Privacy and cookie policy

1. Data controller

The controller of personal data processed in connection with ars-creo.com is Ars Creo Sp. z o.o. (“Ars Creo”, “we”), Al. Jana Pawła II 43A/37B, 01-001 Warsaw, Poland, Polish tax identification number (NIP): 9522203043.

For privacy matters, contact: hello@arscreo.com.

2. Data we process

• Data supplied in an email, such as your name, email address, company, enquiry and other information you voluntarily provide.
• Technical server-log data, such as IP address, request date and time, requested URL, browser type and error information.
• After consent — information about use of the website collected by Google Analytics 4.
• Your privacy choice stored locally in your browser.

The form displayed on the contact page does not submit or store data. Contact takes place through the provided email address.

3. Purposes and legal bases

• Responding to enquiries and taking steps before entering into a contract — Article 6(1)(b) GDPR, or our legitimate interest in business communication — Article 6(1)(f) GDPR.
• Website security, diagnostics and protection — legitimate interests under Article 6(1)(f) GDPR.
• Google analytics and advertising features — only on the basis of consent under Article 6(1)(a) GDPR and applicable rules on storing information on a device.
• Remembering your consent decision — necessary to respect your choice and demonstrate compliance.

4. Google Analytics 4

The website uses Google Analytics 4 with measurement ID G-REYQSGY2TF. The service provider is Google Ireland Limited. It helps measure traffic, acquisition sources and use of individual pages.

Google Consent Mode v2 is implemented. By default, analytics_storage, ad_storage, ad_user_data and ad_personalization are set to “denied”. Google receives the relevant update after you make a choice. If consent is denied, the Google tag may operate without cookies and send limited measurement signals under advanced Consent Mode.

More information: Google Privacy Policy and Google Analytics privacy and security.

5. Cookies and browser storage

Google may use additional advertising-related technologies only in accordance with the consent granted and the configuration of connected Google services.

6. Managing consent

On your first visit, you can accept all categories, reject all optional technologies or choose categories separately. No action is treated as no consent.

You can change your decision at any time using the “Cookie settings” link in the footer. Withdrawal does not affect the lawfulness of processing before withdrawal. You can also delete existing cookies in your browser settings.

7. Recipients and international transfers

Data may be processed by our hosting and email provider, Google Ireland Limited and technical service providers, only to the extent required for the purposes described.

Google may also process data outside the European Economic Area. Google states that it relies on appropriate transfer mechanisms, including adequacy decisions, the Data Privacy Framework and Standard Contractual Clauses, as applicable.

8. Retention

Correspondence is retained for as long as needed to handle the matter and subsequently for the establishment, exercise or defence of legal claims and compliance with legal obligations. Server logs are retained according to the hosting provider’s retention settings. Google Analytics data is retained according to the service configuration. Your consent choice is remembered for 180 days.

9. Your rights

Depending on the legal basis and circumstances, you may have the right to:

• access your data and obtain a copy;
• rectify or erase data;
• restrict processing;
• data portability;
• object to processing based on legitimate interests;
• withdraw consent at any time;
• lodge a complaint with the competent supervisory authority.

To exercise your rights, email hello@arscreo.com. Information about the Polish supervisory authority is available at uodo.gov.pl.

10. Policy changes

This policy may be updated when services, tool configurations or laws change. The current version will always be published at this address with its last-updated date.