This is an English translation of the Polish privacy policy. In case of any discrepancy, the Polish version prevails.

Privacy policy of alnosmarketing.pl

Version 1.1 of 19 October 2026.

1. Data controller

The controller of your personal data is Jacob Byron Sloan, kontakt@alnosmarketing.pl, tel. +48 84 300 10 06 (“Alnos Marketing”, “we”). “Alnos Marketing” is the trading name (brand) of this business.

2. Contact for data protection matters

• email: kontakt@alnosmarketing.pl
• phone: +48 84 300 10 06

We will add a postal address to section 1 once it has been set. Until then, please contact us by email or phone.

We have not appointed a data protection officer.

3. Purposes, legal bases and retention periods

3.1. The “Free audit and contact” form, incoming email and phone calls

Data: full name, company name, email, phone number (if you provide it), website address, industry, the content of your message, information about the consents you have given, campaign code and date of the request; for calls – your phone number and any voicemail you leave.

Purpose and legal basis: replying to your request, preparing and sending the audit and the quote – Art. 6(1)(b) GDPR (steps taken at your request prior to entering into a contract) and, where you act on behalf of a company, Art. 6(1)(f) GDPR (our legitimate interest: handling enquiries from people who have contacted us). We send the audit by email together with a short note on how we can help and what it costs – as stated next to the form.

Retention: up to [12] months from the last contact if we do not enter into a contract.

3.2. Commercial information by email and by phone (only with your consent)

We send it only if you tick the separate consent box for the channel concerned (email or phone/SMS). Legal basis: your consent – Art. 6(1)(a) GDPR in conjunction with Art. 398 of the Polish Electronic Communications Law (Prawo komunikacji elektronicznej). Consent is voluntary; you can withdraw it at any time – using the link in any message, by email to kontakt@alnosmarketing.pl or by phone (+48 84 300 10 06). Withdrawing consent does not affect the lawfulness of processing carried out before its withdrawal.

Retention: until you withdraw your consent or object.

3.3. Clients – entering into and performing a contract

Art. 6(1)(b) GDPR; for contact persons at a client that is a company – Art. 6(1)(f) GDPR (contact about the contract). Retention: for the duration of the contract and then until the limitation period for claims expires.

3.4. Accounting and tax

Art. 6(1)(c) GDPR in conjunction with tax and accounting law. Retention: 5 years from the end of the calendar year in which the tax payment deadline fell.

3.5. Accountability for consents, suppression list and claims

We keep evidence of consents given and withdrawn (the text and version of the consent, the date, the source and the double opt-in confirmation) and a short suppression list (email address or postal address, company name, date of objection), so that we can demonstrate compliance with the law and make sure we do not contact anyone who has objected again. Legal basis: Art. 6(1)(f) GDPR (demonstrating compliance, respecting objections, establishing, exercising or defending legal claims).

Retention: evidence of consent – 5 years from the last message sent on the basis of that consent; suppression list – for as long as we carry out marketing.

3.6. Requests from listing platforms (Oferteo, Fixly, Useme and similar)

If you post a request on such a platform, the platform operator passes on to us the data we need to submit an offer (e.g. first name, company name, contact details, the content of the request). We use this data only to reply to that request and for further correspondence about it – Art. 6(1)(f) GDPR, under the terms of the platform concerned. We do not add this data to marketing lists without your consent.

Retention: up to [12] months from the last contact if we do not enter into a contract.

4. Sources of data

We mainly receive data directly from you. The exceptions are described in section 3.6 (listing platforms) and section 5 (letters to businesses). The details of a client’s contact persons (section 3.3) may also be given to us by the client they act for.

5. Postal letters to businesses

We may send a business a one-off postal letter offering our services, with a QR code leading to the form on this website. For this purpose we do not send emails or text messages and we do not call.

• Source of data: public registers – the Central Register and Information on Economic Activity (CEIDG) and the National Court Register (KRS), as well as data made public by the business itself (its website or Google Business Profile). The source used in your case is stated in the letter.
• Categories of data: the entrepreneur’s full name (for sole proprietorships), business name, business address, type of business (e.g. PKD code) and, where available, the NIP (tax identification number).
• Purpose and legal basis: direct marketing of our services – Art. 6(1)(f) GDPR (our legitimate interest). We have carried out a balancing test: we use business data only, the contact is one-off and by post, and objecting is easy and effective.
• Recipients: the printing house, the postal operator and our IT service providers listed in section 6.
• Retention: if you do not reply to the letter, we will delete the data within [3] months of sending it. If you scan the QR code and send the form, section 3.1 applies. If you object, we will keep only the business name, address and date of the objection on our suppression list (section 3.5), so that we do not send another letter.
• The QR code is the same for the whole campaign – it does not allow us to identify who scanned it.
• RIGHT TO OBJECT: you can object at any time to the use of your data for marketing purposes – by phone (+48 84 300 10 06), by email to kontakt@alnosmarketing.pl (ideally with the subject line “SPRZECIW”, Polish for “objection”; any subject line works) or using the form at alnosmarketing.pl/en/sprzeciw.html. Once you have objected, we will no longer process your data for this purpose. We will add a postal address to section 1 once it has been set.

6. Recipients of data

We share data only to the extent necessary with entities that process it on our behalf under data processing agreements (Art. 28 GDPR) or that act as separate controllers (under the law or under their own terms):

• Wix.com Ltd. (Israel) – website hosting, DNS, forms, contact database;
• email and telephony service provider acting under a data processing agreement: Alnos Vending sp. z o.o. (Microsoft 365 / Teams Phone; sub-processor: Microsoft Ireland Operations Ltd.);
• providers of tools, including tools using artificial intelligence, with which we prepare replies, audits and quotes;
• accounting office and invoicing software provider; we submit invoices to the National e-Invoicing System (KSeF) run by the Head of the National Revenue Administration;
• for advertising campaigns on Google, Facebook and Instagram (e.g. when you send us a request through a form in an ad): Google Ireland Ltd. and Meta Platforms Ireland Ltd. (under their terms);
• the printing house and the postal operator (section 5);
• public authorities, where the law requires it.

7. Transfers of data outside the European Economic Area

Wix.com Ltd. is based in Israel, in respect of which the European Commission has found an adequate level of data protection (Decision 2011/61/EU). Some providers (e.g. companies in the Microsoft, Google and Meta groups and providers of AI tools) may process data in the USA – on the basis of the Commission’s decision of 10 July 2023 on the EU-U.S. Data Privacy Framework, if the provider participates in it, or on the basis of standard contractual clauses approved by the European Commission. Cloudflare, Inc. (USA), a Wix sub-processor, participates in the EU-U.S. Data Privacy Framework (European Commission decision of 10 July 2023). You can obtain a copy of the safeguards by writing to kontakt@alnosmarketing.pl.

8. Your rights

You have the right to access your data and obtain a copy of it, to have it rectified or erased, to restrict its processing and to data portability (where we process data by automated means on the basis of consent or a contract). You may withdraw your consent at any time (without affecting processing carried out before the withdrawal) and lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, Poland, uodo.gov.pl). To exercise your rights, contact us (section 2).

9. Do you have to provide your data?

Providing data is voluntary. Without the data the form requires (full name, company name, email, industry) we cannot reply to your request or prepare the audit. Providing the data needed for a contract is a condition of entering into it, and providing some data (e.g. for an invoice) is a statutory requirement.

10. Automated processing

We use IT tools, including artificial intelligence, to prepare replies, audits and quotes. However, we do not make decisions about you based solely on automated processing, including profiling, that would produce legal effects concerning you or similarly significantly affect you (Art. 22 GDPR).

11. Cookies and browser storage

11.1. What we store and why

The alnosmarketing.pl website runs on the Wix platform (Wix.com Ltd.). Traffic to the website passes through the Cloudflare network (Cloudflare, Inc.), which Wix uses. When you visit, cookies and entries in your browser storage (localStorage) are saved on your device, and the website’s and the platform’s scripts read this information. We divide them into two categories:

• strictly necessary – needed to display the website, keep it secure, send the form and remember your choice in the banner. They work from your first visit and do not require consent (Art. 399(3) of the Polish Electronic Communications Law of 12 July 2024, “PKE”);
• analytics (statistics) – would allow the Wix platform to count visits and sessions on the website. We do not use them at the moment, and clicking “Accept” in the banner does not switch anything on – it only saves your choice. Before we start any statistics, we will update this section 11 and ask for your consent (Art. 399(1) PKE). If you click “Essential only” or make no choice, statistics will not be switched on.

We do not use advertising cookies or third-party tools such as Google Analytics, Google Ads or Meta Pixel. If this changes, we will first update this policy and the banner, and we will switch on any new tools only after you consent.

11.2. List of cookies and browser storage entries

On every visit the Wix platform script also fetches a technical, anonymous visitor token and the platform’s own scripts (including consent handling) from Wix servers. The Wix statistics script is downloaded but sends no data, even after you click “Accept”, because we do not run statistics at the moment. In exceptional cases, for example if an attack is suspected, Cloudflare may show a check and set a cf_clearance cookie (strictly necessary, security).

11.3. Legal bases

• Storing information on your device and accessing it: for strictly necessary items – Art. 399(3) PKE (they are strictly necessary to provide the service you request, i.e. displaying the website and sending the form, including its security and remembering your choice); for analytics (if we switch them on) – your consent (Art. 399(1) PKE).
• Where this involves processing personal data (e.g. IP address, session identifier): for strictly necessary items – Art. 6(1)(f) GDPR (our legitimate interest: secure and correct operation of the website and being able to demonstrate your choice); for statistics (if we switch them on) – Art. 6(1)(a) GDPR (your consent).

11.4. Recipients and transfers outside the EEA

• Wix.com Ltd. (Israel) – provider of the website and forms platform, processes data on our behalf. The European Commission has found that Israel ensures an adequate level of data protection (Decision 2011/61/EU).
• Cloudflare, Inc. (USA) – network and bot-protection provider used by Wix (Wix sub-processor). Data from the __cf_bm cookie and your IP address may be processed in the USA. Cloudflare, Inc. participates in the EU-U.S. Data Privacy Framework, covered by the European Commission’s adequacy decision of 10 July 2023 (Art. 45 GDPR).
• Wix sub-processors in other third countries may process data under standard contractual clauses approved by the European Commission (Art. 46 GDPR). More information: section 7.

11.5. How to change or withdraw your choice

You can change your choice at any time, as easily as you made it: click “Cookie settings” in the footer of any page and the banner reappears with the “Accept” and “Essential only” buttons. Once we switch statistics on, choosing “Essential only” will withdraw your consent. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal (Art. 7(3) GDPR).

11.6. Browser settings

You can view and delete cookies and localStorage data at any time in your browser settings (e.g. “Clear browsing data” or “Cookies and site data”) and block them, including for this website only. Instructions are in your browser’s help pages (Chrome, Firefox, Safari, Edge). Blocking strictly necessary items may stop the website or the form from working properly. After you clear your browser data, the banner will appear again.

12. Changes to this policy

We will announce changes on this page, stating the date and number of the new version. Previous versions are available on request.