Privacy Policy

1. General Information

  1. This Privacy Policy explains how personal data is collected, used, stored, and protected when you visit or interact with the website https://bitbag.io (hereinafter referred to as the "Website").
  2. The Data Controller is BITBAG SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, with its registered office at Ostróżki 2/3, 86-005 Białe Błota, Poland, registered in the National Court Register under KRS number 0000718742, Tax Identification Number (NIP): 5542960822, REGON: 369480698 (hereinafter referred to as the "Controller" or "BitBag").
  3. For matters relating to personal data processing or the exercise of your data protection rights, you may contact the Controller by writing to its registered office address provided above.
  4. The Website provides information about BitBag's software development services and allows users to submit inquiries, contact the company, and subscribe to marketing communications.
  5. The Website does not offer user accounts or login functionality.

2. What Personal Data We Collect

Depending on how you interact with the Website, we may collect and process the following categories of personal data:

  • Contact information: first name, last name, email address, telephone number, company name, and other information voluntarily provided through contact forms.
  • Newsletter information: email address and, where provided, first name, last name, or company information.
  • Communication data: information included in messages, inquiries, and correspondence sent to BitBag.
  • Technical data: IP address, browser type, device information, operating system, and technical logs.
  • Website usage data: pages visited, time spent on the Website, traffic sources, interactions with Website content, and information collected through cookies and similar technologies.

Providing personal data is generally voluntary. However, certain information may be necessary to respond to an inquiry, process a request, or provide a requested service.

3. Purposes and Legal Bases for Processing

We process personal data for the following purposes:

  1. Responding to inquiries and contact requests – to communicate with users who contact us through forms, email, or other available channels. The legal basis is Article 6(1)(f) GDPR (our legitimate interest in handling correspondence) or Article 6(1)(b) GDPR where processing is necessary to take steps at your request before entering into a contract.
  2. Providing services and managing business relationships – to prepare offers, communicate with potential or existing clients, and perform contractual obligations. The legal basis is Article 6(1)(b) GDPR, where applicable, or Article 6(1)(f) GDPR in relation to business contacts.
  3. Sending newsletters and marketing communications – to send information about our services, articles, company updates, events, and other marketing content. Where required, we process this data based on your consent (Article 6(1)(a) GDPR).
  4. Website analytics – to understand how visitors use our Website, measure traffic, and improve its performance and content. Where analytics technologies require consent, the legal basis is Article 6(1)(a) GDPR.
  5. Advertising and remarketing – to measure advertising effectiveness and display relevant advertisements using tools such as Meta Pixel. Where required, these activities are based on your consent (Article 6(1)(a) GDPR).
  6. Website security and technical maintenance – to ensure the Website operates correctly, prevent misuse, and maintain security. The legal basis is Article 6(1)(f) GDPR (our legitimate interest).
  7. Compliance with legal obligations and protection of legal claims – where necessary, based on Article 6(1)(c) or Article 6(1)(f) GDPR, as applicable.

4. Analytics and Marketing Technologies

We use technologies that help us understand Website traffic, improve our content, and measure the effectiveness of marketing activities.

Google Analytics

We use Google Analytics to analyze how visitors interact with our Website. This may include information about visited pages, session duration, traffic sources, device types, and other usage statistics.

Google Analytics may use cookies and similar technologies to collect information about Website activity.

Meta Pixel (Facebook Pixel)

We use Meta Pixel to measure the effectiveness of advertising campaigns and understand how users interact with our Website after viewing or clicking advertisements on platforms such as Facebook and Instagram.

Meta Pixel may also support remarketing activities and the creation of advertising audiences.

Remarketing and Online Advertising

We may use advertising platforms, including Google Ads and Meta Ads, to display relevant advertisements and evaluate marketing campaign performance.

These technologies may use cookies or similar identifiers to recognize browsers or devices and analyze interactions with the Website.

Analytics and marketing technologies that require consent are activated only after the user has provided the appropriate consent through our cookie consent mechanism.

5. Newsletter and Marketing Communications

  1. Users may voluntarily subscribe to our newsletter or other marketing communications through forms available on the Website.
  2. We use MailerLite to manage newsletter subscriptions and distribute marketing communications.
  3. Data processed through MailerLite may include email addresses, first names, last names, company information, subscription preferences, and information about interactions with newsletters, such as email opens and link clicks, where such tracking is enabled.
  4. We use this information to send updates about BitBag's services, articles, company news, events, and other relevant content.
  5. Newsletter subscriptions and electronic marketing communications are managed in accordance with applicable data protection and electronic communications regulations.
  6. Users can withdraw their consent to receive marketing communications at any time by clicking the unsubscribe link included in marketing emails or contacting the Controller.
  7. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
  8. Newsletter data is retained until consent is withdrawn or the relevant marketing purpose ends, subject to any limited retention necessary to document compliance with legal obligations or establish, exercise, or defend legal claims.

6. Contact Forms

  1. The Website provides contact forms through which users can submit inquiries about BitBag's services or other business matters.
  2. Depending on the form, we may collect information such as first name, last name, email address, telephone number, company name, and message content.
  3. This information is used to respond to inquiries, prepare offers, and manage communication with potential clients or business partners.
  4. Personal data provided through contact forms is not automatically used for newsletter subscriptions unless an appropriate separate legal basis exists.
  5. We retain contact form information for as long as necessary to handle the inquiry, maintain relevant business correspondence, or protect against potential legal claims.

7. Cookies

  1. The Website uses cookies and similar technologies. Cookies are small files stored on a user's device that help websites function correctly and provide information about how they are used.
  2. We use the following categories of cookies:
    • Necessary cookies: required for the proper and secure operation of the Website.
    • Analytics cookies: used to understand Website traffic and user behavior, including through Google Analytics.
    • Marketing cookies: used to measure advertising effectiveness and support remarketing activities, including through Meta Pixel.
  3. Cookies may be session cookies, which expire when the browser session ends, or persistent cookies, which remain on the device for a specified period.
  4. Cookies that are strictly necessary for the Website's operation may be used without additional consent. Non-essential analytics and marketing cookies are used only after obtaining the user's consent.
  5. Users can accept, reject, or manage non-essential cookies through the cookie consent mechanism available on the Website.
  6. Users may withdraw or change their cookie consent at any time through the Website's cookie settings. Cookies can also be managed through browser settings.
  7. Disabling certain cookies may affect some Website features or the accuracy of analytics and marketing measurements.

8. Data Sharing and Third-Party Providers

  1. We may share personal data with trusted service providers where necessary for operating the Website, communicating with users, delivering newsletters, and conducting analytics or marketing activities.
  2. Such providers may include:
    • Website hosting and technical infrastructure providers.
    • Google, for analytics and advertising services.
    • Meta, for advertising measurement and remarketing.
    • MailerLite, for newsletter subscriptions and email marketing communications.
    • Customer relationship management (CRM) and communication service providers, where applicable.
    • Other technical service providers supporting Website functionality and security.
  3. Depending on the service and applicable arrangements, these entities may act as data processors or independent data controllers.
  4. We require service providers acting on our behalf to process personal data in accordance with applicable data protection laws and relevant contractual obligations.
  5. Personal data may be transferred outside the European Economic Area (EEA), including to the United States. Where required, such transfers are subject to appropriate safeguards under the GDPR, such as adequacy decisions or Standard Contractual Clauses.
  6. We do not sell personal data.

9. Data Retention

  1. We retain personal data for as long as necessary to fulfill the purposes for which it was collected, taking into account the nature of our business relationships, applicable legal obligations, and legitimate interests.
  2. Newsletter subscriber data is retained until consent is withdrawn or the relevant marketing purpose ends. Contact and business inquiry data is retained for the period necessary to manage communications and ongoing business relationships, subject to applicable legal requirements.
  3. Analytics and marketing data is retained in accordance with the settings and retention policies of the relevant service providers.
  4. Technical and security logs are retained for the period necessary to maintain Website security and technical reliability.
  5. We periodically review the personal data we hold to determine whether continued retention is necessary. Data that is no longer required is deleted or anonymized, unless further retention is justified by applicable law.

10. Your Rights Under the GDPR

Under the General Data Protection Regulation (GDPR), you have the following rights, where applicable:

  • The right to access your personal data.
  • The right to rectify inaccurate or incomplete data.
  • The right to request the erasure of your personal data.
  • The right to restrict the processing of your data.
  • The right to data portability.
  • The right to object to processing based on legitimate interests.
  • The right to withdraw consent at any time, where processing is based on consent.
  • The right not to be subject to decisions based solely on automated processing, including profiling, where the conditions set out in Article 22 GDPR apply.
  • The right to lodge a complaint with a supervisory authority.

In Poland, the competent supervisory authority is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych – UODO).

You may exercise your rights by contacting the Controller using the contact details provided in Section 1.

11. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, disclosure, or destruction.

These measures may include encrypted connections, access controls, and other safeguards appropriate to the nature of the data being processed.

Although we take reasonable steps to protect personal data, no method of electronic transmission or storage can guarantee absolute security.

12. External Links

The Website may contain links to third-party websites or services.

We are not responsible for the privacy practices or content of external websites. We encourage users to review the privacy policies of third-party services before providing personal information.

13. Children's Privacy

The Website and BitBag's services are intended for business and professional audiences and are not directed at children.

We do not knowingly collect personal data from children through the Website. If we become aware that personal data has been collected from a child without an appropriate legal basis, we will take appropriate steps to delete it.

14. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our Website, services, technologies, or applicable legal requirements.

The latest version will always be available on the Website.