Privacy Policy

1. Data controller

The controller of your personal data is:

2. Contact details

For any questions about the protection of your personal data, you can reach us by email at: contact@merdilo.com

3. Data we collect

Newsletter form:

• Email address (required)
• Date and time of sign-up

Google Analytics (after you consent to cookies):

• Anonymous user identifier
• Device information (type, operating system, browser)
• Approximate location (country, city)
• Information about how you interact with the site (pages visited, time on site)
• Traffic source (how you found the site)

Meta Pixel (after you consent to cookies):

• _fbp cookie (browser identifier)
• Device information (type, operating system, browser)
• Pages visited and interactions
• IP address

Microsoft Clarity (after you consent to cookies):

• Anonymous session recordings (cursor movements, scrolling, clicks) and heatmaps
• Device information (type, operating system, browser)
• Pages visited and interactions with the site
• _clck and _clsk cookies (user and session identifiers)

4. Why we process your data

We process your personal data in order to:

• Send you information about the Merdilo app
• Let you know when the app launches
• Share special offers and discounts
• Keep you posted on news and updates
• Run advertising and remarketing campaigns on Meta platforms (Facebook, Instagram)

5. Legal basis for processing

The legal basis for processing your personal data is:

Your freely given consent (Article 6(1)(a) GDPR) - given by ticking the relevant box when you sign up for the newsletter and confirming your email address.

In addition, the newsletter is sent on the basis of consent given in accordance with Article 172 of the Polish Electronic Communications Law (PKE).

6. Who receives your data and data transfers

Your data may be shared with the following providers:

• MailerLite - our newsletter service provider (based in Lithuania, EU)
• Google LLC - the Google Analytics provider (based in the USA)
• Meta Platforms Ireland Ltd. - the Meta Pixel provider for advertising and remarketing (based in Ireland, EU; data transferred to the USA under the EU-U.S. Data Privacy Framework)
• Microsoft Corporation - the Microsoft Clarity provider (behavior analysis, anonymous session recordings and heatmaps; based in the USA; data transferred under the EU-U.S. Data Privacy Framework)

MailerLite processes data within the European Union. Google LLC and Microsoft Corporation process data on the basis of standard contractual clauses approved by the European Commission and their certification under the EU-U.S. Data Privacy Framework.

We do not sell or share your personal data with third parties for marketing purposes.

7. Cookies, Google Analytics, Meta Pixel and Microsoft Clarity

What are cookies?

Cookies are small text files saved on your device when you use a website. They help remember your preferences and analyze traffic on the site.

Which cookies do we use?

• Essential cookies - store your cookie consent choice (localStorage)
• Analytics cookies (Google Analytics) - help us understand how people use the site so we can make it better
• Functional cookies (MailerLite) - power the newsletter sign-up form
• Marketing cookies (Meta Pixel) - let us run advertising and remarketing campaigns on Meta platforms (Facebook, Instagram)
• Analytics cookies (Microsoft Clarity) - record anonymous session recordings and heatmaps that show us how you use the site and what we can improve

Google Analytics with Consent Mode

We use Google Analytics 4 with Consent Mode v2 technology. This means that:

• Before you consent - Google Analytics collects only anonymized statistics WITHOUT saving cookies on your device
• After you consent - Google Analytics uses cookies for full analytics (you can change this at any time)
• If you decline - no analytics cookies are saved, and only basic, anonymized statistics are collected

How to manage your cookie consent

On your first visit, we show a banner asking for your consent to cookies. You can change your choice at any time by clicking the "Manage cookies" link in the site footer.

Legal basis

We use analytics and marketing cookies on the basis of your consent, in accordance with Article 173 of the Polish Electronic Communications Law (PKE) and Article 6(1)(a) GDPR.

Meta Pixel

Meta Pixel is an analytics and advertising tool provided by Meta Platforms Ireland Ltd. It works as follows:

• Before you consent - the Meta Pixel script is NOT loaded and no data is sent to Meta
• After you consent - Meta Pixel loads dynamically and records your visit (a PageView event) and conversions (for example, a newsletter sign-up)
• If you decline - Meta Pixel is not loaded and collects no data

Microsoft Clarity

Microsoft Clarity is an analytics tool provided by Microsoft Corporation that creates anonymous session recordings and heatmaps. It works as follows:

• Before you consent - the Microsoft Clarity script is NOT loaded and no data is collected
• After you consent - Clarity records anonymous interactions with the site, and sensitive content (such as text and form fields) is masked and never shared with us
• If you decline - Clarity is not loaded and collects no data

8. Automated decision-making

We do not make decisions based solely on automated processing, including profiling, that would produce legal effects for you or similarly significantly affect you.

9. How long we keep your data

Your personal data will be kept until you withdraw your consent to processing, that is, until you unsubscribe from the newsletter.

Google Analytics cookies are kept for up to 14 months from your last visit to the site.

The _fbp cookie (Meta Pixel) is kept for up to 90 days.

10. Your rights

Under the GDPR, you have the following rights:

• Right of access - you can get information about the data we process
• Right to rectification - you can correct inaccurate data
• Right to erasure - you can ask us to delete your data
• Right to restrict processing - you can limit how your data is processed
• Right to data portability - you can receive your data in an electronic format
• Right to object - you can object to your data being processed for marketing purposes
• Right to withdraw consent - you can withdraw your consent at any time by clicking the "Unsubscribe" link in any email

11. Right to lodge a complaint

If you believe that the processing of your personal data breaches the GDPR, you have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).

12. Providing your data is voluntary

Providing your personal data is voluntary, but it is necessary to receive the newsletter.

13. Changes to this Privacy Policy

We reserve the right to make changes to this Privacy Policy. We will let you know about any changes by email.