Privacy policy

Who is responsible for your data

The controller of the data collected by the oferiq.com website is OferIQ. For anything related to your data, write to kontakt@oferiq.com.

Demo form and contact form

When you submit the form on the home page or on the Contact page, you send us:

• your email address,
• the range of requests per month you select,
• your message, if you write one (optional field),
• the language of the page you submit from, and your ticked consent.

Why and on what legal basis

We use form data only to contact you and arrange a demo. The legal basis is your consent (Art. 6(1)(a) GDPR), which you give by ticking the box in the form; the form cannot be sent without it. You can withdraw consent at any time by writing to kontakt@oferiq.com; this does not affect the lawfulness of any contact before the withdrawal.

We use Google Analytics data (described below) to measure website traffic and the number of submitted forms.

What happens to form data

The form content is sent by email through the Mailgun service (we use its European endpoint) to kontakt@oferiq.com. We send an automatic confirmation to the email address you provide.

We do not store your email address or message in the website database. The database (Cloudflare D1) only receives a statistics entry about the submission: the date and time, which form it came from, the page language, and whether Mailgun accepted the message for sending. This entry contains no email address and no message content.

Form messages arrive in our email inbox. We have no fixed period after which they are deleted; you can ask us to delete them by writing to kontakt@oferiq.com. Mailgun keeps sending logs according to its own policies.

Google Analytics 4

On oferiq.com we use Google Analytics 4 (provided by Google) to see how many people visit each page and how many forms are submitted. The script runs when you open a page; the site does not currently show a separate cookie consent banner.

We limit what is sent to Google Analytics:

• the page address is sent only if it is one of the site’s known pages (any other address is reported as “/404”); of the URL parameters, only campaign parameters (utm_*, gclid, gbraid, wbraid, dclid) are passed on, and the part after “#” is always dropped,
• when you arrive from another website, only its domain is passed on, not the full address,
• after a successful form submission we send a “generate_lead” event containing only the form type and language — no email address and no message content.

Google Analytics — retention and opting out

Google Analytics sets the _ga and _ga_LQ1MJ6HQ1Z cookies in your browser so that repeat visits can be told apart; we have not changed their default lifetime, which according to Google is up to 2 years. Under our setting, Google Analytics keeps detailed event- and user-level data for 2 months; this setting does not apply to aggregated reports.

You can block Google Analytics by blocking scripts from googletagmanager.com in your browser (for example with a content blocker) or by installing the Google Analytics Opt-out browser add-on. Deleting cookies alone does not turn measurement off.

Cookies

The site uses the following cookies:

• oferiq_lang — remembers your language choice when you click the PL/EN switch on the home page; valid for 12 months; set only after that click,
• _ga and _ga_LQ1MJ6HQ1Z — the Google Analytics cookies described above; valid for up to 2 years by default.

Hosting and fonts

The site is served by Cloudflare. On every visit Cloudflare processes technical data such as your IP address, browser information and the requested page address — this is needed to deliver and protect the site.

The site’s fonts are loaded from Google Fonts servers, so your browser sends its IP address and browser information to Google when loading them.

Who we share data with

The data described above is processed on our behalf or in connection with running the site by:

• Cloudflare — website hosting and the database with submission statistics,
• Mailgun — sending form messages and the automatic confirmation,
• Google — Google Analytics 4 and Google Fonts.

Transfers outside the EEA

Cloudflare, Mailgun and Google operate globally, with companies based in the USA involved. The data described above may therefore also be processed outside the European Economic Area, including in the USA.

Your rights

You have the right to access, rectify and erase your data, to restrict its processing and to data portability, the right to object to processing (for example for analytics), and the right to withdraw consent. To exercise these rights, write to kontakt@oferiq.com.

You also have the right to lodge a complaint with a data protection supervisory authority — in Poland, the President of the Personal Data Protection Office (PUODO).

Changes to this policy

If we change how the site processes data, we will update this policy and the last-updated date above.