← Back to EVERITUM

Privacy Policy

EVERITUM Event Agency · Updated: 29 October 2026

This policy explains how we process personal data when you visit this website, submit an inquiry, contact us, or interact with our advertising. We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Polish data-protection law.

1. Data controller

EVERITUM Agnieszka Ciesielska, registered office: ul. Trybunalska 46, 60-325 Poznań, Poland, tax ID (NIP): 5222427351, REGON: 014997554. Contact for data-protection matters: info@everitum.com.

2. What data we process, why, and on what legal basis

You submit the inquiry form or email us

Data
Name, company, work email, optional phone, country, project details, inquiry ID, time, the public article or service page from which you open the form, referral/campaign information and record of your privacy choices. Advertising click identifiers are included only with cookie consent.
Purpose
To respond, prepare a proposal, coordinate follow-up and, if you engage us, perform the contract. Campaign information helps us understand where inquiries come from.
Legal basis (GDPR)
Art. 6(1)(b) — steps at your request before a contract, where you are the prospective contracting party; Art. 6(1)(f) — our legitimate interest in handling business inquiries, correspondence with company representatives and maintaining a reliable inquiry register. Advertising measurement uses consent under Art. 6(1)(a).
Retention
For as long as needed to handle the inquiry and relevant follow-up, no longer than 3 years from last contact if no contract is concluded. Contract, accounting and necessary claims records are retained for the applicable legal periods.

You book a call via Calendly

Data
Contact details, chosen time slot and information you enter on the booking page
Purpose
To arrange and hold the call
Legal basis (GDPR)
Art. 6(1)(b) or Art. 6(1)(f), as described above
Retention
The inquiry retention criteria above apply to our correspondence. Calendly also explains its own processing on its booking page.

You consent to analytics

Data
Pseudonymous identifiers, device and browser information, pages viewed, approximate location, referral source and events such as an accepted inquiry
Purpose
To understand site use and improve it
Legal basis (GDPR)
Art. 6(1)(a) — your cookie consent
Retention
Our GA4 setting is 2 months for event data and 14 months for user data. The user-data period restarts with new activity. These settings do not limit standard aggregated reports.

You consent to advertising measurement

Data
Pseudonymous identifiers, advertising click identifiers, conversion events and an inquiry ID used to avoid duplicate counting and, if you submit the inquiry form, your email address in hashed (SHA-256) form
Purpose
To measure the effectiveness of Google Ads
Legal basis (GDPR)
Art. 6(1)(a) — your cookie consent
Retention
Browser cookie lifetimes are separate from reporting retention and conversion-attribution windows. Google documents the lifetimes and purposes of its advertising cookies in the link below.

You use the website, regardless of cookie consent

Data
Technical logs, such as IP address, time, requested URL and browser information; security and rate-limit records
Purpose
Operation, troubleshooting, security and abuse prevention
Legal basis (GDPR)
Art. 6(1)(f) — our legitimate interest in protecting and operating the service
Retention
Only for the period needed for operation, diagnosis and security, taking account of the hosting service's log rotation. Records needed to investigate an incident or defend a claim may be retained until that matter is resolved and relevant legal periods expire.

Providing data in the inquiry form is voluntary, but without the fields marked as required we cannot respond to your inquiry.

Submitting an inquiry does not subscribe you to a newsletter. The form's acknowledgment concerns handling that inquiry and is separate from the optional analytics and advertising choice.

3. Cookies and similar technologies

This website uses Google Tag Manager to manage tags, Google Analytics 4 for analytics and Google Ads for conversion measurement and advertising. We implement Google Consent Mode v2: analytics and advertising cookies are set only after you click “Accept” in the cookie banner. You can withdraw or change your choice at any time via “Cookie settings” in the footer. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal. Google tags load with storage denied by default and may send cookieless consent and measurement signals before a choice or after rejection. Advertising data redaction is enabled. Umami does not load without consent.

We also use Umami Cloud for website analytics. Our Umami integration loads only after the same optional analytics consent and stops sending events when you reject or withdraw that consent. It measures page views, contact-link clicks, the start of a form, unsuccessful submission attempts and inquiries accepted by our server. Event properties are limited to predefined project types, budget ranges with their currency, timing ranges, button labels, known public page paths and a limited set of referral categories. We do not send names, company names, email addresses, phone numbers, message text or inquiry IDs to Umami. Page addresses retain only recognised campaign labels; other query parameters and fragments are removed, and referring addresses are reduced to their origin. The GA4 retention settings above apply to GA4, not to Umami Cloud.

After you grant optional analytics consent, links to our Calendly booking page include the current public website page and recognised campaign labels, when available. Calendly receives these labels if you follow the link; they help us understand where booked calls originate. The link does not include inquiry-form answers, advertising click identifiers or your browsing history. If you reject or withdraw consent, these tracking labels are removed from the booking links on this website.

We remember your choice in your browser's local storage until you change it or clear the site's stored data. With analytics consent, session storage keeps the entry page, a broad referral category and recognised campaign information for up to 30 minutes of inactivity within the tab. This context is cleared when consent is withdrawn. A link to the inquiry form can also carry the public page you selected and an event-type suggestion, without saving a browsing history or form details. Rejecting optional cookies does not prevent you from sending an inquiry. You can also remove existing cookies through your browser settings. Google describes its cookie purposes and lifetimes in How Google uses cookies.

After our server accepts an inquiry, the site makes an inquiry ID and broad project categories available to the measurement tags. Google tags respect the current consent state; without consent, only cookieless measurement may occur, depending on tag configuration. Contact details and free-text form fields are not passed to analytics. If you have accepted advertising cookies, the email address you enter in the inquiry form is hashed (SHA-256) in your browser and sent to Google Ads, which uses it to attribute the inquiry to an ad click (enhanced conversions). Google tags do not send it without that consent. Google's explanation of data retention.

4. Recipients of data

Our inquiry form stores requests on our dhosting.pl hosting and transfers them to a private Google Sheets register using Google Apps Script. It sends an email notification to our business inbox. Agnieszka Ciesielska handles inquiries, with Mariusz as backup. The same inquiry may therefore be present in hosting storage, the register and business correspondence.

Service providers include dhosting.pl, our email provider, Google (Workspace, Sheets, Apps Script, Analytics, Ads and Tag Manager), Umami Cloud for optional website analytics and Calendly when you use its external booking page. Accounting or legal advisers receive only the information needed for their work. Providers may act as processors or independent controllers for their own purposes, as explained in their service notices. See also Umami's Privacy Policy.

Some providers may process data outside the European Economic Area, including in the United States. Where applicable, transfers rely on an adequacy decision, such as the EU–US Data Privacy Framework for certified recipients, or the European Commission's Standard Contractual Clauses and appropriate safeguards. Contact us for information about the safeguards relevant to your data. See also Google's Privacy Policy and Calendly's Privacy Notice.

We do not sell personal data and we do not share inquiry data with other clients.

5. Your rights

Subject to the conditions in the GDPR, you may request access, rectification, erasure, restriction or portability of your data and object to processing based on legitimate interest. Where processing relies on consent, you may withdraw it at any time. You may lodge a complaint with the Polish supervisory authority, Prezes Urzędu Ochrony Danych Osobowych (UODO). Current contact details and complaint channels are available at uodo.gov.pl.

To exercise your rights, email info@everitum.com.

6. Automated decision-making

We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you.

7. Guest data in event projects

This policy covers our website and business inquiries. For guest lists and invitations in client projects, the controller, our role and the applicable processing arrangements are determined for that project. Where we process data on the client's behalf, a data-processing agreement applies. Guests receive the relevant project-specific privacy information separately.

8. Changes

We may update this policy when our processing or the law changes. The current version is always available at this address, with the date of the last update shown at the top.