PRIVACY POLICY

Last updated: 4 July 2026

1. General information

This Privacy Policy sets out the rules for processing and protecting the personal data of visitors to the website evenema.com (the “Website”) and of anyone who contacts us through it.

We care about the privacy of Website users and process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and applicable Polish law.

2. Data controller

The controller of your personal data is:

Evenema s.c., ul. Paska 34b/9, 71-622 Szczecin, Poland, Tax ID (NIP): 8513200843.

Contact for data protection matters: biuro@evenema.com

3. Data we collect

Through the Website we may collect the following data:

• data provided voluntarily in correspondence — name, e-mail address, phone number, company name and any other information included in your message (contact form or direct e-mail),

• data collected automatically — IP address, browser type, device type, operating system, approximate location, and information about how you use the Website (cookies and similar technologies).

Providing your data is voluntary, but necessary for us to reply to your message or prepare a proposal.

4. Purposes and legal bases of processing

We process personal data for the following purposes:

• responding to enquiries sent via the contact form or e-mail — Art. 6(1)(f) GDPR (the controller’s legitimate interest — handling correspondence),

• preparing and presenting a proposal; steps taken prior to entering into a contract — Art. 6(1)(b) GDPR,

• performance of a concluded contract — Art. 6(1)(b) GDPR,

• compliance with legal obligations (including tax and accounting) — Art. 6(1)(c) GDPR,

• establishing, pursuing or defending legal claims — Art. 6(1)(f) GDPR,

• analysing Website traffic statistics and improving the Website — Art. 6(1)(f) GDPR or the user’s consent (Art. 6(1)(a) GDPR) with respect to cookies,

• marketing our own services, including remarketing using the Meta Pixel tool — the user’s consent (Art. 6(1)(a) GDPR) given via cookie settings.

5. Data recipients

Personal data may be shared with providers whose services we use to operate the Website and our business, only to the extent necessary for the purposes described above:

• Framer B.V. (Netherlands) — provider of the platform on which the Website runs (hosting),

• Meta Platforms Ireland Limited (Ireland) — provider of the Meta Pixel tool, used with the user’s consent for remarketing and measuring the effectiveness of ads on Facebook and Instagram; Meta also processes this data for its own purposes as an independent controller — see Meta’s Privacy Policy (facebook.com/privacy/policy) for details,

• e-mail and office tool providers,

• analytics tool providers (if used — see the “Cookies” section),

• providers of accounting, legal or IT services,

• public authorities — only where required by law.

We do not sell personal data or share it with third parties for marketing purposes.

6. Transfers outside the European Economic Area

Because we use certain service providers (e.g. Meta Platforms, analytics tools or hosting infrastructure), data may be transferred to countries outside the EEA, including the United States. In such cases, transfers take place on the basis of mechanisms provided for in the GDPR — in particular European Commission adequacy decisions (e.g. the EU–US Data Privacy Framework) or standard contractual clauses.

7. Data retention

We store personal data for the following periods:

• correspondence and enquiries — for the duration of the correspondence, and then for up to 3 years for the purposes of potential claims,

• data related to contract performance — for the term of the contract, and then for the period required by law (including tax law — as a rule, 5 years from the end of the tax year),

• analytics data and cookies — for the periods indicated in the “Cookies” section or until consent is withdrawn.

8. Your rights

Everyone whose data we process has the right to:

• access their data and obtain a copy of it,

• rectify (correct) their data,

• erase their data,

• restrict processing,

• data portability,

• object to processing based on legitimate interest,

• withdraw consent at any time (without affecting the lawfulness of processing carried out before withdrawal),

• lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland (uodo.gov.pl).

To exercise any of these rights, simply write to: biuro@evenema.com.

9. Cookies

The Website uses cookies — small text files stored on the user’s device. We use:

• essential cookies — ensuring the proper functioning of the Website (basis: the controller’s legitimate interest); their use does not require consent,

• analytics/statistics cookies — allowing us to analyse how the Website is used (used only with the user’s consent),

• marketing cookies (Meta Pixel) — enabling us to build audiences and display tailored ads on Facebook and Instagram, and to measure their effectiveness (used only with the user’s consent); data collected by the Meta Pixel is stored by Meta in accordance with its own policy, and audiences based on Website activity are retained for a maximum of 180 days.

You can change your cookie settings in your browser at any time, including blocking cookies or deleting those already stored. Restricting the use of cookies may affect certain Website features.

10. Data security

We apply technical and organisational measures appropriate to the nature of the data processed, including an encrypted connection (SSL/TLS), restricting data access to authorised persons only, and working with trusted service providers.

11. Changes to this Privacy Policy

This Privacy Policy may be updated — for example, due to changes in the law or in the scope of our services. The current version, together with the date of the last update, is always available on the Website.

12. Contact

For any matters relating to this Privacy Policy and the processing of personal data, please contact us at: biuro@evenema.com.