PRIVACY AND COOKIE POLICY

Last updated: September 1, 2026

This Privacy and Cookie Policy sets out the rules for the processing of personal data and the use of cookies and similar technologies in connection with the use of the website available at:

https://cg-team.com/

The Controller takes particular care to ensure that personal data is processed in accordance with applicable laws, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council (“GDPR”).

1. Personal Data Controller

The operator of the website and the Personal Data Controller is:

Rafał Cegliński
Doroszewskiego 5 m. 13

Contact email address:

office@cg-team.com

For all matters concerning the protection of personal data, you may contact the Controller using the email address provided above.

2. Scope of this Policy

This Policy applies to personal data processed in connection with:

  • use of the CG-Team website,
  • use of the contact form,
  • contacting the Controller by email,
  • use of cookies and similar technologies,
  • collecting statistics concerning the use of the website,
  • marketing and advertising activities,
  • use of Google and Meta tools.

3. What Personal Data Do We Process?

Depending on how the website is used, we may process, in particular:

  • first name,
  • company name,
  • email address,
  • telephone number, if voluntarily provided by the user,
  • the content of messages submitted via the contact form or email,
  • information related to an inquiry or potential cooperation,
  • IP address,
  • information about the user's device,
  • information about the web browser,
  • information about the operating system,
  • information about how the website is used,
  • information about the pages visited,
  • information about the source from which the user accessed the website,
  • information about interactions with the website,
  • information stored in cookies and similar technologies.

The Controller does not require users to provide sensitive data or special categories of personal data through the contact form.

Users should not provide information concerning health, political opinions, religious beliefs, sexual orientation, biometric data, or other information belonging to special categories of personal data via the contact form unless this is necessary for a specific purpose.

4. Contact Form

The website may provide a contact form that allows users to contact the Controller.

Depending on the configuration of the form, users may be asked to provide, in particular:

  • first name,
  • company name,
  • email address,
  • telephone number,
  • message content.

Providing data marked as required is necessary to process the inquiry.

Data submitted via the contact form is provided to the Controller — Rafał Cegliński — for the purpose of responding to the inquiry, conducting correspondence, providing information about services, or taking steps related to potential cooperation.

The data is not used for other purposes where there is no appropriate legal basis for such processing.

5. Purposes of Data Processing

Personal data may be processed, in particular, for the following purposes:

  • handling inquiries submitted through the contact form,
  • responding to email messages,
  • conducting correspondence,
  • contacting users in connection with submitted inquiries,
  • presenting offers,
  • taking steps prior to entering into a contract,
  • performing contracts,
  • maintaining documentation related to the Controller's business activities,
  • fulfilling legal obligations imposed on the Controller,
  • ensuring website security,
  • detecting and preventing abuse,
  • ensuring the proper functioning of the website,
  • creating statistics and analyzing website usage,
  • analyzing the effectiveness of marketing activities,
  • measuring the effectiveness of advertising campaigns,
  • measuring conversions,
  • conducting remarketing activities,
  • creating advertising audiences,
  • displaying advertisements tailored to users' interests,
  • optimizing advertising campaigns.

6. Legal Bases for Data Processing

Personal data is processed on the basis of an appropriate legal basis provided for under the GDPR, in particular:

a) Article 6(1)(b) GDPR

Where processing is necessary to take steps at the user's request prior to entering into a contract or to perform a contract.

b) Article 6(1)(c) GDPR

Where processing is necessary for compliance with a legal obligation to which the Controller is subject.

c) Article 6(1)(f) GDPR

Where processing is necessary for the purposes of the legitimate interests pursued by the Controller, in particular those related to:

  • ensuring website security,
  • protection against abuse,
  • handling correspondence,
  • establishing, pursuing, or defending against claims,
  • maintaining documentation,
  • technical analysis of the website's operation.

d) Article 6(1)(a) GDPR

Where processing is based on the user's consent, in particular with regard to optional cookies and analytics and marketing technologies.

Consent may be withdrawn at any time.

7. Cookies

The website uses cookies and similar technologies.

Cookies are small text files stored on the user's device while using the website.

Cookies may be used, among other things, to:

  • ensure the proper functioning of the website,
  • ensure security,
  • remember user settings,
  • collect statistics,
  • analyze website traffic,
  • measure advertising effectiveness,
  • measuring conversions,
  • conducting remarketing activities,
  • personalize advertisements.

8. Categories of Cookies

The website may use the following categories of technologies:

8.1. Necessary Cookies

Necessary cookies are required for the proper functioning and security of the website and for access to its basic features.

Some of these technologies may be used without the user's consent where they are necessary to provide a service requested by the user or to ensure the proper functioning of the website.

8.2. Analytics Cookies

Analytics cookies are used to analyze how the website is used and to create statistics.

The following tool is used on the website:

Google Analytics 4.

Google Analytics may collect information including:

  • website visits,
  • pages visited,
  • time spent on the website,
  • source from which the user accessed the website,
  • device and browser information,
  • user interactions with the website.

Analytics technologies are activated in accordance with the user's consent settings.

8.3. Marketing Cookies

Marketing cookies and similar technologies may be used to:

  • measure advertising effectiveness,
  • measuring conversions,
  • conducting remarketing activities,
  • create audience groups,
  • optimize advertising campaigns,
  • tailor advertisements to users.

For this purpose, the Controller uses:

  • Google Ads,
  • Meta Pixel.

Marketing technologies are activated in accordance with the user's choice made through the consent management mechanism.

9. Google Analytics 4

The Controller uses Google Analytics 4,a service provided by Google.

Google Analytics is used to analyze how the website is used and to prepare statistics concerning website traffic.

Data from Google Analytics may also be used in conjunction with Google's advertising services, in particular Google Ads, to the extent permitted by the user's consent settings and the configuration of the services.

Google Analytics may use cookies and similar technologies.

For users located in the European Economic Area, the Controller uses a consent management mechanism that communicates the user's choices to Google services.

10. Google Ads

The Controller uses Google Ads to run and measure the effectiveness of advertising campaigns.

Google Ads may be used, in particular, for:

  • measuring conversions,
  • analyzing campaign effectiveness,
  • create audience groups,
  • conducting remarketing activities,
  • optimizing campaigns,
  • displaying advertisements tailored to users' interests.

Depending on its configuration, Google Ads may use cookies, identifiers, and information concerning the user's activity on the website.

Where a particular feature requires user consent, data is used in accordance with the user's choice.

The Controller uses Google Consent Mode to communicate users' consent choices to Google.

Google states that, in the EEA, consent signals are used, among other things, to support measurement, ad personalization, and remarketing.

11. Meta Pixel

The Controller uses Meta Pixelprovided by Meta Platforms.

Meta Pixel is used, in particular, for:

  • mierzenia skuteczności kampanii reklamowych prowadzonych w usługach Meta,
  • measuring conversions,
  • analyzing user activity after arriving at the website from an advertisement,
  • create audience groups,
  • conducting remarketing activities,
  • optimizing advertising campaigns.

Depending on its configuration, Meta Pixel may use information concerning the device, browser, website activity, and user interactions with the website.

To the extent that the use of Meta Pixel requires user consent, the relevant technologies are activated only after the required consent has been obtained.

12. Google Consent Mode

In connection with the use of Google services, the Controller uses a user consent management mechanism and Google Consent Mode.

This mechanism allows the operation of Google tags to be adjusted according to the user's choices regarding individual categories of technologies.

In particular, the following types of consent may be handled:

  • analytics_storage - consent concerning the storage of data related to analytics,
  • ad_storage - consent concerning the storage of data related to advertising,
  • ad_user_data - consent concerning the transfer of user data to Google for advertising purposes,
  • ad_personalization - consent concerning ad personalization.

Google indicates that the ad_user_data i ad_personalization parameters are relevant, respectively, to the use of user data for advertising purposes and the personalization of advertisements.

The Controller uses these mechanisms to respect users' choices regarding analytics and advertising technologies.

13. Cookie Consent Management

When visiting the website for the first time, users may be asked to make a choice regarding optional cookies and similar technologies.

Users may:

  • accept all optional technologies,
  • reject optional technologies,
  • select individual categories,
  • change their decision at a later time.

Consent to analytics or marketing cookies is not required to use the basic functions of the website.

Users may withdraw or change their consent at any time using the cookie preference management mechanism available on the website.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

14. Lack of Consent to Analytics or Marketing Cookies

If a user does not consent to optional technologies:

  • Google Analytics will not use optional mechanisms requiring such consent to the extent covered by the refusal,
  • Google Ads will not use features requiring the relevant consent,
  • ad personalization and remarketing features will be limited in accordance with the user's choice,
  • Meta Pixel will not be activated to the extent that consent is required.

Refusing optional cookies does not prevent users from accessing the basic functions of the website.

15. Data Recipients

Personal data may be transferred to entities supporting the Controller in operating the website and conducting business activities, in particular:

  • hosting and server infrastructure providers,
  • email service providers,
  • IT service providers,
  • analytics tool providers,
  • advertising tool providers,
  • website security service providers,
  • accounting, legal, or technical service providers, where necessary.

In particular, the website is maintained using the infrastructure of JDM.pl Sp. z o.o. JDM.pl Sp. z o.o.

JDM.pl Sp. z o.o. provides WordPress hosting and server infrastructure.

Data may also be disclosed to competent public authorities where required by law.

16. Google and Meta as Service Providers

In connection with the use of Google Analytics, Google Ads, and Meta Pixel, data and information concerning user activity may be transferred to the respective service providers.

Google and Meta may process data in accordance with their own data protection policies and terms of service.

The scope of data transferred depends on:

  • the configuration of individual tools,
  • the Controller's settings,
  • the user's choice,
  • the type of activity performed by the user on the website.

17. Transfers of Data Outside the European Economic Area

In connection with the use of external technology providers, in particular Google and Meta, data may be transferred or made available to entities located outside the European Economic Area.

In such cases, the Controller relies on appropriate legal mechanisms provided for under applicable data protection laws, including, depending on the specific circumstances, adequacy decisions or standard contractual clauses.

18. Data Retention Period

Personal data is stored for no longer than necessary to achieve the purpose for which it was collected.

In particular:

  • data submitted through the contact form is stored for the period necessary to process the inquiry and conduct related correspondence;
  • data related to the performance of a contract is stored for the period required by law;
  • data related to tax or accounting obligations is stored for the period required under applicable laws;
  • data may be stored for the period necessary to establish, pursue, or defend against claims;
  • data processed on the basis of consent is processed until consent is withdrawn, unless another legal basis exists for further processing.

Okres przechowywania informacji związanych z cookies i narzędziami zewnętrznymi może być uzależniony od konfiguracji danego narzędzia.

19. User Rights

Under the GDPR, data subjects have, in particular, the following rights to the extent applicable:

  • the right to access their personal data,
  • the right to obtain a copy of their data,
  • the right to rectify their data,
  • the right to erasure,
  • the right to restriction of processing,
  • the right to data portability,
  • the right to object to processing,
  • the right to withdraw consent to the processing of personal data where processing is based on consent.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

20. Right to Object

Where data is processed on the basis of the Controller's legitimate interest, users may, in cases provided for by the GDPR, object to such processing.

Where personal data is processed for direct marketing purposes, users may object at any time.

21. Right to Lodge a Complaint

If a user believes that the processing of their personal data violates data protection laws, they have the right to lodge a complaint with the competent supervisory authority.

In Poland, the competent authority is:

President of the Personal Data Protection Office (UODO).

22. Profiling

In connection with the use of advertising tools, in particular Google Ads and Meta Pixel, information concerning user activity may be used for

  • create audience groups,
  • analyzing user behavior,
  • conducting remarketing activities,
  • tailoring advertisements,
  • optimizing advertising campaigns.

Such activities may involve profiling within the meaning of the GDPR.

The Controller does not use profiling to make decisions concerning users that produce legal effects or similarly significantly affect them.

23. Data Security

The Controller implements appropriate technical and organizational measures designed to protect personal data against:

  • accidental or unlawful destruction,
  • loss,
  • alteration,
  • unauthorized disclosure,
  • unauthorized access.

The website uses JDM's hosting infrastructure, including security and WordPress infrastructure protection mechanisms.

24. External Services and Technologies

The website may use services provided by external technology providers.

In particular, these include:

  • Google Analytics,
  • Google Ads,
  • Meta Pixel,
  • JDM hosting services,
  • WordPress tools and necessary plugins.

The Controller may implement additional technologies or services in the future to support the operation of the website.

If new technologies require additional user consent, they will be covered by an appropriate consent management mechanism.

25. Changes to the Privacy and Cookie Policy

The Controller may update this Privacy and Cookie Policy, in particular in the event of:

  • changes to the functionality of the website,
  • implementation of new tools,
  • changes to the way data is processed,
  • changes to service providers,
  • changes in applicable laws.

The current version of this document is published on the website together with the date of its latest update.

26. Contact

For matters related to this Privacy and Cookie Policy, the protection of personal data, and the exercise of user rights, you may contact the Controller:

Rafał Cegliński
Doroszewskiego 5 m. 13

E-mail:

office@cg-team.com