Privacy Policy and Cookie Policy of g2collective.com

This Privacy Policy sets out the rules for the processing and protection of personal data provided by Users in connection with their use of the website www.g2collective.com.

1. Data Controller

The controller of the personal data collected through the website is G2 TEAM Krzysztof Gawryś, with its registered office at ul. Cyfrowa 6, 71-441 Szczecin, Poland, Tax ID (NIP): 857-188-36-75 (hereinafter: the “Controller”).
The Controller can be contacted by e-mail at: hello@g2team.pl.

2. Data Security

The Controller makes every effort to protect the privacy of Users and to ensure the security of the personal data being processed. We apply appropriate technical and organizational measures (including connection encryption with an SSL certificate) to protect data against unauthorized access, loss or damage.

3. Purposes and Legal Bases for Processing

Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR). We process your data for the following purposes:

Contact and responding to inquiries:

Purpose: Handling inquiries sent via the contact form, by e-mail or by phone.
Legal basis: Article 6(1)(f) GDPR (the controller’s legitimate interest in responding to the inquiry) or Article 6(1)(b) GDPR (taking steps prior to entering into a contract).

Performance of services and contracts:

Purpose: Preparing a proposal, fulfilling an order, and client service in CRM/ERP systems.
Legal basis: Article 6(1)(b) GDPR (performance of a contract).

Recruitment:

Purpose: Conducting the recruitment process for job positions.
Legal basis: Article 6(1)(a) GDPR (the candidate’s consent) and the provisions of the Polish Labor Code.

Analytics and statistics:

Purpose: Analyzing website traffic in order to improve its functionality.
Legal basis: Article 6(1)(f) GDPR (the controller’s legitimate interest).

Marketing (including remarketing):

Purpose: Displaying advertisements tailored to the user’s interests.
Legal basis: Article 6(1)(a) GDPR (consent expressed through cookie settings) or Article 6(1)(f) GDPR.

Website security (reCAPTCHA, Cloudflare):

Purpose: Protection against spam, bots and DDoS attacks.
Legal basis: Article 6(1)(f) GDPR (the legitimate interest in protecting the website and its users).

4. Data Recipients and Third-Party Tools

In connection with running our business and operating the website, your data may be transferred to entities that process data on behalf of the Controller (e.g. IT service providers). The key providers are listed below:

Hosting and infrastructure providers:

  • Cloudflare, Inc. – hosting and content delivery provider on whose infrastructure the website is served.
  • Cloudflare Inc. – DNS service and Content Delivery Network (CDN) used to optimize website performance and protect it against attacks.

Business management and communication systems:

  • Google Ireland Limited (Google Workspace) – e-mail service and cloud office suite.
  • Pipedrive – CRM system for managing customer relationships and the sales process.
  • Odoo – ERP system for enterprise resource planning.

Analytics, marketing and security:

  • Google Analytics / Google Ads – traffic analytics and advertising system.
  • Facebook (Meta Platforms Ireland Limited) – marketing tools (Facebook Pixel).
  • Google reCAPTCHA v3 – a mechanism protecting the website against spam and bots. Notice: use of reCAPTCHA is subject to the Google Privacy Policy and Terms of Service.
  • Cookiebot (Usercentrics A/S) – consent management platform (CMP).

Data transfers outside the EEA:

Because we use tools from providers such as Google, Facebook, Pipedrive and Cloudflare, your data may be transferred to third countries (e.g. the USA). Such transfers take place on the basis of appropriate legal safeguards, such as the standard contractual clauses approved by the European Commission or the Data Privacy Framework.

5. User Rights

Every data subject has the right to:

  • Access – obtain information about the data being processed and a copy of that data.
  • Rectification – request the correction of inaccurate data or the completion of incomplete data.
  • Erasure (the “right to be forgotten”) – in the cases provided for by law (e.g. withdrawal of consent).
  • Restriction of processing – in specific cases.
  • Data portability – receive the data in a structured format.
  • Object – to processing based on the Controller’s legitimate interest.
  • Withdraw consent – at any time (without affecting the lawfulness of processing carried out before the withdrawal).

To exercise any of the above rights, please contact us at: hello@g2team.pl.

You also have the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland) – if you believe that the processing of your data infringes the GDPR.

6. Data Retention Period

Personal data will be stored for the period necessary to fulfill the purposes for which it was collected:

  • Contract-related data – for the duration of the contract, the limitation period for claims and the period required by tax regulations (usually 5 years from the end of the tax year).
  • Contact data – until a response has been provided or an effective objection has been raised.
  • Recruitment data – until the recruitment process ends or, where consent to future recruitment has been given, for the period stated in that consent (usually 1 year).

7. Cookie Policy and Consent Management

The g2collective.com website uses cookies. These are small text files sent by the web server and stored by the browser software on your device. When the browser connects to the website again, the site recognizes the type of device the user is connecting from.

Consent management platform (Cookiebot):

We use the Cookiebot platform to manage cookies and user consents. On the first visit to the website, this tool displays a banner that allows the User to decide which types of cookies should be active.

Google Consent Mode v2:

Our website supports the Google Consent Mode v2 standard. This mechanism passes information about the user’s consent status (given in the Cookiebot banner) to Google tools (Analytics, Google Ads). As a result:
- If the User gives consent: Google tools collect full analytics and advertising data.
- If the User does not give consent: Google receives only limited cookieless signals (so-called pings), which respects privacy while preserving basic statistics.

Types of cookies we use:

  • Necessary: Enable the website to function properly and ensure security (including technical cookies from Cookiebot, Cloudflare and Google reCAPTCHA).
  • Functional: Allow the website to “remember” the settings chosen by the User.
  • Analytics and Performance: Collect information about how the website is used (Google Analytics).
  • Marketing: Enable the delivery of advertising content tailored to the user’s interests (Google Ads, Facebook Pixel).

Managing your settings:

The User may change their cookie preferences at any time by reopening the Cookiebot banner (via the icon visible on the website) or by changing their web browser settings.