Introduction
At UYSD, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.
Data Controller
UYSD is the data controller responsible for processing your personal data. Our contact details are:
Company: UYSD
Address: ul. Henryka Pachońskiego 5/91, 31-223 Kraków, Poland
Email: office@pagefactory.pl | Phone: +48 884 603 351
Legal Basis for Processing
We process your personal data based on the following legal grounds under GDPR Article 6:
Consent (Article 6(1)(a)) - When you provide explicit consent for specific processing activities
Contract performance (Article 6(1)(b)) - To fulfill our contractual obligations and provide requested services
Legitimate interests (Article 6(1)(f)) - For website analytics, security, and business operations
Legal obligation (Article 6(1)(c)) - To comply with applicable laws and regulations
Information We Collect
We may collect information about you in a variety of ways. The information we may collect includes:
Personal identification information (name, email address, phone number)
Business information (company name, project requirements)
Technical data (IP address, browser type, device information)
Usage data (pages visited, time spent on site, click patterns)
Information in Forms
Our website collects information voluntarily provided by users, including personal data:
We collect information you voluntarily enter in forms
We may record connection parameters (timestamp, IP address)
Form data is processed for the purpose resulting from the specific form's function (e.g., handling service requests, business contact, service registration)
Each form clearly indicates its purpose and context
Our multi-step quote wizard collects detailed project requirements and optional file uploads; see also the section on quote wizard, CRM, and file uploads
How We Use Your Information
We use the information we collect for various purposes, including:
To provide, maintain, and improve our services
To process your requests and respond to your inquiries
To send you updates, newsletters, and marketing communications (with your consent)
To analyze website usage and improve user experience
To measure advertising effectiveness and optimize ad campaigns (only with marketing consent)
To associate activity with signed-in Google user data for better measurement (when marketing cookies are consented)
Data Recipients
In some situations, we may share your personal data with other recipients when necessary to fulfill our contract with you or to meet our legal obligations. This includes:
Hosting providers (under data processing agreements)
Authorized employees and collaborators who use data to fulfill the website's purpose
Marketing service providers (only with your consent)
Third-party service providers (such as Google Analytics) under appropriate data processing agreements
Google Signals & Advertising Data
We use Google Analytics 4 with Google Signals and Google Consent Mode v2. This involves:
Collection of Google advertising cookies and IDs when you consent to marketing cookies
Association of your web activity with Google's signed-in user information for improved analytics and advertising measurement
Data may be used for audience creation, bidding optimization, and conversion measurement in Google Ads (if you have consented to marketing cookies)
Your activity data may be accessed and deleted via Google My Activity (myactivity.google.com)
You can control Google Signals through your consent choices and Google Ads settings
Data Protection
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
Technical Security Measures
We employ various technical measures to protect your data:
SSL encryption for all data transmission (login areas and forms are protected with SSL certificates)
Regular password updates for administrative access
Regular security backups of data
Regular updates of all software and components used for data processing
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:
Contact and inquiry data: Retained for 3 years after last contact or until you request deletion
Quote wizard and CRM data (including uploaded branding files): Retained for up to 3 years after last contact about the quote, or until you request deletion
Contractual data: Retained for the duration of the contract plus 6 years for legal compliance
Website analytics data: Retained for 26 months (Google Analytics default) or until you withdraw consent
Marketing data: Not processed longer than 3 years
Hosting
Our website is hosted on secure cloud infrastructure. The hosting provider maintains server logs for technical reliability. These logs may include:
Resources identified by URL (addresses of requested resources - pages, files)
Time of request arrival and response
Client station name - identification via HTTP protocol
Information about errors that occurred during HTTP transactions
URL of the previously visited page (referer link) - if access to the website occurred via a link
Information about the user's browser
IP address information
Diagnostic information related to the process of ordering services through forms on the website
Server Logs
Information about user behavior on the website may be logged. This data is used for website administration and technical maintenance purposes.
Cookies
We use cookies and similar tracking technologies to track activity on our website and store certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.
Learn more about our Cookie Policy
Your Rights
Under GDPR and other applicable data protection laws, you have the following rights:
Right to access - You can request copies of your personal data
Right to rectification - You can request correction of inaccurate data
Right to erasure - You can request deletion of your personal data
Right to restrict processing - You can request limitation of data processing
Right to data portability - You can request transfer of your data
Right to object - You can object to processing based on legitimate interests or for direct marketing purposes
Automated Decision Making
We may use automated decision-making processes, including profiling, to provide services under our contract and for direct marketing purposes. You have the right to object to such processing. Providing personal data is voluntary but necessary for website functionality.
Data Transfers
Your personal data is primarily processed within the European Economic Area (EEA). When we use third-party services (such as Google Analytics) that may transfer data outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.
Right to Lodge a Complaint
If you believe that our processing of your personal data violates GDPR, you have the right to lodge a complaint with a supervisory authority:
Polish Data Protection Authority (UODO): ul. Stawki 2, 00-193 Warsaw, Poland | Website: uodo.gov.pl
You can also contact us directly at office@pagefactory.pl to resolve any concerns before filing a complaint
Contact Us
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:
Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
Quote wizard, CRM, and file uploads
When you submit our multi-step website quote wizard, we process personal and project data to prepare your estimate and factory preview site.
Data collected: contact details (name, email, phone), project and branding requirements, optional company information, configuration choices (languages, features, integrations), and files you upload (such as logo or brand guideline images).
Purpose and legal basis: pre-contractual steps and your explicit consent (GDPR Art. 6(1)(b) and 6(1)(a)) to evaluate your request, configure a preview site, and communicate about your project.
CRM storage: submissions and uploaded assets are stored in our internal CRM on EU infrastructure (OVH). Data is used only to prepare your quote, build your preview site, and support project communication. Access is limited to authorized UYSD staff and systems required to deliver the service.
File uploads: files are stored securely in the EU, linked to your quote record, with size and type restrictions. Do not upload sensitive personal documents unless required for your project.
Google reCAPTCHA: the quote form uses Google reCAPTCHA to prevent spam and abuse. Google may process technical signals (including IP address and interaction data) under Google's policies. Legal basis: our legitimate interest in protecting our systems (GDPR Art. 6(1)(f)).
Retention: quote and CRM records follow the contact and inquiry retention period in the Data Retention section unless a contract requires longer storage.