Skip to main content

Privacy Policy

How we protect and process your data

This Privacy Policy explains how Polybrand Bartosz Sergot processes personal data, uses cookies and analytics, and how you can exercise your rights under GDPR.

Last updated: 2026-03-19

On this page

1. Data controller

The controller of your personal data is Polybrand (data controller: Bartosz Sergot), based in Bydgoszcz, Poland (NIP: 9532365296). For any privacy matters, contact: kontakt@polybrand.eu or phone: +48 666 897 499.

2. Scope

This Policy applies to the website polybrand.eu and its language versions (including /en/ and /de/). It covers data collected via forms, cookies, analytics tools and communication channels (email, phone).

3. Data we process

  • Contact details: name, email, phone, company name.
  • Project details: goals (including lead generation/sales/branding), website address, service scope, preferred start date, budget expectations.
  • Booking data submitted through the embedded Google Calendar Appointment Scheduling widget, such as your selected time slot, name, email address and any additional details you provide in the booking form, depending on the fields currently configured in Google.
  • Technical data: IP address, device/browser info, logs (for security).
  • Usage data from cookies/analytics: visited pages, time on site, events.

4. Purposes and legal bases

  • Responding to inquiries (Art. 6(1)(b) GDPR – steps to enter a contract).
  • Scheduling and handling online consultations booked via Google Calendar Appointment Scheduling (Art. 6(1)(b) GDPR – steps to enter a contract or handle a service request, and where necessary Art. 6(1)(f) GDPR – organisation of communication and defence against claims).
  • Preparing offers and providing services (Art. 6(1)(b) GDPR).
  • Lead qualification based on information submitted in forms (e.g. project goal, scope and budget) to prepare an appropriate offer and communication path (Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR).
  • Analytics and service improvement (Art. 6(1)(f) GDPR – legitimate interest in optimisation).
  • Marketing of our services (Art. 6(1)(a) GDPR – consent, or Art. 6(1)(f) GDPR – legitimate interest in direct marketing).
  • Security and fraud prevention (Art. 6(1)(f) GDPR).
  • Legal obligations (e.g., accounting) (Art. 6(1)(c) GDPR).

5. Cookies and similar technologies

We use cookies to ensure proper operation of the site, remember language choices, measure traffic and run marketing campaigns. You can manage cookies in our banner or in your browser settings. Blocking some cookies may affect site functionality.

If you use the embedded Google Calendar Appointment Scheduling widget on the contact page, your browser connects directly to Google servers. This may result in Google receiving technical data such as your IP address, browser/device data, date and time of the request, and interaction with the booking module, in line with Google's Privacy Policy. Google booking pages may be visible to anyone who has the booking link.

Game modules and UI animations (including the after-hours T-Rex, SkiFree.js, Blockrain.js and DuckHunt-JS modules) currently run client-side and do not introduce separate marketing or analytics cookies beyond the mechanisms described in this Policy.

SkiFree.js may store only a local browser high score in localStorage under the key polybrandSkifreeHighScore. This value is not transmitted to us or to external analytics systems.

In the current implementation, Blockrain.js does not write its own cookies or browser storage and is launched locally inside an isolated fullscreen shell without third-party trackers.

In the current implementation, DuckHunt-JS does not write cookies or data to localStorage/sessionStorage/IndexedDB, runs inside a local fullscreen shell, loads audio locally and does not add third-party trackers.

If future games include third-party integrations using additional cookies or similar technologies, this Policy and our cookie consent layer will be updated before activation.

6. Analytics

We use Google Analytics 4 and Google Search Console to analyse aggregated traffic. Data is processed in anonymised or pseudonymised form where possible. IP anonymisation is enabled in GA4.

7. Marketing and advertising

We may use Google Ads and Meta Ads conversion tags to measure campaign effectiveness. Marketing cookies are activated only after your consent.

8. Data recipients

Your data may be shared with:

  • Hosting and IT providers supporting our website.
  • Google LLC – when you use the embedded Google Calendar Appointment Scheduling widget or open the external booking page.
  • Analytics and advertising partners (Google, Meta) – only when you consent to relevant cookies.
  • Email and communication providers (e.g., hosting, email service).
  • Accountants or legal advisors when necessary to fulfil legal duties.

9. Data retention

  • Inquiry and offer data: for the duration of communication and up to 12 months after its end.
  • Booking and consultation scheduling data: for the time needed to arrange the meeting and follow-up contact, and generally no longer than 12 months after the last contact, unless a longer period is required by law or by the resulting contract.
  • Contract data: for the term of the agreement and statutory limitation periods.
  • Accounting documents: for periods required by law.
  • Cookies/analytics: according to tool settings or until withdrawn via the banner/browser.

10. Your rights

You have the right to access, rectify, erase, restrict processing, object (including to marketing), and data portability. You can withdraw consent at any time without affecting prior processing. You may lodge a complaint with the supervisory authority (in Poland: President of the Personal Data Protection Office).

11. Security

We apply technical and organisational measures appropriate to the risk, including encryption in transit (HTTPS), access controls, monitoring and regular updates.

12. Contact

For privacy matters contact kontakt@polybrand.eu or phone +48 666 897 499.

13. Changes to this Policy

We may update this Policy to reflect changes in law or our processes. The latest version is always available at this URL with the update date indicated above.

14. Licensing and open-source attribution

This website uses open-source components, including the t-rex-runner, SkiFree.js, Blockrain.js and DuckHunt-JS game modules used in the after-hours section.

UI animations are custom front-end elements unless explicitly stated otherwise.

Contact via WhatsApp - Polybrand