Privacy Policy

Last updated: 16 July 2026

This Privacy Policy explains how we collect, use, and protect your personal data when you visit performo.org (the "Site") or contact us through it. We are committed to protecting your privacy and handling your data in an open and transparent manner, in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Polish data protection law.

1. Who we are (Data Controller)

We are the "data controller" responsible for your personal data collected through this Site.

2. What data we collect

We only collect the personal data you choose to give us. When you submit our contact / audit request form, we collect:

• Your name
• Your restaurant / business name
• Your email address
• The message you send us (details about what you'd like to improve)

We do not knowingly collect any sensitive categories of personal data through this Site.

3. Why we use your data and the legal basis

We process your personal data for the following purposes:

• To respond to your enquiry and prepare the free audit or information you requested. Legal basis: taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR), and our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).
• To communicate with you about our services if you have contacted us. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

We will not use your contact details to send you unrelated marketing without your consent.

4. How long we keep your data

We keep your enquiry data only as long as necessary to respond to you and, where relevant, to manage a potential or ongoing business relationship. If we do not enter into a working relationship, we will delete or anonymise your enquiry data within a reasonable period, typically within 24 months, unless we are required to keep it longer by law.

5. Who has access to your data (processors)

We use trusted third-party service providers to run our Site and handle form submissions. These act as our data processors and only process your data on our instructions:

• Netlify, Inc. — hosts our website and processes contact-form submissions. Form data is transmitted to and stored by Netlify so that we receive your message by email. See Netlify's privacy policy for details on their processing and safeguards.
• Google (Google Workspace) — we receive and store enquiry emails in our business inbox at contact@performo.org.
• Google (Google Analytics 4) — if you accept analytics cookies, Google Analytics collects usage data about your visit so we can understand how the Site is used. See section 6 below.

Some of these providers may process data outside the European Economic Area (EEA). Where that happens, appropriate safeguards (such as Standard Contractual Clauses) are in place to protect your data.

6. Cookies and similar technologies

Our Site uses minimal local storage strictly to remember your language preference (English, Polish, or Portuguese) so the Site works as you expect. This is a functional technology and does not track you or your behaviour across other websites.

Analytics cookies (consent required)

We use Google Analytics 4 to understand how visitors find and use our Site — for example, which pages are viewed and how people navigate between them. This helps us improve the Site.

Google Analytics only loads after you click "Accept" on our cookie banner. If you decline, or simply do not choose, no analytics scripts are loaded and no analytics cookies are set. Legal basis: your consent (Art. 6(1)(a) GDPR).

We have enabled IP anonymisation, so your IP address is truncated before being stored. Google Analytics may still process data outside the EEA; Google applies Standard Contractual Clauses as a safeguard.

You can withdraw your consent at any time by clearing this Site's data in your browser settings, which will make the cookie banner appear again on your next visit. You can also install Google's browser opt-out add-on to block Google Analytics across all websites.

We do not use advertising or retargeting cookies on this Site.

7. Your rights under GDPR

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict our processing of your data
• Request a copy of your data in a portable format (data portability)
• Withdraw any consent you have given, at any time

To exercise any of these rights, email us at contact@performo.org. We will respond within the timeframes required by law (generally within one month).

8. Right to lodge a complaint

If you believe we have handled your personal data unlawfully, you have the right to lodge a complaint with the Polish supervisory authority: the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warszawa, Poland — uodo.gov.pl.

9. Data security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

10. Changes to this policy

We may update this Privacy Policy from time to time. The "last updated" date at the top reflects the most recent version. We encourage you to review this page periodically.

11. Contact us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at contact@performo.org.