How Krowd processes your data — concise, clear, GDPR-compliant.
The controller of your personal data is Firma Handlowo-Usługowa XL38 Rafał Ceglarek, registered at Przecław 92D/1, 72-005 Przecław, Poland, VAT (NIP): PL8513221756, operating under the Krowd brand.
Data-related contact: [email protected].
We process data you actively submit through our forms or correspondence — in particular: name, email address, company name, message content, optionally project budget and timing.
We also process limited technical data implied by the technology: IP address, browser type, device data, session metadata — for security and analytics purposes only (subject to your cookie consent).
Your data is used exclusively to: respond to inquiries sent via forms, conduct ongoing project correspondence, run our own marketing (where you have consented), and secure the website against abuse.
Processing is based on: GDPR Art. 6(1)(a) — your consent (forms, newsletter, marketing cookies); GDPR Art. 6(1)(b) — pre-contract steps or contract performance; GDPR Art. 6(1)(f) — controller's legitimate interest (site security and communication).
Form submissions are retained for the duration of the project conversation and, after it ends, for 24 months for archival purposes and potential claims.
Newsletter data — until you withdraw consent.
Server logs — per the hosting provider's policy (typically 30 days).
Your data may be processed on our behalf by processors under data-processing agreements: hosting provider (OVHcloud SAS, France — EU data centres), transactional email service (Resend Inc., USA — under Standard Contractual Clauses).
Upon your consent to analytics cookies, your data may also be transferred to: Google LLC (Google Analytics 4 — with IP anonymisation and Consent Mode v2), Microsoft Corporation (Microsoft Clarity — heatmaps and anonymised session recordings; form fields are masked by default; details: https://learn.microsoft.com/en-us/clarity/setup-and-installation/privacy-disclosure).
Upon your consent to marketing cookies, your data may be transferred to: Google LLC (Google Ads — ad-campaign conversion measurement) and Meta Platforms Ireland Ltd. (Meta Pixel — ad-campaign measurement and optimisation across Meta services). By default neither mechanism collects data before your consent (Google Consent Mode v2 / Meta revoke-by-default).
All of the above providers comply with GDPR and the EU-US Data Privacy Framework (for US transfers). You can withdraw any consent (analytics or marketing) at any time in the cookie settings.
We do not sell or share your data for third-party marketing.
You have the right to: access your data, rectify it, erase it, restrict processing, port your data, object to processing (particularly for marketing), withdraw consent at any time (without affecting the lawfulness of processing performed before withdrawal).
You may also lodge a complaint with the President of the Polish Personal Data Protection Office (UODO) — https://uodo.gov.pl — or your local supervisory authority within the EEA.
We do not perform automated decision-making that produces legal effects concerning you or similarly significantly affects you, including profiling within the meaning of GDPR Art. 22.
This site uses cookies — categories and consent controls are described in the cookie banner available on every page. You may change your preferences at any time by clearing site data or clicking the “Cookie settings” link (once published).
For all matters related to personal-data processing, please contact: [email protected].