Privacy Policy

1. General Provisions

1. This Privacy Policy outlines the principles for processing and protecting the personal data of users of the website available at welab.pl.
2. The Controller of your personal data is WeLab Sp. z o.o., with its registered office in Łódź (90-508) at ul. Gdańska 90 / 2-1.
3. We are committed to protecting your privacy and security. Your personal data is processed by us in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (hereinafter: “GDPR”).
4. For matters related to the protection of your personal data, you can contact us via email at: gdpr@welab.pl.

2. What data do we collect, for what purpose, and on what legal basis?

We only process your data when we have a legal basis to do so. Depending on the situation, we collect and process the following data.

1. Contact Form – By using the contact form, you provide us with your personal data. We divide this into two categories:
   • Data provided voluntarily:
     • What data? First and last name, email address, phone number, and the content of your message.
     • For what purpose? To contact you, respond to your inquiry, or present the offer you have requested.
     • On what legal basis? Our legitimate interest (Art. 6(1)(f) GDPR), which consists of handling your inquiry and building customer relationships. If your inquiry may lead to the conclusion of a contract, the basis is also the necessity to take steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
   • Data collected automatically (server logs):
     • What data? Your IP address, browser and operating system information. This data is automatically saved in server logs with every request made to the website.
     • For what purpose? To ensure the security and stability of the website. This allows us to diagnose technical problems, analyze potential security breaches, and protect against abuse and spam (e.g., bot attacks).
     • On what legal basis? Our legitimate interest (Art. 6(1)(f) GDPR), which consists of administering the website and ensuring its integrity and security.
2. Analytical and Statistical Purposes (Google Analytics and Hotjar)
   • What data? Anonymized IP address, data about your location, browser, operating system, and how you use our site (e.g., which subpages you visit, how much time you spend on them).
   • For what purpose? To better understand how users interact with our website, which allows us to improve and optimize it.
   • On what legal basis? Our legitimate interest (Art. 6(1)(f) GDPR), which consists of conducting analyses and statistics for the development of our business.
3. Marketing Purposes (Google Ads)
   • What data? Online identifiers (including cookies), IP address, demographic data, and information about your activity on the website.
   • For what purpose? To display personalized advertisements (remarketing) to you within the Google advertising network that may be of interest to you.
   • On what legal basis? Your voluntary consent (Art. 6(1)(a) GDPR), expressed through the cookie banner on our website.

3. Your Rights

In connection with our processing of your data, you have the following rights:

• Right of access to data: You can request information about what personal data we hold about you.
• Right to rectification: If your data is incorrect, you can request its correction.
• Right to erasure (“right to be forgotten”): You can request the deletion of your data in specific cases.
• Right to restriction of processing: You can request that we limit the processing of your data.
• Right to object: You can object to the processing of data that is based on our legitimate interest.
• Right to data portability: You can receive your data from us in a structured format and transmit it to another controller.
• Right to withdraw consent: If we process data based on your consent (e.g., for marketing purposes), you can withdraw it at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
• Right to lodge a complaint: If you believe that we are processing your data unlawfully, you can lodge a complaint with the President of the Personal Data Protection Office.

To exercise your rights, please contact us at: gdpr@welab.pl.

4. Who do we share your data with?

Your personal data may be transferred to entities we cooperate with to ensure the proper functioning of our website and services. These include:

• Hosting company Home.pl, with its registered office in Poland – for the purpose of storing data on a server.
• Google LLC – for the use of analytical (Google Analytics) and marketing (Google Ads) tools. Data may be transferred outside the European Economic Area, but this is done based on Standard Contractual Clauses that ensure an adequate level of protection.
• Hotjar Ltd. – for the use of analytical tools. Data may also be transferred outside the EEA based on Standard Contractual Clauses.

5. Cookies and Tracking Technologies

1. Our website uses cookies (small text files saved on your device).
2. We use the following tools that utilize cookies:
   • Google Analytics: Used for website statistics analysis. We use IP anonymization, which means your IP address is shortened before being transferred to Google.
   • Google Ads: Allows us to run advertising campaigns, including remarketing. This enables us to show you our ads on other websites.
   • Hotjar: Helps us better understand how you use our website (e.g., through click maps or session recordings), which allows us to optimize it.
3. During your first visit to the site, a banner is displayed through which you can consent to the use of cookies for marketing and analytical purposes. You can always change your cookie settings in your web browser or withdraw your consent.

6. Data Security

We make every effort to protect your data. Our website uses SSL encryption, which is confirmed by the “padlock” icon in your browser’s address bar. This ensures the security of data transmission between your browser and our server.