01. Introduction
Widelab Identity and Location: Widelab, formally known as Widelab. Krystian Słowiński, Michał Parulski Sp. k., is located at Aleja Grunwaldzka 472, 80-309 Gdansk, Poland („Widelab”, or „we”). We are registered with the District Court Gdańsk-Północ in Gdansk under no. 0000955431, tax ID/EU VAT no. PL: 5842786771.
Scope of This Notice: This notice applies to data collected via the Widelab website, specifically through direct interactions on our “Let's break the ice” contact form, and via automated means such as cookies.
Compliance with Privacy Laws: We adhere to the General Data Protection Regulation (the “GDPR”), which provides a framework for data protection and privacy in the European Union. Our data protection practices also comply with the e-Privacy Directive and its local implementations, particularly concerning email marketing consents. Furthermore, we recognize and respect the privacy rights of California residents under the California Consumer Privacy Act (the “CCPA”). We actively engage with and adhere to additional relevant privacy laws and regulations applicable to various jurisdictions where our services are accessed or used. This multi-layered approach to privacy ensures that all personal data handled by Widelab is managed with the utmost care and respect for individual privacy rights.
02. Data Processed
Direct Collection
Form Submission: When you complete the "Let's break the ice" form on our website, we collect specific data that you voluntarily provide. This data includes: (i) name and email address (essential for identifying and communicating with you); and (ii) service-related needs (additional information you may provide regarding your requirements or interests in our services, which helps us understand and cater to your needs more effectively).
Scheduling a Call: If you opt to schedule a call via the embedded Calendly widget, this may include preferred dates and times, the purpose of the meeting, and any other preferences or notes you choose to provide to tailor the session to your specific needs. During the scheduling or follow-up process, additional information necessary for contract formation may be collected, such as business details, project scope, or other relevant data to facilitate a potential business engagement.
Automated Collection via Cookies: We use various types of cookies (necessary, performance, functional, and advertising) to enhance site functionality and user experience, processed based on legitimate interests or your consent (which can be withdrawn at any time).
03. Purpose and Legal Basis for Processing
Communication and Response: The data collected via the form is initially used to facilitate communication with you, responding to your inquiries, and providing information about our services based on your consent.
Scheduling and Pre-Contractual Measures: When scheduling a call, the data is processed to arrange the meeting and prepare for potential contractual agreements, which constitutes processing necessary for the performance of a contract or to take steps at your request before entering into a contract.
Contract Formation and Management: If the interaction leads to or involves contract formation, data processing will also be based on:
Performance of a Contract: Necessary for performing a contract to which you are a party or in order to take steps at your request prior to entering into a contract.
Legal Obligations: Processing personal data as required to comply with legal obligations, such as financial reporting, compliance with regulatory requirements, or responding to legal processes.
Legitimate Interests: We may process your data based on our legitimate interests, which include enforcing our contractual and legal rights, defending against any legal claims or disputes, and managing our operational and business needs effectively.
04. Recipients of Personal Data
Third-Party Service Providers: Data collected through our website and associated services are managed and processed with the assistance of several third-party service providers:
Posthog: Used for collecting quantitative data through statistics, helping us analyze and improve our website's functionality.
Google Analytics and Google AdWords: Employed for analyzing user behavior and managing advertising campaigns. Google’s processing locations include data centers outside the EU.
Webflow: Our content management system (CMS) where the contact forms are hosted and managed.
Hubspot: Where we process and store information collected from completed contact forms to manage customer relationships.
Slack: Used for internal communication and storage of user information, specifically for users from the United States.
Calendly: Utilized for scheduling appointments directly through our website, which may involve collecting and processing personal data to manage and confirm appointments.
Updates to Data Disclosures: Should there be any need to disclose personal data with additional parties not listed above, or for new purposes not previously identified, Widelab commits to updating this privacy notice accordingly. We will ensure transparent communication about any such changes, including the nature of the data shared, the identity of the recipients, and the purposes of such processing.
Service Providers and Data Recipients Compliance. Our service providers and data recipients, though independent entities, are contractually obligated to handle data in compliance with the GDPR, CCPA, and other applicable privacy laws. Widelab takes steps to ensure that these third parties adhere to our privacy standards.
05. Transfers of Data to Third Countries
Widelab and its third-party service providers, such as Google, Slack, and Calendly, may transfer data collected from EU citizens to countries outside the European Union. Whenever data is transferred outside the EU, Widelab ensures that:
Adequate safeguards, such as the implementation of standard contractual clauses approved by the European Commission, are in place to protect your data.
All service providers adhere to the EU-U.S. Data Privacy Framework (or equivalent frameworks) where applicable, which establishes a mechanism to comply with data protection requirements when transferring personal data from the European Union to the United States.
06. Data Retention Period
General Retention Policy: Personal data collected through our contact form, Calendly scheduling, and any subsequent conversations are retained only as long as necessary to fulfill the purposes for which it was collected. This includes responding to your inquiries, managing appointments, or continuing communications relevant to your expressed needs.
Specific Retention Examples: Contact form data is retained until the inquiry is resolved or deletion is requested. Calendly scheduling data is kept only as long as necessary for managing appointments, with extended retention for legal record-keeping if required. And conversation records are stored only for the duration necessary to provide services and support, subject to legal compliance needs.
Cookies and Tracking Data: Data collected through cookies and other tracking technologies is retained according to the specifics outlined in our Cookie Policy, which reflects the type of cookies used and their respective lifespans.
07. Your RIghts
Access and Control: You have the right to access, rectify, delete, limit, or object to the processing of your data. You also have the right to data portability and to withdraw consent at any time, without affecting the legality of the processing carried out before the withdrawal.
Exercising Your Rights: You can exercise these rights by contacting us at contact@widelab.co
Right to Lodge a Complaint: If you believe that the processing of your personal data infringes on data protection laws, you have the right to lodge a complaint with a supervisory authority responsible for data protection in your country, or in the place of the alleged infringement.
08. California Consumer Privacy Act (CCPA) Rights
We recognize the privacy rights granted to California residents by the CCPA and provide the following specifics on those rights:
Right to Know and Access: You can request information regarding the collection, use, and sharing of your personal data over the past 12 months. You may also request the specific pieces of personal data we have collected about you.
Right to Deletion: You have the right to request the deletion of your personal data that we collect, subject to certain exceptions provided by law.
Right to Non-Discrimination: You will not receive any discriminatory treatment when you exercise your privacy rights under the CCPA.
Right to Opt-Out of Sale: If we sell personal information, you have the right to opt-out of the sale of your personal information. However, please note that we do not sell personal data as defined by the CCPA.
Contact for More Information: If you wish to exercise any of these rights, have queries, or need additional information regarding our data practices as they relate to the CCPA, please contact us at contact@widelab.co
09. Automated Decision-Making and Profiling
No automated decision-making or profiling is used that will have a legal or similarly significant effect on you based on the data collected from our website.
10. Contact Information
For any further questions regarding your data or to exercise your rights, please contact us at contact@widelab.co