version: 20 August 2026
1. Data controller and contact details
Identification of the data controller: Radosław Merchut, a sole trader operating as weSEQ.IT P.H.U. Radosław Merchut, registered at ul. Mariana Rejewskiego 80, 44-251 Rybnik, Poland, tax identification number (NIP): 6423060165, business registry number (REGON): 243279494. Contact details: contact@weseq.it, tel. +48 888 873 951.
2. Purposes and legal bases for processing
We process data for the following purposes:
- Operating the Website and handling enquiries and correspondence (Article 6(1)(b) and (f) GDPR).
- Entering into and performing contracts and handling complaints (Article 6(1)(b) GDPR).
- Compliance with legal obligations (Article 6(1)(c) GDPR).
- Marketing our own services (Article 6(1)(f) GDPR, right to object).
- Electronic marketing communications and newsletters (Article 6(1)(a) GDPR, consent may be withdrawn).
3. Categories of data
We process data including:
- First name, last name, e-mail address, telephone number, company details, invoicing data (including NIP), correspondence, IP address and technical device data.
4. Recipients of data
Data may be entrusted to service providers, including hosting and e-mail providers, IT tool providers, accounting firms, logistics providers and law firms, under data processing agreements.
Recipients of data collected through analytics tools are: Google Ireland Limited together with Google LLC (Google Analytics 4), and Microsoft Corporation (Microsoft Clarity). We activate these tools only after you consent to analytics. Their operation is described in point 8.
5. Transfers outside the EEA
We use tools supplied by providers established outside the European Economic Area: Google (Google Analytics 4) and Microsoft (Microsoft Clarity). Data processed through these tools may be transferred to the United States.
The transfer is based on the European Commission implementing decision of 10 July 2023 recognising an adequate level of data protection under EU-U.S. Data Privacy Framework; both providers are listed as participants in this programme. The European Commission's Standard Contractual Clauses are used as an additional safeguard. Data is transferred only after you consent to analytics. Without consent, these tools are not activated.
6. Retention periods
- Contractual and accounting records: 6 years from the end of the relevant year.
- Data processed on the basis of consent: until consent is withdrawn.
- Data processed on the basis of legitimate interests: until an objection is raised.
- Logs and backups: for as long as required to ensure security.
7. User rights
You have the right to:
- Access, rectification, erasure, restriction of processing and data portability.
- The right to object to direct marketing.
- The right to withdraw consent at any time.
- Complaints to the President of the Personal Data Protection Office (UODO).
8. Cookies and technologies
We use essential cookies (Article 6(1)(f) GDPR). They maintain sessions, protect forms against misuse and remember your consent choices. They cannot be disabled without losing essential Website functionality.
With your consent (Article 6(1)(a) GDPR), we activate two analytics tools:
- Google Analytics 4 - Website usage statistics: pages visited, traffic source, clicks on contact buttons, search terms entered in the Knowledge Base and steps completed in the quote form. Before transmission, the page URL, referrer URL and entered search term are stripped of data that could identify an individual, such as an e-mail address. We do not conduct advertising or personalise advertisements.
- Microsoft Clarity - analysis of website usage, including session recording. The tool records pointer movements, clicks, page scrolling and form interactions, and then makes them available to us as session recordings and click and scroll heatmaps. Content entered in form fields remains masked and is not intentionally collected.
Neither tool is loaded until you provide consent.
Independently of these tools, we operate a first-party event counter, hosted on our own server. It records page views, search terms, clicks on contact buttons and the step at which completion of the quote form stops. It does not use cookies or a persistent identifier - the visit identifier exists only until the browser tab is closed - and no data is disclosed to external parties. It operates on the basis of legitimate interests (Article 6(1)(f) GDPR), namely maintaining the Website and improving its usability. You therefore have the right to object, as described in point 7.
How to provide and withdraw consent. On your first visit, we display a consent panel with "Accept" and "Reject" buttons and separate toggles for Google Analytics 4 and Microsoft Clarity. You can return to this panel at any time using the link "Change analytics consent" in the footer of every page. Withdrawing consent requires the same number of clicks as granting it and takes effect immediately - the tools will no longer be activated. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn. You may also manage cookies through your browser settings.
9. Automated decision-making
We do not use profiling or automated decision-making.
10. Voluntary provision of data
Providing data is voluntary but necessary for the relevant purposes, such as entering into a contract.
11. Amendments and publication
This Policy has applied since 1 January 2022. This version is dated 20 August 2026 and supersedes the previous version. The current version is published on the Website. We will notify you of material changes through the Website.