1. Personal Data Administrator
The administrator of personal data processed through this website is:
Caellix has not appointed a Data Protection Officer. Privacy-related questions can be sent to contact@caellix.com.
2. Purposes and legal basis for data processing
We process personal data for the following purposes:
Contact form
- Purpose
- Responding to an enquiry submitted through the contact form.
- Legal basis
- Art. 6 para. 1 lit. f GDPR (legitimate interest). The legitimate interest is responding to enquiries, maintaining business communication, and protecting against misuse of the contact form.
- Data collected
- Name, email address, company, selected topic, and message content.
- Retention period
- Until the enquiry is processed, no longer than 2 years, unless longer retention is necessary to establish, exercise, or defend legal claims.
Server logs
- Purpose
- Server administration, technical security, and investigating potential incidents.
- Legal basis
- Art. 6 para. 1 lit. f GDPR (legitimate interest of the administrator).
- Data
- IP address, date and time, browser information, and operating system information.
- Retention period
- Server logs are retained for the period necessary for security and operational purposes, usually up to 12 months unless an incident requires longer retention.
Web Analytics (Google Analytics)
- Purpose
- Analyzing traffic statistics and user behavior to optimize the website.
- Legal basis
- Art. 6 para. 1 lit. a GDPR (your consent).
- Data collected
- Anonymous online identifiers, browser information, and approximate location.
- Retention period
- Google Analytics user-level and event-level data retention is configured according to the selected Google Analytics retention setting, up to 14 months for a standard property.
Marketing and online advertising (Google Ads)
- Purpose
- Measuring advertising campaign performance, conversion tracking, and remarketing or audience selection for ads promoting Caellix.
- Legal basis
- Art. 6 para. 1 lit. a GDPR (your consent).
- Data collected
- Online identifiers, ad interaction and conversion events, device information, and approximate location. For users in the EEA, advertising consent signals (ad_user_data, ad_personalization) are shared with Google only after consent.
- Retention period
- Determined by the Google Ads configuration for conversion and audience data.
3. Providing data and automated decision-making
Whether providing data is required
Providing contact form data is voluntary, but without the required fields we may be unable to respond to your enquiry.
Automated decision-making
We do not use automated decision-making or profiling that produces legal or similarly significant effects.
4. Data recipients and international transfers
To operate the website and respond to enquiries, your personal data may be transferred to:
- Brevo (Sendinblue SAS), France - transactional email service provider. Brevo processes data in accordance with GDPR and uses servers located in the European Union.
- Google Ireland Limited - analytics and online advertising services provider (Google Analytics and Google Ads). With your marketing consent, data may also be used for conversion measurement and ad personalization. Google processes data within the EEA and may involve transfers outside the EEA.
- Cloudflare Workers - global hosting, CDN, and security infrastructure.
All data processors operate under data processing agreements in accordance with Art. 28 GDPR.
Some processing may involve transfers outside the European Economic Area. Where this happens, we rely on applicable safeguards such as Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.
5. Your rights
Under GDPR, you have the following rights:
- Right of access to your personal data (Art. 15 GDPR).
- Right to rectification of data (Art. 16 GDPR).
- Right to erasure, also known as the right to be forgotten (Art. 17 GDPR).
- Right to restriction of processing (Art. 18 GDPR).
- Right to data portability (Art. 20 GDPR).
- Right to object to processing (Art. 21 GDPR).
- Right to withdraw consent at any time. This does not affect the lawfulness of processing carried out before consent withdrawal.
To exercise these rights, contact us at contact@caellix.com.
6. Right to lodge a complaint
You have the right to lodge a complaint with the supervisory authority for personal data protection in Poland:
7. Data security
We implement appropriate technical and organizational measures to protect processed personal data, including:
- SSL/TLS connection encryption (HTTPS).
- Anti-spam and bot protection (Cloudflare Turnstile).
- Regular system updates.
- Restricted access to personal data.
- Data storage on infrastructure with security controls.
9. Privacy Policy changes
This Privacy Policy may be changed. We will inform users of changes by publishing the updated version on this page. The current version is effective from the last update date indicated above.
10. Contact regarding personal data
If you have questions about personal data processing or wish to exercise your rights, contact us at contact@caellix.com.
We respond within 30 days of receiving your enquiry.