Policy privacy

1. Data Controller

The controller of your personal data is Ententra (hereinafter: "Ententra"), the owner of the website ententra.com and the tools made available at app.ententra.com. For any matters concerning personal data and this policy, you can contact us at: kontakt@ententra.com.

We have not appointed a data protection officer. Your point of contact for privacy matters is the email address above.

2. What data we collect

We only collect the data you provide to us yourself, along with basic technical data necessary for the website to function:

• Content download form (lead magnet), e.g. a checklist: your email address and your consent to be contacted.
• Audit form (app.ententra.com/audyt.html): company name, contact person's full name, email address, phone number, and information about your company's processes, which you describe yourself in the form.
• Email contact and scheduling a call: the data you provide when writing to us or booking a call (name, email address, message content).
• Technical and analytics data: anonymous or pseudonymised information about website usage collected by analytics tools (see point 8).

3. Purposes and legal bases for processing

We process your data for the following purposes:

• Sending the requested material and occasional messages (e.g. PDF checklists, educational content, information about our services), on the basis of Your consent, Article 6(1)(a) GDPR.
• Contact regarding an audit, quotation and preparation of a cooperation proposal, when you contact us yourself, on the basis of Your consent (Article 6(1)(a) GDPR) and for the purpose of taking action at your request prior to concluding an agreement (Article 6(1)(b) GDPR).
• Responding to your message and ongoing communication, on the basis of our legitimate interest in responding to a person who has contacted us (Article 6(1)(f) GDPR).
• Analytics and website maintenance (statistics, security, improving the website's performance), on the basis of our legitimate interest (Article 6(1)(f) GDPR), and, with regard to cookies not required for the website to function, on the basis of your consent.

Providing your data is voluntary, but necessary to use a given feature, without an email address we won't be able to send you the material, and without contact details we won't be able to prepare an audit proposal.

4. Data recipients and processors

We do not sell your data. We may entrust it to trusted providers who help us run our business, only to the extent necessary to achieve the above purposes and on the basis of data processing agreements:

• email and messaging service providers,
• analytics tool providers (visit statistics),
• provider of the online call scheduling tool,
• provider of the server infrastructure (hosting) on which the website operates.

5. Transfer of data outside the European Economic Area

Some of our tool providers (e.g. analytics) may process data outside the EEA. In such cases, this takes place on the basis of mechanisms ensuring an adequate level of protection as provided for under GDPR, in particular standard contractual clauses approved by the European Commission.

6. How long we retain data (retention)

• Data processed on the basis of consents (e.g. email address for sending materials): until consent is withdrawn, and if consent is not withdrawn, for no longer than necessary to fulfil the purpose.
• Data from audit form and correspondence: for the duration of discussions and preparation of a proposal, and thereafter until any related claims arising from the contact become time-barred.
• Data analytics: for the period resulting from the settings of the analytics tools.

7. Your rights

In connection with the processing of your data, you have the following rights:

• the right to access your data and receive a copy of it,
• the right to rectification (correction) of data,
• the right to erasure of data ("the right to be forgotten"),
• the right to restriction of processing,
• the right to data portability,
• the right to object to processing based on our legitimate interest,
• the right to consent is withdrawn at any time, without affecting the lawfulness of processing carried out before the withdrawal,
• the right to lodge a complaint with a supervisory authority, which in Poland is the President of the Personal Data Protection Office (uodo.gov.pl).

To exercise the above rights, write to us at kontakt@ententra.com. You can also withdraw your consent to receive messages by replying to any message from us.

8. Cookies and analytics

The website uses cookies and similar technologies. Essential cookies ensure the website functions correctly. Analytics cookies help us understand how you use the website, and we use them based on your consent. You can change your cookie settings in your browser, including blocking or deleting them.

9. Data security

We apply appropriate technical and organisational measures to protect data against unauthorised access, loss or alteration, including encrypting the connection (HTTPS) and restricting data access solely to those who need it.

10. Changes to the policy

We may update this policy when our services or applicable regulations change. The current version is always available at this address, and the date of the last update is shown at the top of the page.

11. Contact

For matters concerning personal data and this policy, write to us: kontakt@ententra.com.