Privacy policy

schwarzent.com · version 1.1 · effective 5 September 2026 · the Polish version is the binding one

This policy explains who controls your personal data, what data we collect on schwarzent.com, why, on what legal basis, who we entrust it to and what rights you have. We write in plain language because that is how we run the whole company — but this is a complete, formal document compliant with the GDPR. In case of any discrepancy, the Polish version prevails.

§1 Data controller

The controller of your personal data is:

For anything related to personal data, write to the e-mail address above. We have not appointed a data protection officer — the scale of processing does not require one.

§2 What data we collect and where it comes from

Report download form (/report). Your first name, company name and e-mail address — the details you enter yourself to receive our report on the pricing of YouTube partnerships.

Contact form (/en/contact). First name, company name, e-mail address and the content of your message — so that we can reply.

Channel brief (/en/brief), the form for brands (/en/reklama) and the strategic brief. Company name, website, tax ID, industry, full name, job title, e-mail address, phone number and your answers describing your company, customers, goals, budget and expectations. You provide them so that we can prepare a quote and a proposal — you send them knowingly, ticking the consent box under the form. The submission lands in a spreadsheet in our Google Workspace.

E-mail correspondence. When you write to partnerships@schwarzent.com or any other address of ours, we process your e-mail address, name and the content of the message.

Technical data. The hosting server and our analytics tool record standard technical data about visits (IP address, browser type, pages visited, approximate location at country/region level). The analytics we use (Vercel Web Analytics) works without cookies and does not build a user profile. When you click a video thumbnail, the YouTube player (privacy-enhanced mode) loads from Google's servers — until that click Google receives no request at all.

We do not collect special categories of data and do not want to receive them. Providing data is always voluntary — but without an e-mail address we cannot send the report or reply to your message.

§3 Why and on what legal basis

Sending the report and following up on it — performance of a contract to deliver content (Art. 6(1)(b) GDPR): you ask for the report, we send it.

Our own marketing, i.e. occasional messages about our services sent to people who downloaded the report — our legitimate interest (Art. 6(1)(f) GDPR). You can unsubscribe from any such message with a single e-mail and we honour the objection immediately.

Replying to enquiries, preparing a quote and holding business conversations — steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR) or our legitimate interest (Art. 6(1)(f) GDPR). The consent box under the brief confirms that you send the data knowingly; withdrawing it does not affect the lawfulness of earlier processing.

Establishing, exercising or defending legal claims and keeping the site secure — legitimate interest (Art. 6(1)(f) GDPR).

§4 How long we keep data

Report form data — until you object or ask for erasure, no longer than 3 years after the last contact. Brief and contact form submissions that did not lead to a collaboration — up to 12 months after the last contact. Business correspondence — for the duration of the conversations and, after that, for the limitation period of potential claims (as a rule up to 6 years). Technical server logs — according to the hosting provider's retention, typically up to several dozen days.

§5 Who we entrust data to

We use a few trusted providers that process data on our behalf: Vercel Inc. (hosting and cookie-free analytics), FormSubmit (technical handling of the /report and /contact forms — it forwards the submission to us by e-mail), Google Ireland Ltd. (Google Workspace — our e-mail and the spreadsheet in which brief submissions are recorded), jsDelivr (the CDN serving the site's animation libraries — it sees standard technical request data) and — only when you play a video — Google Ireland Ltd. as the operator of the YouTube player. Fonts are served from our own server. Beyond that, data may be disclosed only to bodies entitled to it by law.

We do not sell data and do not share it with anyone for the marketing of third-party products.

§6 Transfers outside the EEA

Some of our providers (Vercel, FormSubmit) are based or have infrastructure in the USA. Transfers rely on the European Commission's adequacy decision (EU-U.S. Data Privacy Framework) or on standard contractual clauses (SCCs), with additional technical safeguards.

§7 Your rights

You have the right to: access your data and obtain a copy, rectification, erasure, restriction of processing, data portability, objection to processing based on legitimate interest (including marketing — we always honour that objection), and, where processing is based on consent, to withdraw it at any time without affecting the lawfulness of earlier processing. An e-mail to partnerships@schwarzent.com is enough.

You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl) or with the supervisory authority in your country if you believe we process data unlawfully.

§8 Cookies and analytics

The site sets no cookies — neither its own, nor advertising, nor tracking ones. In browser storage we keep only a few technical settings the site needs to work (dismissal of the cookie notice, a draft of the brief form, the number of the thumbnail set in the gallery), which do not require consent. Visit analytics (Vercel Web Analytics) works without cookies and without identifying any individual. The full list, storage periods and clearing instructions are in the separate cookie policy. If we ever deploy tools that require consent, a consent mechanism with the option to refuse will appear first, and both documents will be updated.

§9 Automated decisions and profiling

We do not make decisions about you based solely on automated processing that would produce legal effects, and we do not profile visitors to the site.

§10 Changes to this policy

We may update this policy when the scope of our services or our providers change. The current version is always available at schwarzent.com/en/privacy-policy together with its effective date. Version 1.1 — effective 5 September 2026 (brief and contact forms specified, YouTube player added to the list of recipients, cookie policy split into a separate document). Version 1.0 was in force from 23 July 2026.