Privacy Policy

The controller of your personal data is WeUnite, based at ul. Gdyńska G/9, 80-340 Gdańsk, Poland.

Contact the Controller at info@weunite.pl or by phone: +48 537 732 320.

We only collect data that you provide to us yourself:

• Contact form (Lead): full name, email address, type of business, service interest.
• Call booking system: full name, email address, chosen meeting time.
• Email correspondence: information contained in the message itself.

We do not collect sensitive data (Article 9 GDPR) or data relating to children under 16. The Site is not directed at minors.

We process your data for the following purposes:

• Data from the contact form and booking system: until your inquiry has been handled, and then for 3 years from the last contact, or until you successfully object.
• Data used for marketing purposes: until consent is withdrawn or an objection is raised.
• Data necessary to establish, pursue, or defend legal claims: for the statutory limitation period for claims (generally 3 years for claims related to business activity).
• System logs and analytics data: up to 13 months.

Your data may only be shared with trusted parties that process data on our behalf, under data processing agreements:

• Supabase Inc. (USA) — database and storage of lead records and booking slots. Data is stored in the EU region (Frankfurt). Transfer takes place under Standard Contractual Clauses (Article 46 GDPR).
• Resend Inc. (USA) — sending emails (confirmations, sequences, reminders). Transfer takes place under Standard Contractual Clauses.
• Vercel Inc. (USA) — application hosting. Data is stored in the EU region. Transfer under Standard Contractual Clauses.
• PostHog Inc. (USA/EU) — analytics tool. Data may be stored in the EU region. Transfer under Standard Contractual Clauses.

We do not sell your personal data to third parties or share it with external parties for advertising purposes.

Under the GDPR, you have the following rights:

• Right of access (Article 15 GDPR) — you can request a copy of your data.
• Right to rectification (Article 16 GDPR) — you can request that inaccurate data be corrected or incomplete data be completed.
• Right to erasure ("right to be forgotten", Article 17 GDPR) — you can request that your data be deleted once it is no longer needed for the purposes it was collected for.
• Right to restriction of processing (Article 18 GDPR) — you can request that processing be restricted in certain cases.
• Right to data portability (Article 20 GDPR) — available for data processed on the basis of consent or a contract.
• Right to object (Article 21 GDPR) — you can object to processing based on legitimate interest, including direct marketing.
• Right to withdraw consent — at any time, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise the rights above, contact us at info@weunite.pl. We will respond within 30 days of receiving your request.

You also have the right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa, Poland, uodo.gov.pl.

We apply appropriate technical and organizational security measures to protect your data against unauthorized access, loss, or destruction, including:

• encrypted HTTPS (TLS) connections,
• access control on the admin panel (Supabase Auth authentication),
• restricting data access to authorized WeUnite staff only,
• regular reviews of permissions and security configuration.

Your data is not used for profiling or for automated decision-making that produces legal effects or similarly significant effects within the meaning of Article 22 GDPR. The email sequence is automatic, but sending it is not a decision that produces legal effects.

We may update this Privacy Policy. We will inform you of any material change by publishing a new version on the Site together with its effective date. We recommend reviewing it regularly.