PRIVACY POLICY
Effective date: 01 Nov 2025
Service: barrierfreesite.com
Controller: Netkodo Sp. z o.o., Leona Czarlińskiego 19, 87-100 Toruń, Poland (“Netkodo”, “we”, “us”, “our”)
-
Contact
- GDPR: rodo@netkodo.com
- Contact form: available on the website
We have not appointed a Data Protection Officer; please direct privacy inquiries to the address above.
-
Scope and sources of data
- Data you provide: name, email address, billing/invoice data (e.g., company, VAT), content of contact form inquiries, account data.
- Data collected automatically: IP address, device identifiers, server logs, browser settings and language, analytics data.
- Local mechanisms: cookies and local storage — for widget operation, user preferences, analytics, and payments.
-
Purposes and legal bases
- Providing the SaaS and account handling (WCAG 2.1 widget, compliance monitoring) — GDPR Art. 6(1)(b).
- Payments and invoicing (Stripe) — GDPR Art. 6(1)(b) and (c).
- Analytics and service improvement (GA4, Hotjar, HubSpot) — GDPR Art. 6(1)(a) or (f).
- Communication and support — GDPR Art. 6(1)(b) or (f).
- Marketing (if consented; Google/Meta integrations) — GDPR Art. 6(1)(a).
- Establishment, exercise, or defence of legal claims — GDPR Art. 6(1)(f).
-
Data recipients
- Payments: Stripe.
- Analytics & CRM: Google Analytics 4, Hotjar, HubSpot.
- Consent management: Cookiebot.
- Advertising (if used): Google, Meta (Facebook).
- Hosting and IT subcontractors (as necessary to provide the service).
-
International transfers
Some recipients (Stripe, Google, Hotjar, HubSpot, Meta) may process data outside the EEA. We rely on Standard Contractual Clauses and appropriate safeguards under the GDPR.
-
Retention
We store data for 5 years counted from the end of the calendar year following the cancellation of the subscription, unless a longer period is required by law. Consent-based data is stored until withdrawn.
-
Your rights
You may request access, rectification, erasure, restriction, portability, and object to processing; you may also withdraw consent at any time (without affecting the lawfulness of prior processing). You may lodge a complaint with your supervisory authority.
-
Data necessity
Some data is required to conclude and perform the contract; without it, we may be unable to provide the service.
-
Automated decision-making
We do not make decisions based solely on automated processing that produce legal effects concerning you.
-
Cookies and local storage
- We use Cookiebot to obtain and manage consents.
- The widget and service use cookies/local storage for: saving preferences (including browser language), maintaining sessions, analytics (GA4/Hotjar), CRM (HubSpot), payments (Stripe), and — if consented — advertising (Google/Meta).
- A consent banner is shown on first visit; you can change preferences at any time.
-
Children
The service is not directed to persons under 16.
-
Changes to this policy
We will publish updates on the website and inform about material changes in advance.