Privacy Policy

    Last updated: July 2, 2026

    Table of Contents

    1. Introduction
    2. Information We Collect
    3. Legal Basis for Processing
    4. Data Retention
    5. Your Rights Under GDPR
    6. Data Security Measures
    7. International Data Transfers
    8. Use of Third-Party Services
    9. Children's Privacy
    10. Changes to This Privacy Policy
    11. Contact Information
    12. Governing Law and Jurisdiction

    1. Introduction

    This Privacy Policy explains how Tatracloud sp. z o.o. ("we," "our," "us," or "the Company"), operating under the brand names TatraSpace and WisentWire, collects, uses, and protects your personal information when you visit our websites, including tatraspace.com and wisent-wire.com. We are committed to protecting your privacy and ensuring the security of your personal data in accordance with applicable data protection regulations.

    Tatracloud sp. z o.o. is registered in Poland (European Union) with its registered office at Marsz. Józefa Piłsudskiego 74 / 320, 50-020 Wrocław. Our Company Registration Number (KRS) is 0001031439, and our VAT Identification Number (NIP) is 8992958011.

    This Privacy Policy has been prepared in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679, the Polish Act on Personal Data Protection, and other applicable data protection laws. It outlines the types of information we collect, how we use it, the legal basis for processing your data, and your rights regarding your personal information.

    2. Information We Collect

    Our website is designed to be minimally invasive of your privacy. We collect only essential data necessary for providing our services and ensuring website security.

    2.1 Technical Information Through Cloudflare

    Our website uses Cloudflare for security and performance optimization. Cloudflare sets strictly necessary cookies to detect bots, manage traffic, and protect against malicious activity.

    2.1.1. Cloudflare Cookies

    Cloudflare may set strictly-necessary security cookies only when it needs to verify or protect a request — not on ordinary visits:

    • cf_clearance: Set only if you are shown and pass a security challenge; it records that your browser passed the check so you are not repeatedly challenged.
    • __cf_bm: A short-lived cookie (about 30 minutes) used to distinguish humans from automated bots, where Cloudflare Bot Management is enabled.

    These cookies are classified as "strictly necessary" under GDPR and are exempt from explicit consent requirements. They do not track users for marketing purposes or collect personal data beyond what is needed for security.

    2.1.2. Cloudflare Analytics Data

    Through Cloudflare's free version, we receive aggregated information about:

    • IP addresses
    • Number and frequency of requests
    • Country and region of origin
    • Browser type and version
    • Operating system
    • Device type
    • Network information
    • Time and duration of visits
    • Pages visited
    • Referring websites
    • Other technical information related to website traffic and security

    This information is processed in an aggregated manner and is not used to individually identify you unless necessary for security incident investigation or as required by law.

    2.2 Waitlist & Beta Program Sign-ups

    When you voluntarily join our waitlist/newsletter or apply to our Beta Program through a form on our websites, we collect and process the following information:

    • Your email address (required)
    • For Beta Program applications, the business-qualification details you choose to provide (for example, team size, company, number of devices, and your hardware-testing / remote-access needs)
    • Submission timestamp
    • Technical metadata, such as the source page or form variant, campaign parameters (UTM source/medium/campaign), the referring website, and a pseudonymous analytics identifier — used to understand which campaigns lead to sign-ups

    We process this information solely for the purpose of:

    • Adding you to our waitlist
    • Notifying you about product availability, launch updates, or early-access opportunities
    • Your email address will not be used for unrelated marketing unless you provide separate, explicit consent.

    We store waitlist data securely on our infrastructure and retain it only until our product becomes publicly available or until you request deletion or withdraw your consent. You may withdraw your consent at any time by contacting us using the details provided in this Privacy Policy.

    We do not share waitlist email addresses with third parties except where required to operate our service (e.g., hosting, infrastructure providers acting as data processors under appropriate data-processing agreements).

    2.3 Google Calendar Appointment Scheduling

    Our website includes a button that redirects you to Google Calendar's "Appointment schedule" feature, where you can book appointments with us.

    • Your name and email address
    • Preferred appointment time and additional info
    • Time zone and device-related metadata

    All data shared through Google is processed in accordance with their terms and privacy policy.

    2.3.1. Information Collected Through Google Calendar

    When you schedule an appointment through Google Calendar, the following personal data may be collected:

    • Your full name
    • Your email address
    • Your preferred appointment time and date
    • Duration of the scheduled meeting
    • Any additional information you provide in the appointment booking form
    • Location information (if location-based services are enabled)
    • Your time zone

    2.4 Google Analytics (GA4)

    With your consent, our websites use Google Analytics 4, a web-analytics service provided by Google Ireland Limited / Google LLC ("Google"). It helps us understand how visitors use our sites (pages viewed, interactions, traffic source and campaign) so we can improve them. It sets first-party cookies (such as _ga and _ga_<id>) and generates a pseudonymous client identifier.

    Analytics cookies are set only after you accept them via our cookie banner. Until you consent, Google Analytics runs in a cookieless "consent mode" and stores no identifiers on your device. You can accept, reject, or change your choice at any time using the "Cookie settings" link in the website footer. We do not send personally identifiable information (such as your email or name) to Google Analytics.

    2.5 Contentsquare (Session Analytics — tatraspace.com)

    On tatraspace.com, and only with your consent, we use Contentsquare, a behavioural- and experience-analytics service provided by Contentsquare SA (France). It records how you interact with our pages during your visit — such as clicks, mouse movement, scrolling and navigation — to help us understand and improve the user experience. By default, Contentsquare masks text entered into form fields, so the content you type is not recorded. It sets cookies such as _cs_id, _cs_s and _cs_c.

    Contentsquare is loaded only after you accept analytics cookies via our cookie banner; if you reject or take no action, it is not loaded and sets no cookies. You can change or withdraw your choice at any time using the "Cookie settings" link in the footer.

    2.6 Cookies We Use

    Cookie / StorageProviderPurposeDurationConsent
    cf_clearance, __cf_bm (only when challenged / bot management)CloudflareSecurity / bot managementSession – 1 yearStrictly necessary (no consent required)
    _ga, _ga_<id>Google AnalyticsAnalytics / measurementUp to 2 yearsConsent required
    _cs_id, _cs_s, _cs_cContentsquare (tatraspace.com)Session / experience analyticsSession – 13 monthsConsent required
    ww_consent (local storage)TatraSpace / WisentWireRemembers your cookie choiceUntil you clear itStrictly necessary

    4. Data Retention

    We retain data only as long as necessary for the purposes described:

    • Technical data: Retained temporarily by Cloudflare and anonymized for analysis.
    • Email addresses: Retained until campaign ends or you unsubscribe.
    • Appointment data: Retained until your meeting is complete or per legal requirements.
    • Analytics data: Google Analytics data is retained for up to 14 months and Contentsquare data for up to 13 months; analytics cookies persist for up to 2 years unless you clear them or withdraw consent.

    5. Your Rights Under GDPR

    You have the right to:

    • Access, correct, or delete your personal data
    • Restrict or object to data processing
    • Withdraw consent at any time
    • Receive your data in a portable format
    • Lodge a complaint with a data protection authority — in Poland, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warszawa

    To exercise these rights, please contact us using the information below. We do not carry out automated decision-making or profiling that produces legal effects concerning you. We have not appointed a Data Protection Officer, as we are not legally required to do so; privacy enquiries can be sent to the contact address below.

    6. Data Security Measures

    We apply both technical and organizational safeguards to protect your data. These include:

    • HTTPS encryption
    • Firewall and DDoS protection via Cloudflare
    • Access controls and staff confidentiality obligations
    • Regular system updates and security assessments

    7. International Data Transfers

    Your data may be processed outside the EEA by trusted third-party services. Safeguards include:

    • EU-US Data Privacy Framework participation
    • Standard Contractual Clauses (SCCs)

    In particular, Google Analytics is operated by Google, which may process data in the United States under the EU-US Data Privacy Framework and Standard Contractual Clauses. Contentsquare is an EU-based (France) provider.

    8. Use of Third-Party Services

    • Cloudflare: Security and performance optimization
    • Google Analytics (Google): Website analytics and measurement (consent-based)
    • Contentsquare: Session and experience analytics on tatraspace.com (consent-based)
    • Google Calendar: Meeting scheduling platform

    9. Children's Privacy

    Our services are not directed to children under 16. We do not knowingly collect personal data from minors. If you believe a child has submitted data to us, please contact us for prompt deletion.

    10. Changes to This Privacy Policy

    We may update this policy periodically. Changes will be posted on this page with the updated date. Material updates may be announced via prominent notice.

    11. Contact Information

    If you have questions about this policy or your data, please contact:

    Tatracloud sp. z o.o.

    Marsz. Józefa Piłsudskiego 74 / 320, 50-020 Wrocław, Poland

    Email: [email protected]

    12. Governing Law and Jurisdiction

    This policy is governed by Polish law. Any legal matters will be resolved under the jurisdiction of Polish courts in Wrocław.