Privacy Policy
Privacy Policy
This Privacy Policy provides you with information on what to expect from us in regards to processing of your personal information when you contact us or use one of our services.
In particular, from this document you will learn:
- why we are able to process your information;
- what purpose we are processing it for;
- whether you have to provide it to us;
- how long we store it for;
- whether there are other recipients of your personal information;
- whether we intend to transfer it to another country; and
- whether we do automated decision-making or profiling.
This Policy consists of the following parts:
- The first part of the Privacy Policy contains information that we must provide to everyone, regardless of the purpose of data processing.
- The second part contains information for the person who visits our Website.
- The third part contains information for the person who communicates with us directly via the forms available on our website or by e-mail.
- The fourth part contains information for the person who concludes the agreement for our Services.
- The fifth part contains information for persons subscribing to our Newsletter.
- The sixth part contains information for the person who visits our profiles in social media. The seventh part contains information on the cookies we use.
- The seventh part contains detailed information of cookies used on our Website (Cookie Policy).
Part I General information
Controller’s contact details
Connecting dots limited liability company is the controller for the personal data we process, unless otherwise stated. There are many ways you can contact us, including by email and post. More details can be found below:
Our postal address:
Connecting dots sp. z o.o.
ul. Schweitzera 5/26
30-681 Kraków
Our register number is 0000951617, NIP: 6793232316
If you have any requests, questions, comments, or concerns regarding our Privacy Policy or practices, please contact us by email: hello@productdots.com
How do we get information?
Most of the personal information we process is provided to us directly by you for one of the following reasons:
You browse our website.
You have made an enquiry to us or you have made an information request.
You conclude an agreement for our services with us.
You subscribe to our newsletter.
You visit our accounts on social networks - LinkedIn, Facebook and Twitter and you contact us using these sites.
Your data protection rights?
Under data protection law, you have rights we need to make you aware of. The rights available to you depend on our reason for processing your information.
Your right of access
You have the right to ask us for copies of your personal information. This right always applies. There are some exemptions, which means you may not always receive all the information we process.
Your right to rectification
You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. This right always applies.
Your right to erasure
You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing
You have the right to ask us to restrict the processing of your information in certain circumstances.
Your right to object to processing
You have the right to object to processing if we are able to process your information because the process forms is in our legitimate interests.
Your right to data portability
This only applies to information you have given us. You have the right to ask that we transfer the information you gave us from one organisation to another, or give it to you. The right only applies if we are processing information based on your consent or under, or in talks about entering into a contract and the processing is automated.
You are not required to pay any charge for exercising your rights. We have one month to respond to you.
Your rights to complain
We work to high standards when it comes to processing your personal information. If you have queries or concerns, please contact us at hello@productdots.com and we’ll respond.
If you remain dissatisfied, you can make a complaint about the way we process your personal information to the supervisory authority which is President of the Personal Data Protection Office (Warsaw, Poland).
Sharing your information
We use data processors who are third parties who provide elements of services for us. We have contracts in place with our data processors. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will not share your personal information with any organisation apart from us. They will hold it securely and retain it for the period we instruct.
Our important IT services provider is Google. We use Facebook, Linkedin and Microsoft as well (more information about it you can read below). Due to the use of mentioned services, your data may be transferred to the United States of America (USA) in connection with their storage on American servers. Service providers have included information on standard data protection clauses (SSC) or applicable adequacy decision (Data Privacy Framework) in the terms of their services which guarantee properly safety level.
In some circumstances we are legally obliged to share information. For example, under a court order. In any scenario, we’ll ensure that we have a lawful basis on which to share the information and document our decision making and ensure we have a legal basis on which to share the information.
You can find more information about our providers below in Part I.
Links to other websites
Where we provide links to websites of other organisations, this Privacy Policy does not cover how that organisation processes personal information. We encourage you to read the Privacy Policies on the other websites you visit.
Changes to this Privacy Policy
We keep our Privacy Policy under regular review to make sure it is up to date and accurate.
January 2023
We have run our website and prepared this version of our Privacy Policy.
March 2026
We have introduced changes to our Privacy Policy in order to inform about processing of User’s personal data in connection with the use of our services.
Part II: Information for the person who visits our Website.
Below we present the principles of processing personal data (including IP address or other identifiers) and information collected via cookies or other similar technologies), which are used when you visit our Website.
For what purpose do we process your data?
We process your personal data to provide services electronically in the scope of providing you with content collected on the Website, as well as for analytical and statistical purposes.
On what legal basis do we process your data?
The legal basis and purpose of processing your personal data is:
• for analytical and statistical purposes - then the legal basis for processing is your consent (Article 6 paragraph 1 letter a of the GDPR) or our legitimate interest (Article 6 paragraph 1 letter f of the GDPR) consisting in integrity and continuity of our business (e.g. in terms of necessary cookies);
• in order to possibly establish and pursue claims or defend against them and to ensure the security of your data – the legal basis for processing is our legitimate interest (Article 6, paragraph 1, letter f of the GDPR) consisting in protecting our rights.
How long do we process your data?
We will process your personal data for as long as it is necessary to achieve the purposes described in this Privacy Policy, in particular to fulfill our contractual and statutory obligations. In the scope of data processing based on consent, we will process your personal data until it is withdrawn, which will not affect the legality of earlier processing.
Who is the recipient of your personal data?
The recipient of your personal data, i.e. an external entity that will be able to participate in the process of processing your data, will be our trusted subcontractors – IT service providers in the field of data hosting and business mail services and companies whose statistical and analytical tools we use.
Analytics
When you visit our Website, we use a third-party service, Google Analytics to collect standard internet log information and details of visitor behaviour patterns. We do this to find out such things as the number of visitors to the various parts of the site. This information is only processed in a way that does not directly identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website.
If we do collect personal data through our website, we’ll be upfront about this. We’ll make it clear when we collect personal information and we’ll explain what we intend to do with it.
If you are interested in details related to data processing as part of Google Analytics, we encourage you to read the explanations prepared by Google here.
Meta Pixel
We use marketing tools provided by Meta Platforms Ireland Limited. As part of these tools, we direct you to advertisements on Facebook.
In order to send you personalized ads in terms of your behaviour on our website, we have implemented Meta Pixel as part of our website, which automatically collects information about your use of our website in terms of pages viewed.
The information collected as part of Meta’s Pixel is anonymous, i.e. it does not allow us to identify you. We only know what actions you have taken on our site. However, we inform you that Facebook may combine this information with other information collected about you as part of your use of Facebook and use it for its own purposes, including marketing. Such Facebook activities are no longer dependent on us, and you can search for information about them directly in Facebook's privacy policy.
Microsoft Clarity
We use the Microsoft Clarity tool to analyse user behaviour on the website for user experience (UX) analysis, provided by Microsoft with its registered office at 1 Microsoft Way, Redmond, WA 98052, United States. We carry out activities in this area based on our legitimate interest, consisting in creating statistics and analysing them in order to optimize our websites. Microsoft Clarity collects information related to the user's activity on the website and in particular records each website user and creates video recordings of his/her movement on the website and generates heat maps. As part of the Microsoft Clarity tool, we do not collect information that allows us to identify individual users.
If you are interested in details related to data processing as part of Microsoft Clarity, we encourage you to read the explanations prepared by Microsoft here.
Linkedin Insight Tag
We also use the LinkedIn Insight Tag tool provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. It saves a cookie file on your device, which allows it to collect data, in particular the IP address, device and browser properties, as well as activity on the website (e.g. page views). However, the data is encrypted, anonymized within seven days, and anonymized data is deleted within 90 days.
LinkedIn does not provide us with any personal information related to the use of the "LinkedIn Insight Tag" tool or any related tools. It presents only anonymized reports about the website's target group and the effectiveness of advertisements. We may also perform retargeting using the LinkedIn Insight Tag. This allows us to display targeted advertising on sites other than ours without identifying you as a user of our site.
If you are interested in details related to data processing as part of Linkedin Insight Tag, we encourage you to read the explanations prepared by Linkedin here.
Cookies
We use a cookies tool on our website to gain consent for the optional cookies we use.
Cookies that are necessary for functionality, security and accessibility are set and are not deleted by the tool.
You can read more about how we use cookies, and how to change your cookies preferences, in our Cookies policy below.
What are your rights?
As we are processing your personal data for our legitimate interests as stated above, you have the right to object to our processing of your personal data. There are legitimate reasons why we may refuse your objection, which depend on why we are processing it. As we are processing your personal data based on your consent, you can withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal. Your rights are particularly indicated in Part I of this Privacy Policy.
Other important information
Providing personal data is voluntary, but necessary to achieve the individual purposes of their processing.
Your data may be processed outside the European Economic Area – Meta Platforms, Google or Microsoft may process your data on a server in the United States. In these cases, Google processes your personal data outside the European Economic Area, but this is done on the basis of the applicable security measure- Data Privacy Framework (an adequacy decisions) or so-called standard contractual clauses, provisions of the contract concluded between us and our providers, which guarantee an adequate degree of secure processing of your personal data. Moreover, the identifiers and the level of anonymization used make it impossible to identify you.
Part III Data processing via communication channels
Below we present the principles of personal data processing that apply when you send us an e-mail with a question or request for an offer or information about the service; by contacting us via the data available on our website and when you contact us using the contact form available on our website.
Purpose and lawful basis for processing
When you contact us to make an enquiry or ask us question, we collect information, including your personal data, so that we can respond to it.
The lawful basis we rely on to process your personal data is article 6(1)(a) of the GDPR, which is your consent.
What we need and why we need it?
If you contact us via email, contact form on our website or post, we’ll need a return address for response and your contact data (name, e-mail, post address).
What we do with it?
We’ll keep a record of our response. We use the information supplied to us to deal with the enquiry and any subsequent issues that may arise, and to check on the level of service we provide.
How long we keep it?
We will process your data until your consent is withdrawn, and in the remaining scope we will process it until the limitation period for claims and in the period resulting from legal regulations determining the storage time of accounting documents.
The nature of providing the data
Providing your data is voluntary.
Who is the recipient of your personal data?
The recipient of your personal data, i.e. an external entity that will be able to participate in the processing of your data, will be our trusted subcontractors - IT service providers in the field of data hosting and business mail services, and in the event of concluding a contract and placing an order by you, they will also be entities whose activities are ancillary to our activities, including in particular entities providing accounting, legal, auditing and consulting services.
Other relevant information
We use Make.com, a workflow automation platform provided by Celonis, Inc., One World Trade Center, 87th Floor, New York, NY 10007, USA, to automate the transfer of data submitted through our contact form to our internal systems/CRM.
As a result, personal data may be processed outside the EEA. Where such transfers occur, appropriate safeguards are applied, including Celonis, Inc.’s certification under the EU-U.S. Data Privacy Framework and, where necessary, the European Commission’s Standard Contractual Clauses.
What are your rights?
You have the right to withdraw your consent at any time and your other rights are indicated in Part I of this Privacy Policy.
Part IV Information for the person who concludes the Agreement for our Services
Below, we present to you the principles of personal data processing, which apply when you send us request to join our Community or you enter into an Agreement for our Services with us.
For what purpose do we process your data?
We process your personal data to perform Application Process to assess your eligibility for our Services, and in the case of concluding agreements for our services – to enable the performance of such agreements. We may process your data in order to record our online sessions and meetings- solely for purpose of internal purposes, such as preparing Materials, improving the quality of services, and maintaining internal documentation.
On what legal basis do we process your data?
The legal basis for the processing of your personal data is:
• in order to perform the Application process- the legal basis for processing is taking steps at the request of the data subject in order to conclude the contract (Article 6 paragraph 1 letter b of the GDPR);
• in order to enable you to use our Services, under the Agreement we have concluded - the legal basis for processing is the necessity of processing to perform the agreement (Article 6 paragraph 1 letter b of the GDPR);
• in order to document the online meetings and sessions- the legal basis for processing is our legitimate legal interest consisting in documenting and improving services, as well as preparing additional materials for Users (Article 6 paragraph 1 letter f of the GDPR);
• in order to fulfill the statutory obligations incumbent on us as the controller resulting in particular from tax regulations and accounting regulations - the legal basis for processing is the fulfillment of our legal obligation (Article 6 paragraph 1 letter c of the GDPR);
• in order to handle complaints - then the legal basis for processing is our legitimate legal interest consisting in reviewing the complaint (Article 6 paragraph 1 letter f of the GDPR);
• in order to possibly establish and pursue claims or defend against them – the legal basis for processing is our legitimate interest (Article 6, paragraph 1, letter f of the GDPR), consisting in the protection of our rights.
How long do we process your data?
We will process your data for the duration of the contract, and after its performance for the limitation period for claims, as well as the period resulting from legal provisions determining the storage period of accounting documents.
Who is the recipient of your personal data?
The recipient of your personal data, i.e. an external entity that will be able to participate in the process of processing your data, will be our trusted subcontractors – providers of IT services in the field of data hosting and business mail services, as well as entities whose activities are ancillary to our activities, including in particular entities such as banks and payment operators, entities providing accounting, legal, auditing and consulting services.
The recipient of your data will also be companies that provide payment services, to the extent that you decide to use the payment methods offered by them. In such a case, however, these companies are separate controllers of personal data and operate according to their own privacy policies.
We use Slack, a communication platform provided by Slack Technologies Limited, Salesforce Tower, 60 R801, North Dock, Dublin, Ireland. Due to the global nature of the service, personal data may be transferred to and processed in countries outside the European Economic Area (EEA). Where such transfers occur, appropriate safeguards are implemented, including the use of Standard Contractual Clauses approved by the European Commission and other security measures to ensure an adequate level of data protection.
We use Google services (Google Workspace) provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. In connection with the use of these services, personal data may be processed by Google and may be transferred to Google LLC in the United States and other entities within the Google group. Where such transfers occur, they are protected by appropriate safeguards, including Standard Contractual Clauses approved by the European Commission and participation in the EU-US Data Privacy Framework.
The nature of providing data
Providing your data is voluntary, although some of the data indicated by us must be provided mandatory in order to conclude the Agreement, and failure to provide it results in the lack of its performance. Providing the remaining data is optional.
Other important information
Your data will be processed outside the European Economic Area, in connection with the use of the tools indicated above. Please note that in such instances we always makes sure that they are protected by appropriate safeguards.
What rights do you have?
Your rights are indicated in Part I of this Privacy Policy.
Part V: Subscribing to our e-newsletter
Below we present to you the principles of personal data processing that apply when you decide to subscribe to our newsletter.
Purpose and lawful basis for processing
Our purpose for collecting the information is so we can provide you with a service and let you know about upcoming events and news.
The lawful basis we rely on for processing your personal data is your consent under article 6(1)(a) of the GDPR.
What we need?
Your email address.
Why we need it?
We use your email address to send you our E-newsletter.
What we do with it?
We only use your details to provide the service.
How long we keep it?
Unless you withdraw your consent. In the event of withdrawal of consent, the relevant data will be deleted immediately.
Who is the recipient of your personal data?
The recipient of your personal data, i.e. an external entity that will be able to participate in the processing of your data, will be our trusted subcontractors - IT service providers in the field of data hosting and business mail services. In order to send our newsletter, we will use the _______ tool of _____________.
Other relevant information
Your data will not be processed outside the European Economic Area.
What are your rights?
Your rights are indicated in Part I of this Privacy Policy.
Part VI Data processing as part of our marketing activities
Below we present the principles of personal data processing that apply when you use and communicate with us using our profiles on Facebook, LinkedIn and Twitter social networking sites (referred to as "fan pages"). We publish on our fan pages on a regular basis and share the content, offers and recommendations of our products and services.
For what purpose is your data processed?
We process your data only in connection with maintaining our profiles in social media, including to inform you about our activity and to promote various types of events, services and products, as well as to communicate with you via functionalities available in social media.
Remember that social network controllers record your activity using cookies and other similar technologies every time you interact with our fan pages and other websites on Facebook, LinkedIn and Twitter. Fan page controllers have access to general statistics about your (as a fan page visitor) interests and demographic data (such as age, gender, region). As part of the use of social networking sites, the scope and purposes of data processing in social networking sites have been defined by the controllers of these sites.
On what legal basis do we process your data?
The legal basis for the processing of your personal data is:
• our legitimate interest (Article 6(1)(f) of the GDPR) consisting in promoting our own brand and building and maintaining a community associated with the brand;
• Your consent to the creation of data for website statistics on Facebook, LinkedIn or Twitter (Article 6(1)(a) of the GDPR).
How long do we process your data?
We will process your personal data for as long as it is necessary to achieve the purposes described in this Privacy Policy, in particular to fulfill our contractual and statutory obligations, unless you withdraw your consent to the processing of your data earlier.
Facebook, X and LinkedIn process your data when using our fanpages for their own purposes, not covered by this Privacy Policy. We have no influence on the activities of these websites related to the aforementioned data processing. In this regard, we refer to the privacy policies of individual social networking sites:
Facebook Data Policy.
X Data Policy.
LinkedIn Data Policy.
Who is the recipient of your personal data?
The recipient of your personal data, i.e. an external entity that will be able to participate in the processing of your data, will be our trusted subcontractors - IT service providers in the field of data hosting and business mail services. We use social media services provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, which is administrator of Facebook LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland administering the LinkedIn social network; X International Company, Cumberland Place, Fenian Street Dublin 2, D02 AX07 Ireland administering X social network and LIVECHAT Sp. z o. o. with its registered office in Zwycięska 47 53-033 Wrocław NIP: 899-244-71-96 administering the livechat.com website - collecting data from our fanpages.
The nature of providing the data
When you connect with our fan pages - your personal data - including IP address, other identifiers and other information are collected via cookies or other similar technologies.
As part of using our fan pages, the scope and purposes of data processing on social networking sites are determined by the controllers of these sites.
What rights do you have?
Your rights are indicated in Part I of this Privacy Policy.
Part. VII: Cookies policy
What are cookies and other similar technologies?
A cookie is a text file saved by a web server on your computer or mobile device. Its content can only be downloaded and read by the server that created the file. Cookies are unique to your browser or mobile application you are using. The content of a cookie often consists of identifiers, website names and sequences of numbers and letters.
Essential cookies
What are essential cookies and can I reject them?
These cookies are necessary for the website to function and cannot be disabled without affecting your use of this website. These cookies are usually only placed in response to specific actions taken by the user on the website. We use these cookies because we believe it is in our legitimate interest and also our users to allow this website to function properly.
Why do we use essential cookies?
We usually use these files to perform a specific function of the website, e.g. remembering the user's acceptance of the content of the Privacy Policy.
What data is collected and used by essential cookies?
Essential cookies do not collect or use personal information.
How long do we keep this data?
Strictly essential cookies are usually session cookies which only store data for the duration of the user's visit on the website, but if the cookie supports remembering your acceptance of the Privacy Policy, the data is retained longer to remember you during subsequent visits.
Analytical cookies
What are analytics cookies and can I reject them?
Also known as "performance cookies", "measurement cookies" or "statistical cookies", these cookies allow us to count visits and traffic sources so that we can measure and improve the performance of our site. They help us know which pages are the most and least popular and see how users navigate the site.
We use cookies to understand how users interact with our site, for example to see if users are leaving certain pages or experiencing problems on them. We use cookies because we have a legitimate interest in monitoring website activity and its performance. You can reject these cookies by changing your cookie settings.
Why do we use analytical cookies?
We use analytical cookies to enable measurement and analysis. These cookies allow us to obtain, among others, the following information:
- what websites users visit before getting on our website, for example whether users came directly to our website;
- which pages on our website are the most and least popular, how much time users spend on each page and on each part of the page, what links and buttons they click;
- what device users use to visit our website, e.g. information about the brand and model, which browser and operating system users use.
What data is collected and used by analytical cookies?
Cookies usually only store a coded identifier. We are unable to identify you. However, this ID is a link to Google's analytics servers, allowing Google to create a profile of how the user uses the site. Browser data is also processed as a result of reading the cookie file, including technical data of the device used to access the website and its location.
We do not collect any personal information through statistical cookies. We generally only receive aggregated data about users of our website. However, Google processes your personal data in order to provide us with these aggregated statistics. In addition, since other websites also use Google Analytics, Google not only has a profile of how you use our website, but also how you use the many other websites which also use Google Analytics. Google may also associate cookie information with your account information if you are logged into your Google Account while browsing to create an even more detailed profile about you. To find out more about how Google processes your personal data, please refer to the Google Privacy Policy.
How long do we keep this data?
The period of storage of analytical files, depending on the country and the purpose of the cookie, may be up to 24 months. For example, some cookies are only stored on your device when you visit the website. Some cookies store information for 24 hours to remember you as a unique visitor to the site on that day. Others can be stored for up to 24 months.
Cookies used on our website
The table below shows which cookies we use and why.
Cookie
Name
Purpose (essential/ analytical/ marketing)
Retention period
Advertising cookies
These cookies are placed by our advertising partners. They are used to build a profile of your interests, to show you relevant adverts on other sites, and to enable you to like and share our content on social media. They do not directly store personal data, but work based on the ability to uniquely identify the browser and device that the user uses to browse the Internet. In addition, other companies that place these cookies may associate users’ personal information with the pages users view if they are logged into their services while browsing.
Cookies used on our website
The text below shows what cookies we use and why:
Cookie, Name, Purpose (essential/analytical/marketing/preferential), Retention period.
How can I change cookie settings?
You can find out more about how to manage cookies in different browsers, here:
If you do not want Google Analytics cookies to be installed on your device, please visit: http://tools.google.com/dlpage/gaoptout.
You can always change your choice of cookies by clicking here [link].
