Privacy Policy

Data Controller

The data controller responsible for your personal data on this website is ENATIV Łukasz Kurpiewski, a sole proprietorship (JDG) registered in Poland.

NIP: 7181988615 REGON: 521389753

Address: ul. Stanisława Wyspiańskiego 2/44, 05-120 Legionowo, Poland

For any questions about this policy or your personal data, please contact us at contact@enativ.pl.

Scope of This Policy

This Privacy Policy applies to the ENATIV portfolio website available at www.enativ.pl, in both its Polish and English language versions.

It describes what personal data we process, for what purposes, on what legal basis, and what rights you have in relation to that data.

Contact Form

When you submit the contact form on this website, we collect your name, email address, and message content.

This data is used solely to respond to your inquiry. Emails are sent and delivered using Resend, a third-party transactional email service provider, which processes this data on our behalf.

The legal basis for this processing is your consent (given by submitting the form) combined with our legitimate interest in responding to inquiries directed to us.

Spam Protection (reCAPTCHA)

To protect the contact form from spam and automated abuse, we use Google reCAPTCHA v3.

reCAPTCHA analyzes user interactions and assigns a risk score to help distinguish genuine visitors from bots, without requiring you to solve a challenge.

reCAPTCHA is registered as a "necessary" cookie category and is not gated behind cookie consent, since it is essential for the security and proper functioning of the contact form.

The legal basis for this processing is our legitimate interest in preventing spam and abuse of our contact form.

AI Chat Assistant

This website features an AI chat assistant that lets you ask questions and receive automated responses.

When you send a message in the chat, its content is transmitted to a third-party AI provider via OpenRouter in order to generate a response.

Chat messages are not persisted in a long-term database on our servers; they are processed only to generate the AI's response.

Please do not submit sensitive personal data (such as health information, financial details, or other special categories of data) in the chat.

The legal basis for this processing is your consent, given each time you initiate a chat message.

Cookies and Analytics

This website uses a cookie-consent management system that organizes cookies into three categories: "necessary", "measurement", and "marketing".

"Necessary" cookies (including reCAPTCHA) are required for the website to function properly and are not subject to consent.

"Measurement" cookies enable Google Analytics 4 (GA4), which we use to understand how visitors use the site. GA4 only loads after you accept the "measurement" category in the cookie-consent banner.

"Marketing" cookies enable Meta Pixel, operated by Meta Platforms Ireland Limited, which measures conversions from and helps build audiences for advertising on Meta's platforms (Facebook and Instagram). The Meta Pixel script is not loaded at all until you accept the "marketing" category, which is off by default, and it sets an "_fbp" cookie once active.

The site operator and Meta act as joint controllers for the data the Meta Pixel collects. You can also manage how Meta uses your data for advertising directly through Meta's ad preferences at https://www.facebook.com/adpreferences/ad_settings.

When you submit the contact form or confirm a lead-email draft in the AI chat, a hashed version of your email address (processed with the one-way SHA-256 algorithm, so it cannot be read or reversed) is sent to Meta through the Conversions API, together with technical connection data such as your IP address, browser type, and the "_fbp" cookie if present. This allows Meta to recognize leads that came from advertising. No purchase value is attached to these events. Your email address itself is never transmitted to Meta in readable form.

The legal basis for "necessary" cookies is our legitimate interest in the operation of the website; the legal basis for "measurement" and "marketing" cookies is your consent, which you may withdraw at any time via the cookie-consent settings, with immediate effect.

International Data Transfers

Some of the service providers we use to operate this website (including Resend, OpenRouter, Google, and Meta) are based in the United States or may process data outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we rely on appropriate safeguards recognized under the GDPR, such as the European Commission's Standard Contractual Clauses or an applicable adequacy decision, to ensure your data continues to receive an adequate level of protection.

Data Retention

Data submitted via the contact form is retained for as long as necessary to respond to your inquiry and to keep a record of past correspondence, typically for up to 2 years, after which it is deleted or anonymized. Since contact-form messages are delivered to and stored in our email inbox, actual retention follows our email provider's standard mailbox retention.

Chat messages sent to the AI assistant are processed transiently to generate a response and are not retained in a long-term database.

Your Rights Under GDPR

• The right of access to your personal data
• The right to rectification of inaccurate or incomplete data
• The right to erasure ("the right to be forgotten")
• The right to restriction of processing
• The right to data portability
• The right to object to processing based on legitimate interest
• The right to lodge a complaint with the Polish supervisory authority, UODO (Urząd Ochrony Danych Osobowych), if you believe your data has been processed unlawfully

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the services we use, or legal requirements.

The "lastUpdated" date at the top of this page reflects the date of the most recent revision. We encourage you to review this page periodically.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise any of your rights, please contact us at contact@enativ.pl.

You may also reach us by post at: ENATIV Łukasz Kurpiewski, ul. Stanisława Wyspiańskiego 2/44, 05-120 Legionowo, Poland.