Privacy policy

1. Data controller

The controller of your personal data is Brief for you Sp. z o.o., registered office: ul. Tomasza Zana 38 lok. 416, 20-601 Lublin, Poland, entered in the National Court Register (KRS) under no. 0000809919, VAT ID PL5170402510, REGON 384670846 (“we”, “the Controller”).

For any matter concerning personal data, write to us at contact@gridstack.eu.

2. What data we process

• Contact form data: full name, work email, company name, job title, selected plan, purpose of contact, industry, number of brands and partners, and your message.
• Proof of consent: the consent wording, the date and time it was given and the IP address the form was sent from.
• Email correspondence data, if you write to us directly.
• Technical data in server logs: IP address, date and time of the request, page address and browser information.
• Visit statistics — only if you consent to them (section 6).

3. Purposes and legal bases

• Responding to your enquiry, scheduling a demo, preparing a pilot or quote — based on your consent (Art. 6(1)(a) GDPR) and steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
• Business correspondence with the company you represent — our legitimate interest (Art. 6(1)(f) GDPR).
• Website security and protection against abuse and spam — legitimate interest (Art. 6(1)(f) GDPR).
• Establishing, pursuing or defending claims — legitimate interest (Art. 6(1)(f) GDPR).
• Visit statistics — your consent (Art. 6(1)(a) GDPR).

4. Do you have to provide data

Providing data is voluntary. Without the fields marked as required, however, we won't be able to respond to your enquiry.

5. Who we share data with

Data may be shared only with entities that process it on our behalf under a data processing agreement:

• the hosting and server infrastructure provider the website runs on;
• Resend, Inc. (USA) — the email delivery service the form uses to deliver your enquiry to our inbox;
• the email provider hosting the contact@gridstack.eu mailbox;
• the operator of the stats.chylak.dev analytics server (section 6).

We do not sell data or share it with others for marketing purposes.

6. Visit statistics (Umami)

If you consent in the banner, the website loads the Umami script from stats.chylak.dev, a server run on our behalf. Umami counts page views, referrers, device type, browser and country.

Umami does not store cookies or identifiers on your device and does not build user profiles. Your IP address is not stored — it is used only once to attribute a visit in anonymised form. The data is not shared with third parties.

You can withdraw your consent at any time using the “Cookie settings” button in the footer.

7. Cookies and browser storage

The website does not use cookies. We only save your cookie banner choice in browser storage (localStorage), so we don't ask you on every visit. This is necessary to remember your decision and does not require consent.

The light or dark theme follows your system settings and is not stored anywhere.

8. Transfers outside the EEA

Resend, Inc. is based in the USA. Data is transferred under the mechanisms of Chapter V GDPR — the European Commission's adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses approved by the Commission. You can obtain a copy of the safeguards by writing to contact@gridstack.eu.

9. How long we keep data

• enquiry and correspondence data — for the duration of our discussions and then until any claims become time-barred; earlier if you withdraw consent, unless further processing is needed to defend claims;
• server logs — no longer than 30 days;
• Umami statistics — in anonymised form that cannot be linked to a specific person.

10. Your rights

You have the right to:

• access your data and receive a copy;
• rectify your data;
• erase your data;
• restrict processing;
• data portability;
• object to processing based on legitimate interest;
• withdraw consent at any time — without affecting the lawfulness of processing before withdrawal.

To exercise your rights, write to contact@gridstack.eu. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes UODO, ul. Stawki 2, 00-193 Warsaw, Poland).

11. Automated decisions

We do not make decisions based solely on automated processing, including profiling.

12. Changes to this policy

We may update this policy, e.g. when we change providers or website features. The current version, with its effective date, is always available on this page.