1. Who we are
This website, www.advertuosomarketing.com, is operated by Łukasz Sawicki, trading as Advertuoso, ul. Batalionów Chłopskich 30, 30-394 Kraków, Poland ("Advertuoso", "we", "us"). For the purposes of the EU and UK General Data Protection Regulation (GDPR), Łukasz Sawicki is the controller of the personal data described in this policy.
Contact for all privacy matters: hello@advertuosomarketing.com, or by post to the address above. We have not appointed a Data Protection Officer because we are not required to.
2. The short version
- We collect what you send us through the contact form or by email, plus technical data needed to deliver and secure the site.
- We use Google Analytics and Google Ads (via Google Tag Manager) to measure the site and our advertising.
- In the EU/EEA, UK and Switzerland, these cookies run only with your consent. Elsewhere they are on by default and you can opt out at any time.
- We don't sell your data for money. Advertising cookies may count as "sharing" under US state laws; you can opt out via Your Privacy Choices, and we honor Global Privacy Control.
- You can ask to see, correct, delete or export your data at any time.
3. What we collect
Information you give us
- Contact form and emails: your name, email address, business name, website, the services you're interested in, your budget range, your message, and whether you opted in to marketing emails.
- If you become a client: contact and billing details, and the information needed to deliver our services (for example access to your website, ad or email accounts).
Information collected automatically
- Technical and security data: IP address, browser and device type, pages requested and timestamps, processed by our hosting provider to deliver the site and protect it from abuse.
- Cookieless statistics: aggregated page views via Cloudflare Web Analytics, which uses no cookies and does not track you across sites.
- Analytics data (Google Analytics): pages viewed, time on page, how you arrived (e.g. which ad or search), approximate location (city/country), device and browser, and an online identifier stored in a cookie.
- Advertising data (Google Ads): which ad you clicked, actions on the site (such as page views and sending the contact form), an online identifier in a cookie, and your IP address and browser information. Google may combine this with information it holds about you if you're logged in to your Google account.
We do not intentionally collect sensitive personal information. Please don't send it to us.
4. How and why we use it (legal bases)
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Responding to your inquiry and preparing a quote or free teardown | Form and email data | Steps at your request before entering a contract (Art. 6(1)(b)); our legitimate interest in replying to business inquiries (Art. 6(1)(f)) |
| Providing services to clients, invoicing | Client contact, billing and project data | Performance of a contract (Art. 6(1)(b)); legal obligation for accounting and tax records (Art. 6(1)(c)) |
| Sending marketing emails | Name, email, opt-in record | Your consent (Art. 6(1)(a)), withdrawable at any time via the unsubscribe link or by emailing us |
| Running, securing and improving the website; cookieless statistics | Technical and security data | Our legitimate interest in a secure, working website (Art. 6(1)(f)) |
| Website analytics (Google Analytics) | Analytics data | Your consent (Art. 6(1)(a) GDPR and Art. 399 of the Polish Electronic Communications Law / ePrivacy rules) |
| Measuring and personalizing advertising, remarketing (Google Ads) | Advertising data | Your consent (Art. 6(1)(a) GDPR and ePrivacy rules) |
| Legal claims and compliance | Relevant records | Legal obligation; legitimate interest in defending legal claims (Art. 6(1)(c), (f)) |
How our cookie defaults depend on where you are:
- EU/EEA, UK and Switzerland: analytics and marketing cookies are off until you agree.
- Everywhere else (including the US): analytics and marketing cookies are on by default, and you can opt out at any time via Your Privacy Choices. If your browser sends a Global Privacy Control signal, marketing cookies start off.
Google Consent Mode. Google Tag Manager loads on every visit. If you have not consented (or have opted out), Google tags do not set or read cookies; they may send Google limited, cookieless signals (such as the time, page, browser type and your consent status) that Google uses to estimate conversions in aggregate.
We do not use automated decision-making that produces legal or similarly significant effects on you.
5. Who we share it with
We share personal data with service providers ("processors") that act on our instructions under data processing agreements, and with advertising platforms as described below:
| Recipient | Purpose | Role |
|---|---|---|
| Cloudflare, Inc. | Website hosting, content delivery, security, cookieless statistics, email routing | Processor |
| Formspree, Inc. | Processing contact form submissions | Processor |
| Google Ireland Ltd / Google LLC | Email (Gmail); Google Tag Manager; Google Analytics | Processor |
| Google Ireland Ltd / Google LLC | Google Ads conversion tracking and remarketing | Independent controller for its own advertising purposes |
| Email marketing provider (only if you opt in) | Sending marketing emails | Processor (will be named here once selected) |
Google's use of data from our site is described at How Google uses information from sites that use its services. We do not currently use the Meta (Facebook) Pixel or other social media tracking. If we add any, we will update this policy first and, in the EU/EEA, UK and Switzerland, ask for your consent.
We may also disclose information to professional advisers, to authorities where required by law, or to a successor if the business is sold or reorganized.
6. International transfers
Some recipients (including Google, Cloudflare and Formspree) process data in the United States and other countries outside the European Economic Area. We rely on the EU-U.S. Data Privacy Framework for recipients certified under it, or on the European Commission's Standard Contractual Clauses with additional safeguards where needed. You can request a copy of the relevant safeguards by emailing us.
7. How long we keep it
- Inquiries that don't lead to a project: up to 24 months after our last contact, then deleted.
- Client records: for the duration of our work together, then as long as accounting, tax and limitation-period laws require (typically 5–6 years).
- Marketing list: until you unsubscribe or withdraw consent; we keep a record of your opt-in and opt-out as proof.
- Google Analytics: event data is retained for 14 months, then deleted.
- Advertising cookies: for the durations listed in our Cookie Policy (typically up to 90 days). Google and Meta retain data under their own policies.
- Cookie choice: 6 months, after which we ask again.
8. Your rights (EU, EEA and UK)
You have the right to:
- access your personal data and receive a copy;
- correct inaccurate or incomplete data;
- erase your data ("right to be forgotten");
- restrict how we process it;
- data portability, i.e. receive data you gave us in a machine-readable format;
- object to processing based on legitimate interests, and to direct marketing at any time;
- withdraw consent at any time, without affecting processing done before withdrawal. For cookies, use Cookie settings.
To exercise a right, email hello@advertuosomarketing.com. We reply within one month (extendable by two months for complex requests) and may ask you to confirm your identity. You also have the right to complain to a data protection authority, in particular where you live or work. Our authority is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl.
9. Your rights (California and other US states)
This section supplements the policy for residents of California (CCPA as amended by the CPRA) and other US states with comprehensive privacy laws (such as Virginia, Colorado, Connecticut, Utah, Texas and Oregon). Some of these laws apply only to businesses above certain size thresholds; we choose to honor these rights regardless.
Personal information we collect and disclose
| Category | Examples | Sources | Disclosed for a business purpose to | "Shared" for cross-context behavioral advertising with |
|---|---|---|---|---|
| Identifiers | Name, email, IP address, cookie IDs | You; your device | Hosting, forms, email and analytics providers | Google (cookie IDs, IP address) |
| Commercial information | Services you're interested in, budget range | You | Service providers | Not shared |
| Professional information | Business name, website | You | Service providers | Not shared |
| Internet or network activity | Pages viewed, ads clicked, actions on the site, browser and device | Your device | Analytics providers | |
| Geolocation (approximate) | City/country derived from IP | Your device | Analytics providers |
We use this information for the purposes in section 4. We do not collect sensitive personal information, and we do not knowingly sell or share the information of anyone under 16.
Selling, sharing and targeted advertising
We do not sell personal information for money. However, our use of advertising cookies (Google Ads) is considered "sharing" for cross-context behavioral advertising under California law, and may be considered a "sale" or "targeted advertising" under other state laws. You can opt out at any time by switching off "Marketing" in Your Privacy Choices. We also treat a Global Privacy Control (GPC) signal from your browser as a valid opt-out; if you then choose to allow marketing cookies yourself, we follow your explicit choice.
Your rights
- Know and access the personal information we have collected about you, its sources and purposes, and who we disclosed it to;
- Delete personal information we collected from you;
- Correct inaccurate personal information;
- Opt out of the sale or sharing of personal information and of targeted advertising;
- Non-discrimination: we will never deny you services or charge you differently for exercising your rights.
To make a request, email hello@advertuosomarketing.com with the subject "Privacy request". We confirm receipt within 10 business days and respond within 45 days (extendable once by 45 days where permitted). We verify requests by matching the details you provide with those we hold. You may use an authorized agent, who must provide your signed permission. If we deny a request, you may appeal by replying to our decision, and we will respond within the time your state's law requires.
10. Security
We use HTTPS everywhere, reputable providers with strong security programs, access controls and two-factor authentication on our accounts. No system is perfectly secure, so please email us right away if you suspect a problem.
11. Children
Our website and services are intended for businesses and are not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has sent us personal data, contact us and we will delete it.
12. Changes to this policy
We may update this policy as our services or the law change. The "Last updated" date shows the current version. If changes are significant, we will highlight them on this page and, where required, ask for your consent again.