Privacy policy and terms

This page explains what personal data we collect when you use claritio.com, why, how long we keep it and what rights you have. It also covers cookies and the terms for the few services the website provides. We collect as little as we can and we never sell personal data.

Who we are

The controller of your personal data is Claritio sp. z o.o., ul. Obozowa 20/192, 01-161 Warsaw, Poland, entered in the National Court Register (KRS) kept by the District Court for the capital city of Warsaw, XIII Commercial Division, under number 0001271112, share capital PLN 6,000 ("Claritio", "we").

For anything about your data, write to hello@claritio.com or to the address above. We have not appointed a data protection officer, because the law does not require us to.

What we collect and why

When you visit the website

When you open claritio.com, your browser sends technical data that every website receives: your IP address, the date and time of the request, the page you asked for, your browser and operating system, and the referring page. Our hosting and security provider, Cloudflare, processes this data to deliver the site, protect it against attacks and abuse, and give us aggregated traffic figures. These figures come from the server. An analytics script runs in your browser only if you agree to it (see the next section).

• Legal basis: our legitimate interest in running a secure, working website (Article 6(1)(f) GDPR).
• Retention: logs are kept by Cloudflare for a short period, at most 30 days, then deleted or aggregated so they no longer identify anyone.

When you agree to visit measurement

When you first open the site, a short message asks whether we may measure visits with Cloudflare Web Analytics. It runs only if you click Accept.

• What it records: the address of the page you view, the page you came from, your browser, operating system and device type, your country, and how fast the page loads. Cloudflare Web Analytics sets no cookies, uses no fingerprinting and does not follow you across other websites.
• Purpose: to see which pages people read and how fast the site is, so we can improve it.
• Legal basis: your consent (Article 6(1)(a) GDPR and Article 399(1) of the Polish Electronic Communications Law).
• Retention: Cloudflare keeps the detailed measurements for 7 days and after that only aggregated, sampled statistics. We remember your answer in your browser for 12 months, so we do not ask again; that is strictly necessary and needs no consent.
• Withdrawing consent: click "Privacy settings" at the bottom of any page and choose Decline. This does not affect measurement made before.

When you write to us through the contact form

On the Let's talk page and at the bottom of the home page we ask for your name, work email, company (optional) and your message.

• Purpose: to reply to you, discuss your needs and prepare an offer if you ask for one.
• Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR) and our legitimate interest in business communication with representatives of companies (Article 6(1)(f) GDPR).
• Retention: for 2 years after our last contact. If we sign a contract, we keep what the contract needs for its duration and for as long as claims under it can be brought.

When you join the report waitlist or request a report

On the home page and the Insights page we ask for your work email, and on Insights also your name and company (optional), so we can email you the report.

• Purpose: to tell you once when the report is out and send it to you.
• Legal basis: providing the service you requested (Article 6(1)(b) GDPR).
• Retention: until we have sent the report, then for 30 days.
• The report never depends on the newsletter. You get it whether or not you tick the newsletter box.

When you subscribe to the newsletter

The newsletter is optional. You subscribe only by ticking the box in a report form and confirming your address in the email we send you.

• Purpose: to send you our newsletter about applied AI and our work, and to see which issues are opened and which links are clicked, so we write what readers find useful.
• Legal basis: your consent (Article 6(1)(a) GDPR and Article 398 of the Polish Electronic Communications Law).
• Retention: until you unsubscribe. Every newsletter has an unsubscribe link, and you can also write to us. Withdrawing consent does not affect what we sent before.

When you email us or follow us on LinkedIn

If you contact us directly, we process your contact details and what you tell us to answer you and keep a record of our correspondence, on the basis of our legitimate interest (Article 6(1)(f) GDPR), for 2 years after our last contact.

We have a company profile on LinkedIn. When you interact with it, LinkedIn is a separate controller of your data under its own policy; we see only what LinkedIn shows us, and process it to run our profile, on the basis of our legitimate interest (Article 6(1)(f) GDPR).

Cookies

claritio.com sets no cookies of its own and runs no advertising or tracking scripts. The only analytics script, Cloudflare Web Analytics, runs only after you accept it, and it sets no cookies. Your answer is kept in your browser's local storage for 12 months. If you close the announcement at the top of the page, your browser remembers that in local storage too, so it stays closed.

Cloudflare may set short-lived cookies, such as __cf_bm or cf_clearance, and its Turnstile check may store a token, to tell people from bots and keep the site and its forms safe. These are strictly necessary for a service you asked for, so the law does not require consent for them (Article 399(3) of the Polish Electronic Communications Law). You can block or delete cookies in your browser settings; the site will still work, but a security check may ask you to try again.

You can change your answer about visit measurement at any time with "Privacy settings" at the bottom of every page. If we add anything else that needs your consent, we will ask for it first.

Who receives your data

We share personal data only with providers that help us run the website and our business, and only as far as they need it. Each acts only on our instructions, under a data processing agreement (Article 28 GDPR):

• Cloudflare, Inc.: hosting, content delivery, security, the Turnstile bot check on our forms and, with your consent, Web Analytics;
• Fly.io, Inc.: hosting, in the European Union, of the service that receives form submissions and passes them on; it stores nothing itself;
• HubSpot, Inc.: our customer relationship tool and newsletter, with data hosted in the European Union;
• Google LLC (Google Workspace): email.

For the Turnstile bot check, Cloudflare also uses the signals it collects to improve Turnstile; for that limited purpose it acts as a separate controller under its own Turnstile privacy addendum.

We may also share data with legal, tax and accounting advisers bound by confidentiality, and with public authorities when the law requires it.

Transfers outside the EEA

Cloudflare, Fly.io, HubSpot and Google are companies based in the United States. Where they or their sub-processors can access personal data from outside the European Economic Area, the transfer relies on the EU–US Data Privacy Framework for certified companies (Article 45 GDPR) or on the Standard Contractual Clauses approved by the European Commission (Article 46 GDPR). You can ask us for a copy of the relevant safeguards.

Your rights

You have the right to:

• access your data and get a copy of it;
• have it corrected if it is wrong;
• have it erased;
• restrict how we use it;
• receive it in a portable format, where we process it on the basis of a contract or consent;
• object at any time to processing based on our legitimate interest;
• withdraw consent at any time, where we rely on consent, without affecting what we did before.

To use any of these rights, write to hello@claritio.com. We will reply within one month.

You also have the right to lodge a complaint with the Polish data protection authority: the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl.

Do you have to give us your data?

No. Giving us your data is voluntary, but without your email we cannot reply to you or send you the report.

Automated decisions

We do not make decisions about you based solely on automated processing, and we do not profile you.

Security

We protect personal data with measures appropriate to the risk, including encrypted connections (HTTPS), access limited to the people who need it, two-factor sign-in on our tools and agreements with our providers.

Terms for the website's services

These terms apply to the services claritio.com provides electronically, as required by Article 8 of the Polish Act on Providing Services by Electronic Means. The provider is Claritio sp. z o.o., as described above. Our consulting and platform work is covered by separate agreements, not by these terms.

1. Services. Free of charge: browsing the website, sending a message through the contact form, joining the report waitlist and receiving the report, and the newsletter.
2. Technical requirements. A device with internet access, a current web browser and, for the forms, an email address. You must not submit unlawful content or anything that interferes with the website.
3. Start and end. Browsing starts when you open the website and ends when you leave it. A form service starts when you submit the form and ends when we have answered you or sent the report. The newsletter starts when you confirm your address and ends when you unsubscribe, which you can do at any time.
4. Complaints. Send complaints about these services to hello@claritio.com or to our address. Tell us what happened and how to reach you. We reply within 14 days.

Changes to this page

We will update this page when the way we process data or provide these services changes. The date at the top shows the latest version.