Privacy and Cookies Policy of igauss.pl
English version updated: 9 October 2026. Based on the Polish policy updated on 30 September 2026, with additional information about the current protection of contact forms.
1. What this policy covers
This policy explains how personal data is processed when you use igauss.pl, contact Instytut Gaussa or book a meeting. It also describes cookies and external services used on the website. Information about AI-assisted content appears in a separate section below.
2. Data controller and privacy contact
The controller of personal data processed in connection with this website and enquiries addressed to us is Instytut Gaussa sp. z o.o., ul. Ekologiczna 31, 05-123 Chotomów, Poland. Polish tax identification number (NIP): 527-259-63-34.
Data Protection Officer (DPO): biuro@igauss.pl. You can also write to the controller at the postal address above.
3. Applicable rules
The principal rules are Regulation (EU) 2016/679 (the GDPR), the Polish Act of 10 May 2018 on the Protection of Personal Data and the Polish Act of 12 July 2024 — Electronic Communications Law, as amended. Article 398 of the latter concerns consent to commercial communications; Articles 399–400 concern storing information on, and accessing information from, a user’s device.
4. Purposes and legal bases
The legal basis depends on the purpose of processing:
- Business correspondence and enquiries from people representing organisations: our legitimate interest in handling enquiries and maintaining business communication — Article 6(1)(f) GDPR.
- Steps taken at your request before entering into a contract with you, or performing that contract: Article 6(1)(b) GDPR.
- Meeting obligations imposed by law: Article 6(1)(c) GDPR.
- Processing that requires your consent: Article 6(1)(a) GDPR, together with any applicable consent requirements under the Electronic Communications Law.
Sending an enquiry is not consent to a newsletter or marketing communications.
5. Data and its sources
Data may come from your messages, contact forms and meeting bookings, as well as technical connections to the website and the services described below. Depending on the information you provide, this may include your name, email address, telephone number, organisation, role, selected topic and the content of your enquiry. Technical data may include your IP address, browser and device information, timestamps, visited pages and online identifiers.
Please provide only the information needed to handle your enquiry. At the initial contact stage, do not send psychological assessment results, health information or confidential personal data about employees.
6. Cookies and similar technologies
Cookies and similar technologies store or access information on your device. Some are necessary for the website or a service you request to function; others support statistics or marketing. Technical information and online identifiers can be personal data even if we do not know your name.
7. Consent to optional technologies
Prior consent is required for technologies that are not necessary to transmit a communication or provide a service you expressly request. Visiting the website, scrolling or leaving your browser’s default settings unchanged is not such consent. The exception for necessary technologies does not automatically extend to analytics or advertising.
8. Managing your cookie choices
You can review and change your choices using the cookie-settings control on the website. You can also delete or block cookies in your browser’s privacy settings. Browser settings do not replace the website operator’s obligation to obtain any required consent before optional technologies are used. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
9. Effects of blocking cookies
Blocking necessary cookies may limit particular functions, such as logging in. Refusing analytics or marketing cookies should not prevent you from reading the website or contacting us. You can contact us by email or telephone without booking through an external calendar.
10. Google Analytics, Tag Manager and Ads
The website uses Google Analytics and Google Tag Manager and has a Google Ads tag installed. These services support analysis of website use and measurement of marketing activity. They may process online identifiers, device and browser information, visited pages and interactions. Aggregated reports do not mean that no personal data is processed at earlier stages.
Details: Google Privacy Policy and Google’s information about cookies. Consent requirements for optional analytics and marketing technologies are described above.
11. Calendly meeting bookings
A Calendly calendar is available on the Contact page. When you book a meeting, Calendly processes the information entered in the booking form, the appointment details and technical information relating to use of the service. Loading an embedded calendar may also disclose connection information to the provider.
Details: Calendly Privacy Notice and Calendly Data Processing Addendum. As an alternative, email biuro@igauss.pl or use the telephone number on the Contact page.
12. Technical operation and protection of forms
Delivering the website, diagnosing errors and protecting it against abuse can involve automatic processing of technical data, including IP addresses, timestamps, requested pages and browser information. Website security and incident handling are our legitimate interests under Article 6(1)(f) GDPR.
Our contact forms use Cloudflare Turnstile to help distinguish people from bots and limit abuse. Cloudflare processes technical signals, such as IP addresses, browser information and information about the connection and website origin. In this form-protection integration, the enquiry text is not sent to Cloudflare as part of the Turnstile verification.
Cloudflare processes signals on behalf of website operators to provide protection and also describes separate processing to improve bot detection. Details: Turnstile Privacy Addendum, Cloudflare Privacy Policy and Cloudflare Data Processing Addendum.
13. Enquiries, optional email copies and retention
Information submitted in a message, form or booking is used to handle that matter. Providing contact details is voluntary, but without them we may be unable to reply or confirm an appointment. If you select the optional email-copy checkbox, a copy of your enquiry is sent to the address you provide. Check that address before submitting and do not include sensitive information in an initial enquiry.
Browsing the website, contacting us or requesting a copy does not subscribe you to a newsletter. A newsletter or other marketing communications require a separate choice and any consent required by law.
Correspondence and enquiries that do not result in a contract are retained for 30 days after the matter is closed — after the correspondence ends or the unfulfilled enquiry is closed. This period does not apply to records of concluded contracts or documents that must be retained under applicable law.
14. Recipients and international transfers
Recipients may include providers of hosting, email and technical support, and the external services described above, to the extent needed for their services. Data may also be disclosed to bodies entitled to receive it under the law.
Using Google, Calendly or Cloudflare may involve processing outside the European Economic Area, including in the United States. The relevant provider’s documentation describes the safeguards used for applicable transfers, such as an adequacy decision and the EU–US Data Privacy Framework where applicable, or standard contractual clauses. A transfer mechanism depends on the recipient and the processing concerned; it is not an unconditional guarantee that every transfer is covered by the same mechanism.
Further information: Google data-transfer frameworks, Calendly Data Processing Addendum and Cloudflare Data Processing Addendum. Contact us to obtain information about the safeguards applicable to your data and how to obtain a copy.
15. Your rights and how to exercise them
Subject to the conditions in the GDPR, you may request access to and a copy of your data, rectification, erasure or restriction of processing. Data portability applies where processing is automated and based on consent or a contract. Not every right applies in every situation.
You may withdraw consent at any time without affecting the lawfulness of earlier processing. You may object, on grounds relating to your particular situation, to processing based on legitimate interests. You may object to processing for direct marketing at any time. You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (UODO).
Send a request to biuro@igauss.pl or the postal address above. We respond without undue delay and, as a rule, within one month of receiving the request. Where the GDPR permits an extension of up to two further months, we inform you of the extension and its reasons within the first month. This response deadline is separate from the 30-day enquiry-retention period.
16. Changes to this policy
We may update this policy when the website, its services or applicable law change. We will communicate changes in a visible and understandable way and update the date shown on this page.
17. Questions or concerns
For questions about personal data, privacy requests or reports of irregularities, contact Instytut Gaussa at biuro@igauss.pl or write to ul. Ekologiczna 31, 05-123 Chotomów, Poland.
Information about AI-assisted content
Texts published on igauss.pl may be prepared with the help of artificial intelligence (AI) tools, including for organising source materials, drafting, language editing and translation. AI may also assist in creating illustrations and infographics.
Using AI does not transfer responsibility for publication to a tool or its provider. Instytut Gaussa is responsible for content published on this website. AI tools can make mistakes. Please report suspected inaccuracies to biuro@igauss.pl, identifying the page and the passage that should be checked.
Articles are for information and education. They do not replace an individual psychological assessment, analysis of a particular organisation or advice tailored to a specific situation. This notice does not exclude liability imposed by applicable law.
This notice concerns how materials are prepared. It is not your consent to share personal data with AI tools and is not, by itself, a legal basis for such processing. It also does not replace any disclosures required by law for particular content.
