Privacy policy

We respect and protect your privacy. That is why we have prepared this document, which sets out how information about the users and clients of Tamago Software Sp. z o.o. is collected and used.

Personal data provided by users and Clients is processed in line with the scope of the permission they have given and with the law, in particular with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: “GDPR”), the Polish Personal Data Protection Act of 10 May 2018 and the Polish Electronic Communications Law of 12 July 2024.

Storing data on Tamago Software Sp. z o.o. servers

We store the data entrusted to us through the website and by e-mail in line with the GDPR. It is protected by technical and organisational measures appropriate to the risk, described in the “Data security” section.

Data controller

The controller of the data collected through the Tamago website is Tamago Software Sp. z o.o., with its registered office in Sopot, ul. Armii Krajowej 116/15, 81-824 Sopot, Poland, entered in the register of entrepreneurs of the National Court Register kept by the District Court Gdańsk – Północ in Gdańsk, 8th Commercial Division of the National Court Register, under KRS number 0000911737, tax ID (NIP) 5851494329, REGON 389476511, with share capital of PLN 50,000.

Contact the controller about personal data at hello@tamago.software or by post at the registered office address.

The controller takes particular care to protect the interests of data subjects and, in particular, ensures that the data it collects is processed lawfully; collected for specified, lawful purposes and not further processed in a way incompatible with those purposes; factually correct and adequate in relation to the purposes for which it is processed; and stored in a form that permits identification of data subjects for no longer than is necessary to achieve the purpose of processing.

Purposes of collecting data

The controller processes personal data for the following purposes:

replying to an enquiry sent through a form on the website – on the basis of the consent given in the form (Art. 6(1)(a) GDPR), and for enquiries sent by e-mail – on the basis of the controller’s legitimate interest in handling correspondence (Art. 6(1)(f) GDPR). If the enquiry concerns working together, we also process the data to take steps at your request before entering into a contract (Art. 6(1)(b) GDPR);
sending commercial information to the e-mail address provided – only if you give separate consent to it (Art. 6(1)(a) GDPR). These materials relate exclusively to the controller’s own offer;
direct marketing of our own services – on the basis of the controller’s legitimate interest (Art. 6(1)(f) GDPR);
keeping website visit statistics and measuring ad performance with analytics and marketing cookies – only on the basis of the consent given in the cookie banner (Art. 6(1)(a) GDPR);
establishing, pursuing or defending claims – on the basis of the controller’s legitimate interest (Art. 6(1)(f) GDPR).

The forms on the website collect your name, e-mail address, company name, phone number and the content of your message. Providing data is voluntary, but without an e-mail address we cannot reply to your enquiry.

Data retention period

Collected personal data is stored for the period necessary to achieve the purpose, and no longer than until consent is withdrawn or a justified objection is raised. We keep enquiry data for as long as we correspond and talk about working together and, if no contract is signed, for no longer than 12 months after our last contact. If we sign a contract, we keep the data for its duration and until the limitation period for claims expires.

Cookie retention periods are listed in the “Cookies” section.

Data recipients

The controller may pass data to providers it engages for services that involve processing personal data, in particular:

the provider of the hosting and server the website runs on;
Google Ireland Ltd. – Google Workspace (the e-mail service that receives form submissions) and Google Tag Manager and Google Analytics (after you consent to analytics cookies);
Meta Platforms Ireland Ltd. – Meta Pixel (after you consent to marketing cookies);
MailerLite – a newsletter and sign-up form tool (after you consent to marketing cookies);
IT service providers and companies handling bulk mailings.

These entities process data under an agreement with the controller and only on its instructions. For the collection and transmission of data via Meta Pixel, the controller and Meta Platforms Ireland Ltd. are joint controllers.

Data may also be disclosed to public authorities where the law requires it, for example during an inspection by the President of the Personal Data Protection Office.

Transfers of data to third countries

Some of the providers we use (Google, Meta) may process data outside the European Economic Area, in particular in the United States.

Personal data is transferred outside the European Economic Area only if one of the following conditions is met: (i) the European Commission has issued a decision confirming an adequate level of protection – for the United States this is the decision of 10 July 2023 covering entities certified under the EU-US Data Privacy Framework, (ii) the transfer is based on standard contractual clauses approved by the European Commission, (iii) the processing is carried out by an entity under binding corporate rules.

Data security

Personal data is stored on secure servers and the connection to the website is encrypted (HTTPS). Only selected employees and associates have access to the data. The place and manner of storing the data are designed to keep it fully secure.

Clients’ rights related to the processing of personal data and automated decision-making

Clients have the following rights related to the processing of personal data:

the right to withdraw consent to data processing,
the right to access personal data and receive a copy of it,
the right to request rectification (correction) of personal data,
the right to request erasure of personal data,
the right to request restriction of the processing of personal data,
the right to object to processing on grounds relating to their particular situation which justify stopping the processing covered by the objection, and to processing for direct marketing purposes,
the right to data portability, i.e. the right to receive personal data in a structured, commonly used and machine-readable format. This right applies only to data processed on the basis of a contract or consent.

The controller does not make decisions about Clients based solely on automated processing, including profiling, that produce legal effects concerning them or similarly significantly affect them. Marketing tools (Meta Pixel) may build profiles to tailor ads, but they run only after you consent to marketing cookies.

To exercise these rights, the Client should contact the controller – contact details above. To make sure that the person contacting the controller is entitled to make the request, the controller may ask for additional information that allows effective authentication and identification.

Right to withdraw consent

To the extent that data is processed on the basis of consent, the consent may be withdrawn at any time. Withdrawing consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal. Consent can be withdrawn by sending a statement of withdrawal to our postal address or to our e-mail address. You can withdraw your consent to analytics and marketing cookies at any time in the cookie settings (also linked in the website footer).

Right to lodge a complaint with a supervisory authority

The Client also has the right to lodge a complaint with the supervisory authority for personal data protection, i.e. the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.

Cookies

The website uses cookies. A cookie is a small file saved in the user’s browser. Cookies may contain identifiers which, combined with other information, constitute personal data, so we set cookies other than the necessary ones only with your consent.

We use three types of cookies:

Necessary: they remember your consent settings (the tamago_consent cookie, kept for 6 months). Without them the website could not respect your choice, so they do not require consent.
Analytics: Google Analytics 4, loaded through Google Tag Manager (the _ga and _ga_* cookies, kept for up to 2 years). They help us understand how users use the website, which allows us to improve its structure and content. We set them only after you consent.
Marketing: Meta Pixel (the _fbp and _fbc cookies, kept for up to 3 months) and MailerLite. They are used to measure ad performance and tailor our communication. We set them only after you consent.

Consenting to cookies is voluntary, and refusing does not limit access to the website’s content.

On your first visit we show a banner in which you can accept or reject analytics and marketing cookies or choose categories in the settings. You can change your decision at any time in the cookie settings – the link is also in the website footer.

In many cases, the software used to browse websites (a web browser) allows cookies to be stored on the User’s device by default. Users can change their cookie settings at any time, in particular to block the automatic handling of cookies in their browser settings or to be notified each time a cookie is placed on their device. Detailed information about the options and ways of handling cookies is available in the software (web browser) settings. Please note, however, that restricting the use of cookies may affect some features available on the Tamago Software Sp. z o.o. website. More information about cookies is available in the “Help” section of the User’s web browser menu.

Statistics

Some data obtained from server logs (IP address, domain, etc.) is used only to keep viewing statistics for the Tamago Software Sp. z o.o. website and to administer the company’s server. After you consent to analytics cookies, we also collect visit statistics with Google Analytics 4.

External links

The website also contains links to other websites. The privacy policies of those websites are governed by separate rules. We are not responsible for the content of those websites or for the privacy policies applied by their owners.

Changes to this policy

When we change the way we process data, we will update this page and the date at the top.