1. Introduction
Welcome to our website. This Privacy Policy explains how we collect, use, and protect your personal data when you use our CRM implementation and management services. This policy applies to all visitors and users of our site and services. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR), as we primarily operate in the EU.
2. Information We Collect
We collect the following types of personal data:
- Email addresses and correspondence: When you contact us via email, we collect your email address and any information provided in the message.
- Usage data through Google Analytics: This includes information such as IP address, browser type, device information, pages visited, and time spent on the site.
- Website performance data through Google Search Console: This includes data on how users find and interact with our site via search engines, such as search queries and click-through rates.
- Contact form data: When you send us a message through the contact form on our website, we collect your name, email address, the content of your message and any other details you choose to provide. We use this data only to reply to your inquiry.
- Spam protection data (Google reCAPTCHA): Our contact form is protected by Google reCAPTCHA, which may process your IP address and information about your device and behaviour on the page to tell humans from bots.
Under GDPR, some of this data (e.g., IP addresses) may be considered personal data, and we process it in compliance with applicable regulations.
3. How We Use Your Information
We use the collected information for the following purposes:
- Responding to your inquiries and providing customer service: This is based on our legitimate interest in communicating with you and fulfilling your requests.
- Marketing purposes: We may use your email address to send information about our services, but only with your explicit consent. You can withdraw your consent at any time (see section 6).
- Analyzing website traffic and improving services: This is based on our legitimate interest in understanding how our site is used and enhancing user experience.
- Understanding visitor interactions with our site: This helps us optimize content and services, also based on legitimate interest.
4. Google Analytics and Search Console
We use Google Analytics and Google Search Console to collect data about site usage, including:
- Website traffic statistics (e.g., number of visitors, page views)
- User behavior on the site (e.g., navigation paths, time on site)
- Search performance data (e.g., search queries, impressions, clicks)
Google Analytics may use cookies and similar technologies to collect this data. You can opt out of Google Analytics tracking by adjusting your browser settings or using the Google Analytics Opt-out Add-on. For more information on Google’s privacy practices, see Google’s Privacy Policy.
Analytics and marketing cookies are set only after you give consent in the consent banner (CookieYes). You can change or withdraw your consent at any time. Details are described in our Cookie Policy.
5. Data Storage and Protection
We have implemented appropriate technical and organizational security measures to protect your personal data, including:
- Encryption of sensitive data
- Secure storage of email correspondence, accessible only to authorized personnel
- Regular reviews of our security practices to meet industry standards
We take data protection seriously and strive to prevent unauthorized access, disclosure, or loss of your information.
6. Marketing Communications
If you contact us via email, we may use your email address to send marketing communications about our services, but only if you have given explicit consent. You can opt out of receiving marketing communications at any time by:
- Clicking the “unsubscribe” link in any marketing email
- Contacting us directly at hello@crmagency.eu
Your consent for marketing is voluntary, and withdrawing it will not affect your ability to use our services.
7. Your Rights
Under GDPR, you have the following rights regarding your personal data:
- Right of access: You can request a copy of the personal data we hold about you.
- Right to rectification: You can request correction of inaccurate or incomplete data.
- Right to erasure: You can request deletion of your personal data under certain conditions.
- Right to object: You can object to the processing of your data, especially for marketing purposes or based on legitimate interest.
- Right to data portability: You can request the transfer of your data to another service provider in a structured format.
- Right to withdraw consent: If processing is based on consent, you can withdraw it at any time.
- Right to lodge a complaint: You can file a complaint with a supervisory authority if you believe your rights have been violated.
To exercise these rights, contact us at hello@crmagency.eu.
8. Contact Information
The controller of your personal data is:
- Controller: Zbigniew Piotrowski, running the business Warsztat Marketingowy (CRM Agency is a brand of Warsztat Marketingowy)
- Address: ul. Lipowicza 90, 80-809 Gdańsk, Poland
- NIP (Tax ID): 5832866758, REGON: 386531050
- Email: hello@crmagency.eu
- Phone: +48 602 747 086
We have not appointed a Data Protection Officer (DPO), as we are not required to do so under Article 37 GDPR. For any privacy-related questions or concerns, or to exercise your rights, contact us using the details above. You also have the right to lodge a complaint with the Polish supervisory authority: the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl).
We will respond to your inquiry within 30 days, as required by GDPR.
9. Changes to This Policy
We reserve the right to update this privacy policy at any time. Changes will be effective immediately upon posting on the site. If we make significant changes, we will notify you via email or through a prominent notice on our site. We encourage you to review this policy periodically.
10. Additional Information
- Data retention period: We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy or as required by law. For example, email correspondence is retained for up to 3 years after our last contact (or longer if required to establish, pursue or defend legal claims or by accounting and tax law), and usage data collected by Google Analytics is retained for up to 14 months.
- International data transfers: If we transfer your data outside the EU, we ensure appropriate safeguards, such as Standard Contractual Clauses, to protect your data.
