Privacy Policy

Last updated: 9 October 2026

In this Privacy Policy we explain what we do with the data we process about you through the makimo.com website and the services and forms made available on it, including the Makimo Health Check Service and the Newsletter.

The controller

The controller of your data is Makimo Sp. z o.o. with its registered office in Łódź at Łąkowa 7A bud. D lok. 215, 90-562, Poland, KRS: 0000496337, REGON: 101727238, NIP: 7252073396 (also referred to as “we”, “Makimo” or “the Controller”).

You can contact us on personal data protection matters:

by e-mail at hello@makimo.pl, or
by post at ul. Łąkowa 7A bud. D lok. 215, 90-562 Łódź.

Security

We are committed to the security of personal data. We take appropriate security measures to limit misuse of, and unauthorised access to, personal data. This ensures that only those persons who need to do so have access to your data, that such access is protected, and that our security measures are reviewed regularly.

Purpose, data, legal basis and retention period

Below we set out the purposes for which we process your data, the legal basis on which we do so, and how long we keep it.

1. Contact form

The contact form is the primary means of communicating with us and sending us enquiries through the website. In order to reply to your enquiry we collect only the following data: your first name and surname, e-mail address, an optional telephone number and the individual text message that you choose to provide.

Legal basis: our legitimate interest in conducting correspondence and responding to enquiries (Article 6(1)(f) GDPR) or - depending on the context of your enquiry - taking steps at your request prior to entering into a contract with us (Article 6(1)(b) GDPR).
Retention period: for as long as the correspondence and the enquiry in the matter initiated are ongoing, and for a period of 6 months from your last contact with us, unless another legal basis for processing personal data applies (for example, you consent to the processing of your data in the course of such correspondence - in which case your data will be processed until you withdraw that consent).
Providing your data: providing your first name, surname and e-mail address is necessary for us to reply; providing a telephone number is voluntary and does not affect how your enquiry is handled.

2. The Makimo Health Check Service (the Form and the Diagnostic Report)

In Makimo Health Check you complete the Form and are then given access to the Diagnostic Report by means of an e-mail we send you.

What data we collect in the Form: your first name, surname, business e-mail address, industry and position - these fields are mandatory. Your telephone number is provided voluntarily; we need it only if you request a Results Consultation. We also record your answers to the questions in the Form.

We process your personal data for the following purposes:

a) Providing the Service - generating and making available the Diagnostic Report

On the basis of your answers we generate the Diagnostic Report and send an individual link to it (the Access Link) to the e-mail address you have indicated.

Legal basis: performance of a contract for the provision of services by electronic means (Article 6(1)(b) GDPR).
Retention period: we keep the personal data you provide in the Form, the Access Link, and the association between that data and the answers given and the Diagnostic Report, for 1 year from the date on which the Diagnostic Report is generated.
Providing your data: your first name, surname, business e-mail address, industry and position are mandatory - without them we cannot generate the Diagnostic Report or make it available to you. Your telephone number is provided voluntarily and this has no effect on your access to the Diagnostic Report.

b) Consultation on the results of the Diagnostic Report (optional)

If you tick the optional box in the Form to request a free Results Consultation and give us your telephone number, we will call you to discuss the outcome of the Diagnostic Report.

Legal basis: performance of a contract (Article 6(1)(b) GDPR).
Retention period: until the Results Consultation is concluded, and no longer than 1 year from the date on which the Diagnostic Report is made available. We then delete your number.
Providing your data: requesting a Results Consultation is voluntary - you can complete the Form and receive the Diagnostic Report without it.

c) Newsletter and direct marketing - commercial information by e-mail (on the basis of your consent)

If you give separate, voluntary consent by ticking the optional box in the Form, we will sign you up to the Makimo Newsletter and send you information about Makimo Health Check and related Makimo services, including commercial information, to the e-mail address you have provided.

Legal basis: your consent (Article 6(1)(a) GDPR) in conjunction with Article 398 of the Act of 12 July 2024 - Electronic Communications Law.
Retention period: until you withdraw your consent. Withdrawing your consent means that we stop processing your data for this purpose.
Providing your data: your consent is voluntary and is not a condition of access to the Diagnostic Report. You may withdraw it at any time - by using the unsubscribe link in a message we have sent you or by writing to us at hello@makimo.pl.

d) Ensuring proper use of the Service and preventing abuse

In order to protect the Website against abuse and automatically generated submissions, we process technical information about the submission and data generated by the verification mechanism (Google reCAPTCHA).

Legal basis: our legitimate interest in ensuring the security and proper functioning of the Website and in preventing abuse (Article 6(1)(f) GDPR).

e) Handling complaints and establishing, pursuing or defending against claims

Legal basis: our legitimate interest in establishing, pursuing and defending against claims (Article 6(1)(f) GDPR) and, as regards obligations imposed by law, Article 6(1)(c) GDPR.
Retention period: 3 years from the date on which the claim becomes due, provided that the limitation period ends on the last day of the calendar year (Article 118 of the Polish Civil Code - this is the limitation period for claims connected with the conduct of business activity).

3. Recruitment (the “Careers” tab)

If you apply to us for a position or for cooperation - through the “Careers” tab, by e-mail, or through a recruitment portal acting as an intermediary - we process your data for the purposes set out below.

a) Recruitment for employment under a contract of employment

In order to carry out the recruitment process in connection with your submission of application documents, within the scope of the data specified in labour law, and to take the steps necessary to conclude a contract with the selected candidate - the legal basis is Article 22¹ of the Polish Labour Code and Article 6(1)(b) GDPR. In the case of personal data that is not required by law and goes beyond the scope specified in Article 22¹ of the Polish Labour Code, the legal basis for processing is your consent (Article 6(1)(a) GDPR). Retention period: until the recruitment process is completed, and in any event no longer than 3 months from the date on which we receive your application.
In order to enable you to take part in future recruitment processes - the legal basis is your consent (Article 6(1)(a) GDPR). Retention period: until you withdraw your consent, and in any event no longer than until the data ceases to be of use to the Controller.
In order to establish, pursue or defend against claims connected with the recruitment, which constitutes our legitimate interest - the legal basis is Article 6(1)(f) GDPR. Retention period: for a period of 3 years from the date on which the recruitment is completed.

b) Recruitment for cooperation on a basis other than a contract of employment (e.g. B2B, a contract of mandate)

In order to carry out the recruitment and assess the possibility of cooperating with you within the scope indicated in the job advertisement - the legal basis is Article 6(1)(b) GDPR. Retention period: until the assessment of the possibility of cooperating with you is completed.
In order to enable you to take part in future opportunities for cooperation - the legal basis is your consent (Article 6(1)(a) GDPR). Retention period: until you withdraw your consent, and in any event no longer than until the data ceases to be of use to the Controller.
In order to establish, pursue or defend against claims connected with the recruitment - the legal basis is Article 6(1)(f) GDPR. Retention period: for a period of 3 years from the date on which we inform you of the outcome of the negotiations conducted regarding cooperation.

What data we process: identification data, contact data, and whatever you include in your CV or other application documents. We do not process special categories of data within the meaning of Article 9 GDPR in recruitment - please do not send us such data.

Where we obtain your data: directly from you. If you applied through a recruitment portal acting as an intermediary, we received your data from that portal - from the form you completed there.

What you must provide: the data that we have identified in the job advertisement as necessary - without it you cannot take part in the recruitment process or be invited to negotiations on entering into cooperation. Anything that we do not require in the advertisement is provided voluntarily and has no effect on the course of the recruitment.

Withdrawing consent: if we process your data on the basis of consent, you may withdraw it at any time. This does not affect the lawfulness of processing carried out beforehand.

4. Compiling and analysing statistics relating to the Website

We collect your IP address and information about how you use the website - so that we know what works on it and what is worth improving.

Legal basis: your consent given in the cookie management panel (Article 6(1)(a) GDPR) - the data is collected and processed solely on the basis of explicit consent to the use of statistics cookies.
Retention period: your data will be stored for the periods indicated in the “Cookies” section.
Providing your data: giving consent is voluntary, and withholding it does not limit your ability to use the Website.

5. Marketing using cookies and similar technologies

If you consent to marketing cookies, we use them to run advertising campaigns and measure their effectiveness, and to present Makimo’s advertisements to you on the websites of our advertising partners.

Legal basis: your consent given in the cookie management panel (Article 6(1)(a) GDPR).
Retention period: for the periods indicated in the “Cookies” section, and no longer than until you withdraw your consent.
Providing your data: giving consent is voluntary, and withholding it does not limit your ability to use the Website.

6. Newsletter

The personal data of Newsletter subscribers are processed in order to:

provide the Newsletter service - the legal basis is the necessity of processing for the performance of the contract (Article 6(1)(b) GDPR),
establish, exercise or defend potential claims – the legal basis is our legitimate interest (Article 6(1)(f) GDPR).

The personal data will be processed for the duration of the service provision, until you unsubscribe from the Newsletter or raise an objection, and for the period necessary to pursue or defend against claims, no longer than the applicable limitation period.

Source of the data and categories of data processed

In most cases we obtain your data directly from you - you provide it to us in the contact form, in the Makimo Health Check Form, in the Newsletter subscription form, or in a job application.

We process primarily: identification data (first name, surname), contact data (e-mail address, telephone number), data relating to the function you hold and the organisation you represent (position, industry, name of the entity), the content of correspondence and the answers given in the Form, and technical data (IP address, information about your device and browser, information about your activity on the Website).

Profiling and automated decision-making

We do not take decisions in relation to you by automated means where those decisions would produce legal effects concerning you or similarly significantly affect you (Article 22 GDPR).

The Diagnostic Report is generated automatically from your answers, but it constitutes a preliminary, indicative assessment of an organisation or a team - it is not a binding opinion or decision and it produces no legal effects in relation to you.

If you consent to statistics or marketing cookies, profiling for analytical and marketing purposes (for example, tailoring the content of advertisements) may take place in connection with the operation of the analytical and advertising tools. Such profiling produces no legal effects in relation to you and does not significantly affect you, and you may withdraw your consent and object at any time.

Recipients of your data. Third-party websites and external partners

Your data may be disclosed to the following categories of recipients:

providers of cloud infrastructure and hosting;
providers of e-mail delivery tools;
providers of analytical and advertising tools;
providers of other IT services and systems and of technical support;
law firms, advisers and accounting firms;
persons whom we have authorised and who act on our instructions;
entities entitled to receive the data under provisions of law.

We will disclose the names of specific providers at your request - write to us at hello@makimo.pl.

This Privacy Policy does not apply to third-party websites linked from our website. We recommend that you read the privacy statements of those websites before using them.

Transfers of data outside the European Economic Area

We aim to process personal data within the European Economic Area (EEA). We keep the data processed as part of the Makimo Health Check Service in infrastructure located in the EEA, and we send e-mail messages through a provider established in the EEA.

A transfer outside the EEA - in particular to the United States - may nevertheless occur as a result of the technologies used or the technical parameters of the analytical, advertising and security tools described in this Policy. Your personal data may be transferred to a third country outside the EEA or to an international organisation only in the cases and on the conditions provided for by the applicable legislation. In each case we exercise due care to ensure that the transfer is made to countries and entities that ensure an adequate level of protection of personal data, which may follow:

from an implementing decision of the European Commission finding that the country to which the transfer may be made ensures an adequate level of protection of personal data;
from the certification of the data recipient under the Data Privacy Framework (applicable to transfers of data to the United States);
from the use of standard contractual clauses adopted by the European Commission, subject to an assessment that the country to which the transfer is to be made guarantees appropriate safeguards and that enforceable data subject rights and effective legal remedies are available in that country.

You can obtain a copy of the safeguards applied by contacting us at hello@makimo.pl.

Cookies

Our website uses cookies and other related technologies (for convenience, all these technologies are referred to as “cookies”). Cookies are also placed by third parties with whom we cooperate. Below we inform you about the use of cookies on our website. Those third parties collect data directly from your browser, and their processing of that data is governed by their separate privacy policies.

What are cookies?

A cookie is a small, simple file that is sent together with the pages of this website and stored by your browser on the hard drive of your computer or another device. The information stored in it may be returned to our servers, or to the servers of the relevant third parties, on a subsequent visit.

Types of cookies

We divide cookies into three categories: strictly necessary (technical and functional), statistics and marketing/tracking. We place strictly necessary cookies without your consent, because the website cannot function properly without them. All other cookies - statistics and marketing - are placed only after we have obtained your prior, voluntary consent, given in the cookie management panel. You may withdraw your consent at any time.

The lists below cover the cookies that may be placed on your device. The names of the files and their retention periods are determined by their providers and may change - the periods given are maximum periods.

Strictly necessary (technical or functional) cookies

Without these cookies the website does not work properly. They store the choices you make about consent and protect us against automated submissions. We may place these cookies without your consent.

Cookie	Provider	Purpose	Retention period
gdpr, gdpr-statistics, gdpr-marketing	Makimo (makimo.com)	storing the choices you make in the cookie panel and demonstrating the consent given	12 months
__cf_bm	Cloudflare	protection against bots and abuse (including in respect of embedded content)	30 minutes

Retention period: strictly necessary cookies are stored for a maximum of 12 months from your visit, and the anti-abuse cookie for 30 minutes.

Statistics cookies

We use statistics cookies in order to optimise the website experience for our users. They give us information about the use of our website - the number of visits, traffic sources, and how users interact with individual subpages. We ask for your consent to place statistics cookies.

We use Google Analytics (through Google Tag Manager) and Plausible Analytics - the latter places no cookies and collects no identifying data.

Cookie	Provider	Purpose	Retention period
_ga	Google Analytics	distinguishing users	13 months
_ga_CJVJF5BK42	Google Analytics	maintaining the measurement session state	13 months
nQ_cookieId	Makimo (makimo.com)	identifying the browser for traffic measurement purposes	12 months
nQ_userVisitId	Makimo (makimo.com)	identifying an individual visit	30 minutes

Marketing/tracking cookies

Marketing/tracking cookies are cookies, or another form of local storage, used to create user profiles in order to display advertisements or to track the user on this website or across several websites for similar marketing purposes. We place them only after obtaining your consent.

We use Google Ads / Google Marketing Platform, the LinkedIn Insight Tag, the Meta Pixel and YouTube (embedded videos).

Cookie	Provider	Purpose	Retention period
_gcl_au	Google Ads	measuring advertising effectiveness and attributing conversions	90 days
IDE	Google (DoubleClick)	remarketing, personalisation and measurement of advertising effectiveness	up to 13 months
__mggpc__	Google (DoubleClick)	limiting the number of times advertisements are displayed	up to 10 months
ar_debug	Google (DoubleClick)	conversion measurement diagnostics	up to 30 days
_fbp	Meta	identifying the browser for the purposes of Meta advertising	90 days
bcookie	LinkedIn	identifying the browser for the purposes of LinkedIn advertising	12 months
li_gc	LinkedIn	storing consent relating to LinkedIn cookies	180 days
lidc	LinkedIn	routing traffic to the correct server	1 day
VISITOR_INFO1_LIVE, VISITOR_PRIVACY_METADATA	Google / YouTube	storing playback preferences and privacy settings	180 days
YSC	Google / YouTube	measuring video views within a session	until you close your browser
PREF, LOGININFO, __Secure-YEC, __Secure-YENID, __Secure-YNID, \_Secure-ROLLOUT_TOKEN	Google / YouTube	storing playback preferences, advertising measurement and personalisation	up to 13 months
NID, DV, AEC, SEARCHSAMESITE, __Secure-ENID, __Secure-BUCKET, \_Secure-STRP	Google	storing preferences, personalising content and advertising, and protecting against abuse in Google services	from 10 minutes to 13 months
SID, HSID, SAPISID, APISID, SSID, SIDCC, __Secure-1PSID, __Secure-3PSID, __Secure-1PAPISID, __Secure-3PAPISID, __Secure-1PSIDCC, __Secure-3PSIDCC, __Secure-1PSIDTS, __Secure-3PSIDTS	Google	linking activity to a Google account, and advertising personalisation and measurement in Google and YouTube services	up to 13 months

Consent and managing your consent

When you visit our website for the first time, we will show you a pop-up with an explanation about cookies. Until you give your consent, we place no cookies on your device other than strictly necessary ones.

In the pop-up you can:

choose “Accept all” - you then consent to statistics and marketing cookies;
choose “Reject all” - we then use strictly necessary cookies only;
go to “Cookie settings” and decide on each category separately (statistics, marketing). The strictly necessary category (functional cookies) is always active, because the website cannot function properly without it.

Consent is voluntary, and refusing it does not limit your ability to use the Website. You may withdraw or change your consent at any time - to the same extent as you gave it - using the cookie management panel available on the website (the “Cookie settings” / “Manage cookie settings” link below and in the footer). Withdrawing your consent does not affect the lawfulness of processing carried out before the withdrawal.

Enabling, disabling and deleting cookies

You can use your web browser to delete cookies automatically or manually. You can also specify that certain cookies may not be placed. Another option is to change your browser settings so that you receive a message each time a cookie is placed. For more information about these options, please refer to the instructions in the Help section of your browser or visit https://www.cookiesandyou.com/.

Please note that our website may not function properly if all cookies are disabled. If you delete the cookies in your browser, they will be placed again, following your consent, when you next visit our pages.

Amendments to this Privacy Policy

We reserve the right to make amendments to this Privacy Policy. We recommend that you review this Privacy Policy regularly so that you are aware of any changes.

Accessing and modifying your data. Your rights

If you have any questions, or if you would like to know what personal data we hold about you, please contact us. You can contact us using the information given in the “The controller” and “Contact” sections. You have the following rights:

You have the right to know why your personal data is needed, what will happen to it, and how long it will be retained.
Right of access: you have the right to access the personal data of yours that is known to us, and to obtain a copy of it.
Right to rectification: you have the right to complete and correct your personal data whenever you wish.
Right to erasure (the “right to be forgotten”): you have the right to request the erasure of your personal data in the cases provided for in the GDPR.
Right to restriction of processing: you have the right to request that we restrict the processing of your data - for example, where you contest its accuracy, or where you have objected and are awaiting the outcome of that objection.
Right to withdraw consent: if you consent to the processing of your data, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before it was withdrawn.
Right to data portability: you have the right to receive from us the data that you have provided to us, in a structured, commonly used, machine-readable format, and to transmit it to another controller. You may also request that we transmit it directly to a controller indicated by you - where this is technically feasible. This right applies only to data that we process on the basis of your consent or of a contract and by automated means.
Right to object: you may object to the processing of your data based on our legitimate interest - to do so, please indicate the particular situation that justifies ceasing the processing to which you object. We will comply, unless there are legitimate grounds for continuing the processing. Where data is processed for direct marketing purposes, you may object at any time and without giving reasons - we will then cease such processing.
Right to lodge a complaint: if you consider that we are processing your data unlawfully, you may lodge a complaint with the supervisory authority - the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).

To exercise your rights, write to us at hello@makimo.pl. Please always make it clear who you are, so that we can be certain that we do not modify or delete the data of the wrong person. We respond to your request without undue delay, and in any event within one month of receiving it.

Governing law

Polish law applies to all claims relating to this policy.

Contact

Please do not hesitate to contact us at hello@makimo.pl if you have any questions about this Privacy Policy.