Privacy policy

Who is responsible for your data?

The data controller is Evelumo sp. z o.o., a company registered in Poland. For privacy matters, withdrawing consent or exercising your rights, write to piotr@evelumo.com.

What data do we receive?

Through our forms we receive your name, email address, company name and any information you choose to include in your enquiry. We also record the material you requested, the page the form was sent from, the traffic source and campaign parameters, the submission ID, and the wording, version and time of the consents you gave.

When you use the site, infrastructure providers may process technical data such as your IP address, browser information and request logs. Please do not enter sensitive data in the form, or information about other people that we do not need to reply to you.

For what purposes and on what legal basis?

• Sending the requested worksheet and handling your submission. We rely on the consent you give in the form, under Article 6(1)(a) GDPR. The submission is stored in our HubSpot contact database. This does not mean you have agreed to receive further offers.
• Replying to your enquiry and scheduling a call. We take steps at your request before entering into a contract (Article 6(1)(b) GDPR). When we are in contact with a company representative, the legal basis is our legitimate interest in business correspondence (Article 6(1)(f) GDPR).
• Emails with advice and offers. We send them only with your separate, voluntary consent (Article 6(1)(a) GDPR and the consent required by the Polish Electronic Communications Law). Declining does not prevent you from receiving the worksheet you requested.
• Security and record keeping. The legal basis is our legitimate interest in protecting the site, establishing or defending legal claims, and demonstrating which consents were given (Article 6(1)(f) GDPR).
• Analytics with consent. If analytics tools are enabled, we send events used to evaluate the site only after you consent to statistics (Article 6(1)(a) GDPR).

Do you have to provide your data?

Providing data is voluntary. Fields marked as required are needed to handle your submission and deliver the material. Without an email address we cannot send it. Consent to marketing emails is separate, unticked by default and not a condition for receiving the material.

Who may receive your data?

We use service providers that the site needs to work: HubSpot for forms, our contact database and correspondence, Cal.com for booking calls, and hosting infrastructure, including Vercel. The calendar loads only after you choose that option. We may pass your contact details and the context of the conversation to it.

After you consent to analytics, we load Google Analytics and PostHog. Our own consent panel stores your choice in your browser for 180 days. We do not attach your name, email address or the content of your enquiry to analytics events. Authorised people handling submissions and bodies entitled by law may have access to the data.

Providers may process data outside the European Economic Area. Such transfers require a basis provided for in the GDPR, for example an adequacy decision or standard contractual clauses. You can obtain information about the safeguards we use, and a copy of them, by contacting us.

How long do we keep your data?

We keep submission data for as long as needed to deliver the material and conclude the correspondence. If the conversation leads to a collaboration, the further retention period follows from handling that collaboration and from applicable legal obligations. We do not treat downloading a material as indefinite consent to marketing.

We process data used for marketing until you withdraw consent or the purpose ends. A limited record of consents given and withdrawn may be kept for as long as needed to demonstrate compliance and defend against claims, taking limitation periods into account. Keeping a record of your opt out also ensures that unwanted emails do not resume.

How to withdraw consent and exercise your rights

You can withdraw consent by writing to piotr@evelumo.com. Marketing emails also contain an unsubscribe link. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

Under the conditions set out in the GDPR, you have the right to access, rectify and erase your data, to restrict its processing and to data portability. You can object to processing based on legitimate interest, and to direct marketing at any time. You can also lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (UODO), or with the supervisory authority in the EU country where you live or work.

Cookies and automated decisions

Essential browser mechanisms keep the site working and remember your choices. Where we provide a cookie consent panel, you can change your choice using the cookie settings button in the footer. Consent to analytics is independent of the consents in the form and is not required to contact us.

Our forms do not make decisions about you that produce legal effects or similarly significant effects based solely on automated processing. Assigning a submission to a topic or campaign helps us handle it.

Changes to this policy

We publish the current version at this address together with its date. A change to this policy does not extend any consent given earlier. If a new purpose requires consent, we will ask for it separately.