How Krowd processes your data: concise, clear, GDPR-compliant.
The controller of your personal data is Firma Handlowo-Usługowa XL38 Rafał Ceglarek, registered at Przecław 92D/1, 72-005 Przecław, Poland, VAT (NIP): PL8513221756, operating under the Krowd brand.
Data-related contact: contact@krowd.one.
We process data you actively submit through our forms or correspondence — in particular: name, email address, company name, message content, optionally project budget and timing.
We also process limited technical data implied by the technology: IP address, browser type, device data, session metadata — for security and analytics purposes only (subject to your cookie consent).
Your data is used exclusively to: respond to inquiries sent via forms, conduct ongoing project correspondence, run our own marketing (where you have consented), and secure the website against abuse.
Processing is based on: GDPR Art. 6(1)(a) — your consent (forms, newsletter, marketing cookies); GDPR Art. 6(1)(b) — pre-contract steps or contract performance; GDPR Art. 6(1)(f) — controller's legitimate interest (site security and communication).
Form submissions are retained for the duration of the project conversation and, after it ends, for 24 months for archival purposes and potential claims.
Newsletter data — until you withdraw consent.
Server logs — per the hosting provider's policy (typically 30 days).
Your data may be processed on our behalf by processors under data-processing agreements: hosting provider (OVHcloud SAS, France — EU data centres), transactional email service (Resend Inc., USA — under Standard Contractual Clauses).
Upon your consent to analytics cookies, your data may also be transferred to: Google LLC (Google Analytics 4 — with IP anonymisation and Consent Mode v2), Microsoft Corporation (Microsoft Clarity — heatmaps and anonymised session recordings; form fields are masked by default; details: https://learn.microsoft.com/en-us/clarity/setup-and-installation/privacy-disclosure).
Upon your consent to marketing cookies, your data may be transferred to: Google LLC (Google Ads — ad-campaign conversion measurement) and Meta Platforms Ireland Ltd. (Meta Pixel — ad-campaign measurement and optimisation across Meta services). By default neither mechanism collects data before your consent (Google Consent Mode v2 / Meta revoke-by-default).
All of the above providers comply with GDPR and the EU-US Data Privacy Framework (for US transfers). You can withdraw any consent (analytics or marketing) at any time in the cookie settings.
We do not sell or share your data for third-party marketing.
You have the right to: access your data, rectify it, erase it, restrict processing, port your data, object to processing (particularly for marketing), withdraw consent at any time (without affecting the lawfulness of processing performed before withdrawal).
You may also lodge a complaint with the President of the Polish Personal Data Protection Office (UODO) — https://uodo.gov.pl — or your local supervisory authority within the EEA.
We do not perform automated decision-making that produces legal effects concerning you or similarly significantly affects you, including profiling within the meaning of GDPR Art. 22.
This site uses cookies — categories and consent controls are described in the cookie banner available on every page. You may change your preferences at any time by clearing site data or clicking the “Cookie settings” link (once published).
For all matters related to personal-data processing, please contact: contact@krowd.one.
Where we get data. If you run a business and we prepare an assessment of your online presence or an audit proposal, we use publicly available information about the business that our team collects manually: business name, business address, tax ID (NIP) and REGON (from the business website or a public search service, e.g. the Polish VAT taxpayer register), website, public business profiles on social media and booking services, and the Google Maps listing. We also use our own observations during a visit and technical parameters of the business website (secure connection, mobile version, speed, visibility to search engines, presence of contact links on the site and the mail configuration in the domain's public DNS records), which we measure automatically. We do not collect data automatically from websites and we do not buy databases. When you use the free check on krowd.one yourself, the data comes from you: business name, industry, website address, optionally a profile link and, only with your consent, an email address and a phone number. When you contact us through an ad form on Meta services, we receive the data you enter there.
Purposes and legal bases. We prepare the assessment of your online presence and the audit proposal on the controller's legitimate interest (GDPR Art. 6(1)(f)). We run the free check at your request on GDPR Art. 6(1)(b) or (f). We send commercial emails and make marketing phone contact only with your consent (GDPR Art. 6(1)(a) and Art. 398 of the Polish Electronic Communications Law), which you can withdraw at any time. The free check does not require marketing consent.
Retention. We delete the data of a business we have not been in contact with after 30 days. After contact is made we keep it for up to 180 days from the last activity. Evidence of consents and withdrawals (time, IP address, browser data at the moment of consent) is kept in pseudonymised form for the limitation period of claims. The list of parties we do not want to contact (after an objection or withdrawal of consent) is kept as cryptographic hashes, without business data. The result of the free check is available at a private link for 24 hours.
Recipients. Data is processed on our behalf by: our hosting provider (OVHcloud), our email provider (Resend), Google (website speed measurement with PageSpeed; we only send the business website address) and, for submissions from an ad form, Meta. Details about providers and transfers outside the EEA are in section 6.
Your rights. You have the right of access, rectification, erasure, restriction of processing and portability, the right to object to processing based on legitimate interest (GDPR Art. 21) and the right to withdraw consent at any time without affecting the lawfulness of earlier processing. To use these rights, write to contact@krowd.one. Every commercial message also contains an unsubscribe link. You may lodge a complaint with the President of the Polish Personal Data Protection Office (UODO).
Scoring. The score of your online presence in a mini-audit is our marketing assessment of what is visible from outside. It produces no legal or similarly significant effects for you and is not an automated decision within the meaning of GDPR Art. 22.