjects, in accordance with the law and with due care, and in a manner that ensures its security.
3.2. The Administrator may use personal data solely for the purpose of providing an appropriate service to website users and in the context of promotional and advertising communications with users who have given their consent.
3.3. The Controller declares that it does not use profiling for the purposes of direct marketing.
3.4. The data controller sets out the following legal bases for the processing of data, including personal data:
(a) the data subject has given consent to the processing of their personal data for one or more specific purposes – the legal basis for the processing is Article 6(1)(a) of the GDPR;
(b) processing is necessary for the performance of a contract to which the data subject is a party – the legal basis for the processing is Article 6(1)(b) of the GDPR;
(c) for analytical and statistical purposes, to analyse Users’ activity on the Website, with a view to improving the features used – the legal basis for processing is the Controller’s legitimate interest (Article 6(1)(f) of the GDPR);
(d) for the purpose of establishing, investigating or defending against any claims – the legal basis for the processing is the Controller’s legitimate interests (Article 6(1)(f) of the GDPR).
4. Other purposes of personal data processing
4.1. The Company processes data for the purposes of internal analysis in order to manage the services it provides, plan their development and promote them. Furthermore, personal data is processed by the Company in order to fulfil the obligations imposed on it by law.
4.2. The controller does not process personal data as part of automated decision-making processes.
5. Protection of personal data being processed
5.1. The collection of personal data is treated as a database with a high level of security. The collection is stored on a server secured against both remote (IT) and physical access. Furthermore, all persons who process the User’s personal data for the purposes of the website hold the appropriate authorisations issued by the Controller. The basis for entrusting the processing of personal data is an appropriate contract.
5.2. The administrator does not transfer the personal data of website users outside the European Economic Area.
6. Sharing of personal data
6.1. The Company takes particular care to ensure the protection of personal data. Personal data may be transferred to entities that provide services to the Company. These entities are separate controllers of personal data, processing data on their own behalf. They include, amongst others, courier and postal companies, banks, payment institutions and authorised public administration bodies, including the President of the Office of Electronic Communications.
7. Duration of the processing of personal data
7.1. The data will be processed and stored by the Controller for as long as is necessary for the purposes of the processing. Where personal data is processed for the purpose of concluding or performing a contract and for the fulfilment of a legal obligation incumbent on the Controller, it will be stored for the duration of the contract, and, following its expiry, for the time necessary to provide after-sales customer service (e.g. handling complaints), to safeguard or pursue any claims arising from the contract, and to fulfil a legal obligation incumbent on the Controller.
7.2. Where personal data is processed on the basis of consent given to the processing of personal data, the duration of the processing will depend on the duration of the consent, i.e. until such time as it is withdrawn.
7.3. Personal data processed for the purposes of marketing and promoting the Controller’s own services, on the basis of a legitimate interest, will be processed until a complaint is lodged by the data subject.
8. Processing of other data relating to website users
8.1. Information contained in system logs (e.g. IP addresses) may also be collected on the website and its subpages. This information is used for technical purposes relating to server administration. IP addresses are also used to collect general statistical information about Users visiting the website.
9. Data transmission security
9.1. Data of particular importance – in particular, all types of passwords – is transmitted using the encrypted SSL protocol.
10. Users’ rights in relation to personal data
10.1. The company sets out the catalogue of rights relating to personal data:
(a) rectification (correction of data);
(b) the erasure of data processed without legal basis in situations where this right is not excluded;
(c) restriction of data processing;
(d) access to information about the data and to the data itself;
(e) the transfer of data to another data controller;
(f) the right to lodge a complaint regarding the processing of data with the relevant authority: https://uodo.gov.pl/.
11. Request to have personal data removed from the database and other applications
11.1. The User may at any time withdraw their consent to the processing of personal data for the purpose of sending newsletters or for marketing purposes, provided that such consent has previously been given by the User. The relevant notification should be sent to the email address: iod@arsthanea.com or by post to the Controller’s registered office address as stated above. Withdrawal of consent will mean that the User will no longer receive information about promotions, new products and other attractive offers dedicated to our customers from the moment the User submits a statement withdrawing their consent.
11.2. Further processing of the User’s data may take place for the following reasons:
(a) compliance with the required data retention period under commercial and tax law;
(b) the retention of evidence in accordance with legal restrictions.
11.3. Please address any individual enquiries regarding your rights in relation to the processing of personal data to:
(a) in writing to the address of the Controller’s registered office;
(b) by email to the Data Protection Officer at: iod@arsthanea.com.
11.4. Any further information regarding the rules on the processing and protection of personal data, the rights of data subjects, and the conditions for exercising those rights can be obtained by contacting the Data Protection Officer at: iod@arsthanea.com.
11.5. Should a User consider that the processing of their personal data is unlawful, they have the right to lodge a complaint with the President of the Personal Data Protection Office.
12. Cookies
12.1. The website uses ‘cookies’. Cookies are text files stored on the user’s computer whilst using websites. Cookies store information such as language settings, the time a user spends on the site, or information contained on it. This enables the Company to avoid having to re-enter all the necessary data on the next visit to the website.
The Company uses so-called ‘session files’ or ‘session cookies’, which, depending on the User’s browser settings, will be deleted when the browser is closed.
The Company also uses files that are deleted immediately after the end of the session (‘trans-session cookies’). These files are used, in particular, to make the Company’s services more user-friendly and more effective. Consequently, the Company may provide information tailored precisely to the User’s interests on the page the User is currently viewing.
The company also uses third-party cookies – these are used by third parties, such as social media platforms, to track your visits to various websites on which they display adverts.
The cookies used by the website can be divided into the following categories:
a) Essential – Essential cookies include strictly necessary cookies which we use to ensure the website functions properly; they help with the website’s operation and design. They improve its functionality and also enable it to be personalised. Essential cookies are set solely in response to actions taken by the User, i.e. requests for services, including the User’s privacy preferences, or the completion of forms (e.g. a contact form). The User’s consent is not required for essential cookies to function.
b) Functional – Functional cookies help us to remember the website settings selected by the User, or assist with other functions whilst browsing and using the website. These cookies remember the User’s preferences and make the website easier to use on subsequent visits. You can adjust your browser settings to block this type of cookie. Please bear in mind that if you choose to do so, some parts of the website may not function correctly.
c) Analytical – Analytical cookies help to analyse website traffic statistics and identify the sources of that traffic. Furthermore, they provide information on which pages of the website are the most popular, as well as how users navigate the site. These cookies are intended to improve the user experience on the website. The User’s consent is required for analytical cookies to function.
d) Performance – Performance cookies are used to understand and analyse key performance indicators of the website, which helps to ensure a better user experience for visitors. Consent is required for performance cookies to function.
e) Advertising – Advertising cookies enable us to tailor the adverts displayed to the User’s preferences regarding their choice of services/content, based on the data we hold, including the User’s behaviour whilst browsing the web. Consent is required for advertising cookies to function.
f) Other – Other cookies not assigned to a category are those that are currently being analysed and have not yet been classified under any category. They only operate with the User’s consent.
This is solely intended to tailor our services to the User’s needs and to optimise the browsing experience. Most web browsers automatically accept cookies. You may refuse to accept cookies by disabling them in your web browser. You can find out exactly how to do this by reading the browser manufacturer’s instructions. You may delete cookies stored on your device at any time. The Company emphasises that without cookies, websites may only be partially accessible.
12.2. Tools that use cookies to optimise the website
12.2.1. Google – The Company uses products and features provided by Google Inc. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; ‘Google’):
a) Google Tag Manager
This website uses Google Tag Manager, a tool provided by the US company Google LLC, which is used to manage tags and load scripts on the website. Google Tag Manager, as a tool in itself, does not collect any information other than that which is necessary for its proper functioning, but it is responsible for loading other scripts described below.
b) Google Analytics
The website offers the ‘Universal Analytics’ mode. This enables data, sessions and interactions to be attributed across multiple devices using a pseudo-anonymous identifier, thereby allowing the User’s activity to be analysed across different devices.
Google Analytics uses cookies, which are text files stored on your computer that help the website operator analyse how users interact with their website. The information generated by cookies in connection with your use of the Website is usually transmitted to Google’s servers in the USA and stored there.
However, if IP anonymisation is enabled on the website, Google will first truncate the User’s IP address within all EU Member States or other countries or territories covered by the Agreement on the European Economic Area.
Only in exceptional cases will the full IP address first be transmitted to Google’s servers in the USA before being shortened. Further information on the terms of use and data protection can be found at: https://www.google.com/analytics/terms/gb.html or https://policies.google.com/?hl=en.
You can opt out of cookies by selecting the appropriate settings in your web browser. If you select these settings, you may not be able to use the full functionality of the Website. You can prevent Google from collecting data generated by cookies and relating to your use of the Website (including your IP address), and from processing this data, by downloading and installing a browser add-on. Opt-out cookies prevent the collection of data in future when you visit the website. To prevent Universal Analytics from collecting data across multiple devices, the User must install the opt-out system on all devices. Upon clicking the provided opt-out cookie, the following element will be installed: Disable Google Analytics.
12.2.2. HotJar – This website uses the HotJar tool to better understand users’ needs and to optimise the site in terms of the user experience. HotJar records every visitor to the website and allows video replays of their movements on the website to be viewed, as well as the generation of so-called heatmaps. Within the HotJar tool, the Administrator does not have access to information that would allow the User to be identified, as HotJar does not record the process of filling in forms intended for the submission of personal data.
In order to use Hotjar, the Administrator has implemented a special Hotjar tracking code within the website’s code. The tracking code uses cookies provided by Hotjar Limited. The information collected via these cookies is stored by Hotjar as part of a pseudonymous user profile. Neither Hotjar nor the website uses this information to identify the User. You may object to Hotjar creating your user profile, to Hotjar storing information about your use of the website, and to the use of Hotjar cookies by following the instructions on the page: https://www.hotjar.com/legal/compliance/opt-out/. Details regarding data processing within Hotjar can be found here: https://www.hotjar.com/legal/policies/privacy/
12.2.3. Leedfeader.com – This website uses the Leedfeader tool, which collects behavioural data on website visitors, including the pages viewed, the source of the visit and the time spent on the site, in order to enrich the Administrator’s contact database. Detailed information on the data collected via Leadfeeder is available at the following link: http://www.leadfeeder.com/leadfeeder-and-gdpr/.
12.2.4. GetResponse – This website uses GetResponse, a tool provided by GetResponse Sp. z o.o., with its registered office at ul. Arkonska 6, A3, 80-387 Gdańsk. We use GetResponse for online marketing activities, contact management (e.g. CRM), landing pages and contact forms. GetResponse also enables us to track user activity and analyse the effectiveness of email campaigns.
GetResponse processes the following data:
- first name and surname,
- email address,
- data relating to interactions with messages (e.g. opens, clicks),
- data relating to forms completed on the website.
The legal basis for data processing by GetResponse is Article 6(1)(a) of the GDPR (the user’s consent) and Article 6(1)(f) of the GDPR (the Controller’s legitimate interest in optimising marketing activities).
Data provided by the User in connection with GetResponse forms is stored until consent to the processing of data is withdrawn or the relationship with GetResponse ends.
Further information on GetResponse’s privacy policy is available at: https://www.getresponse.com/legal/privacy.
12.2.5. HubSpot – This website uses HubSpot, a tool provided by HubSpot, Inc. and HubSpot Ireland Limited. We use HubSpot for online marketing activities, contact management (e.g. user segmentation & CRM), landing pages and the contact form. HubSpot is a marketing automation tool used for hosting, email marketing and social media marketing. This tool tracks and reports on online activity. HubSpot uses the following data collected to track and monitor the use of the service:
- in anonymised form: browser information, demographic data, type of hardware/software, page views, supported areas,
- in pseudonymised form: IP address, location data, clickstream data,
- in the contact form: full name and personal contact details (email address, telephone number), company name, content interests, online interactions, downloaded materials.
Unless otherwise stated in this privacy policy, the legal basis for using HubSpot’s services is Article 6(1)(f) of the GDPR. Our legitimate interest in using this service is to optimise our marketing activities and improve the quality of the services on our website.
Further information on HubSpot’s personal data protection practices can be found on the HubSpot website: https://legal.hubspot.com/privacy-policy
12.3. Interactions via our social media profiles
The Controller maintains public profiles on social media platforms such as Facebook, LinkedIn, Instagram, Vimeo and YouTube. Consequently, we may process the data you provide when visiting our profiles (including comments, likes and online identifiers). We receive this data from you when you start following our profiles or interact with us in any other way. We process this data for the following purposes: to enable activity on our profiles; to respond to enquiries addressed to us via social media platforms; to promote various events and the Controller’s services through posts we publish on social media; and for statistical and analytical purposes.
Please bear in mind that social media platforms collect personal data themselves (in connection with the user profiles created on them), so you should familiarise yourself with the privacy policy of each platform on which you create a user account. We process data on the basis of the Company’s legitimate interests (Article 6(1)(f) of the GDPR), which consist of promoting our own brand and the services we provide.
13. Date of update
This policy is valid as at 11 September 2026
