Version 1.0 · Effective 13 August 2026. This policy reflects the current version of this website and may be revised, including following legal review.
Who We Are
Personal data collected through this website is processed in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation) and the Polish Personal Data Protection Act of 10 May 2018.
The administrator of personal data collected via this website is:
Sowa Marketing Spółka z ograniczoną odpowiedzialnością, registered address os. Piastowskie 36, 61-151 Poznań, Poland, entered in the register of entrepreneurs under KRS number 0000754399, NIP 7831786627, REGON 381037829, e-mail: hello@sowamarketing.com (the “Administrator”, “we”, “us”).
What We Collect and Why
Contact Form
When you use our Contact form, we collect your name, business email, company or organisation, and message, all of which are required. You may optionally also provide your phone number, company website, and a preferred service or model.
Purpose and legal basis. We process this data to respond to your inquiry, communicate with prospective and current business contacts, and handle the correspondence you initiate, on the basis of our legitimate interest in doing so (Article 6(1)(f) GDPR). Where you personally, as an individual, ask us to take steps before entering into a contract with you, we may additionally rely on Article 6(1)(b) GDPR for that specific purpose.
SOWA 360 Application
When you apply for SOWA 360, we collect your name, business email, company or organisation, your company website (or confirmation that you have none), your objective, the support areas you are interested in, your desired start date, and your role in your organisation’s decision-making, all of which are required. You may optionally also provide your phone number, your current marketing setup, and additional context.
Purpose and legal basis. Where you are personally the prospective contractual party, we process this data to take steps you have requested prior to entering into a contract (Article 6(1)(b) GDPR). Where you are applying on behalf of a company or other organisation, we process this data on the basis of our legitimate interest in evaluating your business inquiry, communicating with your organisation, and taking steps toward a possible business relationship (Article 6(1)(f) GDPR).
Technical and Security Data
Both forms use standard anti-spam safeguards, including a hidden field that genuine visitors never see and a minimum-time check, on the basis of our legitimate interest in protecting the website and its users from abuse (Article 6(1)(f) GDPR). This data is checked automatically at the moment of submission and is not separately stored.
What We Do Not Do
Form submissions are not stored in this website’s own database once processed: they exist only for the duration of handling your request and are then sent by email to our team. We do not sell your personal data. We do not currently use form submissions for marketing communications, and this website does not have a newsletter signup.
Who Receives This Data
- Our hosting provider hosts this website and processes form data only for the brief duration of handling your request, as described above.
- Microsoft 365 (Exchange Online) delivers the email notification that your form submission generates to our team’s mailbox, and stores that email as part of our normal business correspondence.
We do not currently share form data with any CRM system, project-management tool, or analytics or advertising service. If that changes, we will update this policy before doing so.
International Data Transfers
Our Microsoft 365 tenant is configured with its Current and Committed Geography for Exchange Online set to the European Union/EFTA. Microsoft has committed to storing and processing in-scope Microsoft 365 data within the EU Data Boundary. Microsoft’s own documentation describes limited circumstances in which data may nevertheless be remotely accessed, or otherwise processed, from outside the EU Data Boundary (for example for technical support or service-reliability purposes), and any such processing is subject to Microsoft’s contractual and data-protection safeguards. We do not represent that all processing occurs exclusively within the European Economic Area; the statement above reflects our tenant’s actual configuration as currently confirmed.
How Long We Keep Your Data
We retain Contact inquiries and SOWA 360 Applications for as long as necessary to handle your inquiry or application and any related commercial correspondence. If a commercial relationship or contract results from your inquiry, relevant correspondence may become part of our business records and be retained for the period required for contractual, accounting, tax, or other legal compliance purposes. We may also retain information for as long as reasonably necessary to establish, exercise, or defend legal claims. Data that is no longer needed for these purposes is deleted in accordance with our applicable retention practices.
Cookies and Analytics
This website does not currently use analytics or marketing cookies. If we introduce analytics or marketing tools in the future, we will do so through an appropriate consent mechanism, and will update this policy to describe what is used and how you can manage your preferences before any non-essential cookie is set.
Your Rights
You have the right to access your personal data, request its correction or deletion, restrict or object to its processing, request data portability where applicable, and withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before that withdrawal.
To exercise these rights, contact us at hello@sowamarketing.com.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, Poland, if you believe our processing of your personal data violates the GDPR.
Contact
Sowa Marketing Sp. z o.o., os. Piastowskie 36, 61-151 Poznań, Poland. Email: hello@sowamarketing.com
Careers Recruitment Privacy
When you apply for a role through this site, we collect: full name, email, availability, and either a CV (PDF) or a LinkedIn profile URL (at least one is required); phone, answers to role-specific evidence and practical-task questions, and additional context if you choose to provide it. We use this data to evaluate your application for the specific role you applied to.
Where the role is offered as an umowa zlecenia or B2B civil-law cooperation, the legal basis is Article 6(1)(b) GDPR for steps taken at your request prior to that contract, and Article 6(1)(f) GDPR (our legitimate interest) for anything beyond that narrow scope. Where the role is offered as an employment contract (umowa o pracę), the legal basis is Article 6(1)(c) GDPR together with Article 22¹ of the Polish Labour Code, and any additional data is processed only on the basis of your separate consent or our legitimate interest as described above.
If you separately tick the optional future-recruitment/talent-pool consent checkbox, we additionally keep your application on file for up to 6 months from the date of that consent, to consider you for other SOWA Marketing opportunities, on the basis of your consent (Article 6(1)(a) GDPR). This is entirely separate from, and not required for, your current application. You can withdraw this consent at any time without affecting your current application, by emailing hello@sowamarketing.com.
A CV attachment is sent directly to the recruitment mailbox and is not stored in the public WordPress Media Library or any long-term site database.
How Long We Keep Your Careers Data
For the recruitment you actually applied to: for the duration of that recruitment process, plus a short post-decision window to handle follow-up questions, then deleted. The CV temporary file itself is deleted immediately after the application email is sent or fails to send; it is never stored long-term. For the optional future-recruitment/talent-pool consent only: up to 6 months from the date you gave that consent, after which it is deleted unless you are separately re-contacted and give fresh consent.
Who Receives Your Careers Data
Same as the rest of this policy: the hosting provider (in-request processing only) and Microsoft 365/Exchange Online (mail delivery and mailbox storage of the application email and any CV attachment). See “Who Receives This Data” and “International Data Transfers” above. The Careers mailbox uses the identical transport already described there; no separate ATS, CRM or recruitment platform receives this data.
Your Rights for Careers Applications
The standard rights listed in “Your Rights” above apply to your Careers application data too, plus one Careers-specific right: you may withdraw the optional future-recruitment/talent-pool consent at any time, for any reason, without needing to give a reason and without any effect on a current, separate application.