Privacy Policy
Last updated: 24 July 2026 · version 2026-07-24
This policy explains what personal data we collect through the miradouro.ai website, for what purpose and on what legal basis we process it, who we share it with, and what rights you have. We value transparency — we collect as little data as possible, and only when it is necessary or when you give your consent.
1. Data controller
The controller of your personal data is Miradouro Group sp. z o.o., Tax ID (NIP) 9542905765, registered office at ul. Mysłowicka 35A/12, 40-486 Katowice, Poland (the “Controller”, “we”).
For all matters relating to the protection of personal data you can reach us at: adam@miradouro.ai.
2. Key terms
- GDPR — Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of personal data.
- Personal data — any information relating to an identified or identifiable natural person.
- Processing — any operation performed on data (e.g. collection, storage, access, erasure).
3. What data we process and its source
We process only data that:
- You provide yourself — via the contact form: your name, contact details (email or phone) and message content.
- Is collected automatically — with your consent, through cookies and analytics/marketing tools (e.g. Google Analytics, Google Ads, Meta Pixel): including information about your use of the site and identifiers assigned by those tools.
- Consent log — when you save a choice in the cookie banner, we record: a (random) consent id, the date, the scope of consent, the policy version, language and country code (from the Cloudflare network). We do not store your IP address.
4. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Responding to your contact-form enquiry and following up | Art. 6(1)(b) (steps at your request) and (f) (our legitimate interest — handling correspondence) |
| Website traffic analytics (statistics) | Art. 6(1)(a) — your consent |
| Marketing and remarketing (advertising) | Art. 6(1)(a) — your consent |
| Recording and demonstrating consents (accountability) | Art. 6(1)(c) and Art. 7(1) — obligation to demonstrate consent |
| Ensuring the security and proper operation of the site | Art. 6(1)(f) — our legitimate interest |
You can withdraw your consent to analytics and marketing at any time — without affecting the lawfulness of processing before withdrawal — using the “Privacy settings” link in the footer.
5. Cookies and similar technologies
Cookies are small files stored in your browser. We group them into categories; optional ones load only after your consent (by default they are blocked — we use Google Consent Mode).
| Category | Examples / provider | Duration |
|---|---|---|
| Necessary (always on) | mrd_consent — remembers your consent choice (ours) | 12 months |
| Analytics (with consent) | Google Analytics (Google Ireland/LLC) | up to 24 months |
| Marketing (with consent) | Google Ads, Meta Pixel (Meta Platforms Ireland) | up to 24 months |
Manage your consent via “Privacy settings” in the footer. You can also delete and block cookies in your browser settings — this may, however, affect how some features work.
6. Recipients of data
Data may be entrusted to trusted providers who process it on our behalf, only to the extent necessary to deliver their services:
- Google (Analytics, Ads, Tag Manager) — analytics and marketing;
- Meta (Pixel) — marketing and remarketing;
- Web3Forms — technical handling of the contact form;
- Cloudflare — website hosting and storage of the consent log.
7. Transfers outside the EEA
Some of the above providers may process data outside the European Economic Area (including in the USA). This takes place on the basis of appropriate safeguards provided for in the GDPR — in particular the Standard Contractual Clauses (SCC) approved by the European Commission, or an adequacy decision.
8. Retention period
- Contact-form correspondence — for as long as needed to handle your matter and any follow-up, and then until any potential claims are time-barred.
- Consent log — for as long as required to demonstrate compliance (accountability).
- Cookies — as stated in the table above, or until you delete them.
9. Your rights
In relation to the processing of your data, you have the right to:
- access your data and obtain a copy;
- rectify (correct) your data;
- erase your data (“right to be forgotten”);
- restrict processing;
- data portability;
- object to processing based on legitimate interest;
- withdraw consent at any time (without affecting processing before withdrawal).
To exercise these rights, email the address in section 1. You also have the right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (UODO) (ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl).
10. Automated decisions and profiling
We do not make decisions about you based solely on automated processing that would produce legal effects concerning you or similarly significantly affect you. Marketing tools — if you consent to them — may profile for advertising purposes (e.g. ad targeting).
11. Data security
We apply appropriate technical and organisational measures to protect data against unauthorised access, loss or destruction — including encrypted transmission (HTTPS) and restricted access to data.
12. Children’s data
The site and services are not directed at persons under 16, and we do not knowingly collect their data. If you believe a child’s data has been provided to us, contact us and we will delete it.
13. Changes to this policy
We may update this policy (e.g. when adding new tools). Each version has a date and number at the top of the page. For significant changes affecting consent, we will ask you to renew it.