Effective Date: March 12, 2026
Last Updated: March 12, 2026
1. Introduction
This Privacy Policy describes how KursyPOL Prosta Spółka Akcyjna (“we,” “us,” or “our”) collects, uses, and protects your personal information when you visit our website https://click2result.com/ or use our digital marketing services.
Data Controller:
KursyPOL Prosta Spółka Akcyjna
ul. Stefana Batorego 18/108
02-591 Warszawa, Poland
NIP: 7011203035
Email: contact@click2result.com
We are committed to protecting your privacy and ensuring transparency in how we handle your personal data. This policy complies with the General Data Protection Regulation (GDPR), applicable EU and Polish data protection laws, and other relevant privacy regulations[1][2].
2. Information We Collect
2.1 Personal Data You Provide
We collect personal information that you voluntarily provide to us when you:
- Contact us through our website contact forms
- Request a consultation or quote for our services
- Subscribe to our newsletter or marketing communications
- Create an account on our platform
- Engage with our services as a client
This information may include:
- Name and surname
- Email address
- Phone number
- Company name and position
- Business address
- Marketing goals and preferences
- Payment and billing information
2.2 Automatically Collected Data
When you visit our website, we automatically collect certain technical information through cookies and similar technologies:
- IP address
- Browser type and version
- Device information
- Operating system
- Pages viewed and time spent on pages
- Referring website addresses
- Click-stream data and navigation patterns
2.3 Marketing and Analytics Data
As a digital marketing agency, we may collect and process data related to:
- Campaign performance metrics
- Advertising interactions and conversions
- Social media engagement data
- Website analytics and user behavior patterns
- A/B testing results
3. Legal Basis for Processing
We process your personal data based on the following legal grounds under GDPR[3][4]:
| Legal Basis | Purpose |
| Consent | Marketing communications, newsletter subscriptions, optional cookies |
| Contractual Necessity | Providing our marketing services, processing payments, client communication |
| Legitimate Interests | Website analytics, service improvement, fraud prevention, security |
| Legal Obligation | Tax compliance, accounting records, regulatory requirements |
Table 1: Legal bases for data processing
4. How We Use Your Information
We use your personal data for the following purposes:
4.1 Service Delivery
- Providing digital marketing services (Meta Ads, Google Ads, TikTok Ads, LinkedIn Ads)
- Managing advertising campaigns on your behalf
- Creating and optimizing marketing content
- Reporting on campaign performance and ROI
- Client communication and project management
4.2 Business Operations
- Processing payments and managing invoices
- Maintaining customer relationship records
- Improving our services and website functionality
- Conducting market research and analytics
- Internal record-keeping and administration
4.3 Marketing and Communication
- Sending newsletters and marketing updates (with your consent)
- Providing relevant service recommendations
- Responding to inquiries and support requests
- Notifying you about service changes or updates
4.4 Legal and Security
- Complying with legal obligations and regulations
- Preventing fraud and unauthorized access
- Protecting our rights and property
- Resolving disputes and enforcing agreements
5. Data Sharing and Third-Party Disclosure
We may share your personal information with trusted third parties in the following circumstances:
5.1 Service Providers
We work with third-party service providers who assist us in delivering our services[5]:
- Advertising Platforms: Meta (Facebook/Instagram), Google Ads, TikTok Ads, LinkedIn Ads
- Analytics Tools: Google Analytics, website tracking and analytics platforms
- Payment Processors: Stripe, banking institutions for payment processing
- Cloud Services: Google Workspace, hosting providers for data storage
- Communication Tools: Email service providers, CRM platforms
- Project Management: Notion, collaboration tools for client projects
All third-party service providers are contractually obligated to protect your data and use it only for specified purposes.
5.2 Legal Requirements
We may disclose your information when required by law or to:
- Comply with legal processes, court orders, or government requests
- Enforce our terms of service or other agreements
- Protect our rights, property, or safety, or that of others
- Prevent fraud or illegal activities
5.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections.
5.4 With Your Consent
We may share your information for purposes not listed here when we have obtained your explicit consent.
6. International Data Transfers
As we operate internationally and use service providers based in various countries, your personal data may be transferred to and processed in countries outside the European Economic Area (EEA)[6].
When we transfer data outside the EEA, we ensure appropriate safeguards are in place:
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions recognizing equivalent data protection levels
- Privacy Shield frameworks where applicable
- Binding Corporate Rules for multinational organizations
Specific transfers may occur to:
- United States (for services like Google, Meta, Stripe)
- United Arab Emirates (for our Dubai operations)
- Other countries where our service providers maintain infrastructure
7. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy[7]:
| Data Type | Retention Period |
| Client contract data | Duration of contract + 6 years |
| Marketing communications | Until consent withdrawal |
| Financial records | 7 years (tax compliance) |
| Website analytics | 26 months |
| Contact form inquiries | 2 years or until resolved |
| Inactive marketing contacts | 24 months of inactivity |
Table 2: Data retention periods
After the retention period expires, we securely delete or anonymize your personal data. You may request earlier deletion by exercising your rights (see Section 9).
8. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyze website performance[8].
8.1 Types of Cookies We Use
- Essential Cookies: Required for website functionality (cannot be disabled)
- Analytics Cookies: Help us understand how visitors use our website
- Marketing Cookies: Track visitors across websites to display relevant ads
- Preference Cookies: Remember your settings and preferences
8.2 Cookie Management
You can control cookie settings through your browser preferences. Note that disabling certain cookies may affect website functionality. To withdraw consent for non-essential cookies, please use our cookie consent management tool available on our website.
8.3 Third-Party Cookies
Our website may include cookies from third parties such as:
- Google Analytics for website analytics
- Meta Pixel for advertising and retargeting
- LinkedIn Insight Tag for professional advertising
- TikTok Pixel for social media advertising
9. Your Privacy Rights
Under GDPR and applicable data protection laws, you have the following rights regarding your personal data[9][10]:
9.1 Right of Access
You have the right to request a copy of the personal data we hold about you and information about how we process it.
9.2 Right to Rectification
You can request correction of inaccurate or incomplete personal data.
9.3 Right to Erasure (“Right to be Forgotten”)
You may request deletion of your personal data when:
- The data is no longer necessary for its original purpose
- You withdraw consent (where consent was the legal basis)
- You object to processing and there are no overriding legitimate grounds
- The data was unlawfully processed
- Legal obligations require deletion
9.4 Right to Restriction of Processing
You can request that we limit how we use your data in certain circumstances, such as while we verify its accuracy or assess your objection to processing.
9.5 Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.
9.6 Right to Object
You can object to:
- Processing based on legitimate interests
- Direct marketing (including profiling)
- Processing for scientific or historical research purposes
9.7 Right to Withdraw Consent
Where we rely on your consent, you can withdraw it at any time. This will not affect the lawfulness of processing before withdrawal.
9.8 Right to Lodge a Complaint
You have the right to lodge a complaint with your local data protection authority if you believe we have violated your privacy rights.
Polish Data Protection Authority (UODO):
Urząd Ochrony Danych Osobowych
ul. Stawki 2
00-193 Warszawa, Poland
Phone: +48 22 531 03 00
Website: https://uodo.gov.pl/
9.9 Exercising Your Rights
To exercise any of these rights, please contact us at:
Email: contact@click2result.com
Subject Line: “Data Privacy Request”
We will respond to your request within 30 days. We may request additional information to verify your identity before processing your request.
10. Data Security
We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction[11]:
10.1 Technical Measures
- SSL/TLS encryption for data transmission
- Secure data storage with encryption at rest
- Regular security audits and vulnerability assessments
- Firewall protection and intrusion detection systems
- Two-factor authentication for sensitive systems
- Secure backup and disaster recovery procedures
10.2 Organizational Measures
- Access controls limiting data access to authorized personnel
- Employee training on data protection and security
- Confidentiality agreements with staff and contractors
- Data processing agreements with third-party providers
- Regular review and update of security policies
- Incident response and breach notification procedures
10.3 Data Breach Notification
In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay, as required by GDPR.
11. Children’s Privacy
Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us immediately, and we will take steps to delete such information.
12. Automated Decision-Making and Profiling
We may use automated tools for marketing analytics and campaign optimization. However, we do not make solely automated decisions that significantly affect you without human oversight.
When we use profiling for marketing purposes:
- It is based on consent or legitimate interests
- You have the right to object to such processing
- You can request human intervention and explanation of decisions
13. Links to Third-Party Websites
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. We will notify you of significant changes by:
- Posting the updated policy on our website with a new “Last Updated” date
- Sending an email notification to registered users
- Displaying a prominent notice on our website
We encourage you to review this Privacy Policy periodically. Your continued use of our services after changes are posted constitutes acceptance of the updated policy.
15. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
KursyPOL Prosta Spółka Akcyjna
ul. Stefana Batorego 18/108
02-591 Warszawa, Poland
NIP: 7011203035
Email: contact@click2result.com
Website: https://click2result.com/
For Data Protection Inquiries:
Email: privacy@click2result.com
Subject: “Privacy Policy Inquiry”
We are committed to resolving any privacy concerns promptly and transparently. We will respond to all inquiries within 30 days.
16. Consent and Acceptance
By using our website and services, you acknowledge that you have read, understood, and agree to this Privacy Policy. If you do not agree with this policy, please do not use our website or services.
For marketing communications, we will obtain your explicit opt-in consent before sending promotional materials. You can withdraw this consent at any time by clicking the “unsubscribe” link in our emails or contacting us directly.
Thank you for trusting Click2result with your digital marketing needs. Your privacy and data protection are our priorities.
References
[1] European Commission. (2016). General Data Protection Regulation (GDPR). https://gdpr-info.eu/
[2] 4TM. (2026, January 13). Privacy Standards for Marketers: 2026 Guide. https://4thoughtmarketing.com/articles/privacy-standards-for-marketers/
[3] ComplyDog. (2024, June 30). How to Write a GDPR Compliant Privacy Policy. https://complydog.com/blog/how-to-write-a-gdpr-compliant-privacy-policy
[4] GDPR Local. (2025, April 2). Mastering GDPR Digital Marketing: Strategies for Compliance. https://gdprlocal.com/mastering-gdpr-digital-marketing-strategies-for-compliance/
[5] Termly. (2022, July 26). How Marketing Agencies Can Create and Offer Privacy Policies. https://termly.io/resources/guides/marketing-agency-privacy-policy/
[6] GDPR.eu. (2019, February 21). A guide to GDPR data privacy requirements. https://gdpr.eu/data-privacy/
[7] Onsaas. (2025, December 4). Marketing Data Privacy Policy: The 2025 Playbook. https://www.onsaas.me/blog/marketing-data-privacy-policy
[8] Usercentrics. (2026, January 25). Marketing Data Privacy & Compliance – Best Practices in 2025. https://usercentrics.com/guides/privacy-led-marketing/
[9] Termly. (2025, February 23). Privacy Policy Requirements Checklist for Websites & Apps. https://termly.io/resources/checklists/privacy-policy-requirements/
[10] Improvado. (2022, September 21). Privacy and Marketing: Compliance Guide 2026. https://improvado.io/blog/data-privacy-and-compliance-for-marketers-guide
[11] Inflow. (2024, November 24). Data Privacy in Digital Marketing: Best Practices for 2025. https://www.goinflow.com/blog/marketing-data-privacy/
