Privacy Policy
INVO - warfare.info.technology Version: 1.3 | Effective date: 19 August 2026
§ 1. General Provisions
- This Privacy Policy sets out the rules for the processing and protection of personal data of users of the website available at https://warfare.info.technology and its subdomains and subpages (hereinafter: the "Website").
- The controller of personal data is INVO VENTURES Sp. z o.o., with its registered office at ul. Prosta 20, 00-850 Warsaw, Poland, registered in the Register of Entrepreneurs of the National Court Register under KRS number 0001006144, NIP (Tax Identification Number): 5273031367 (hereinafter: the "Controller" or "INVO").
- In matters relating to the processing of personal data, the Controller may be contacted by e-mail at: j.panek@invo.ventures.
- The Controller processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), the Polish Act on the Protection of Personal Data, and the Polish Telecommunications Act (with respect to cookies).
§ 2. Scope and Sources of Data Collected
The Controller collects personal data exclusively in the following cases:
2.1. Demo Booking Form (Book a demo)
Through the form available on the Website, the Controller collects the following data:
- first name and last name,
- e-mail address,
- company / organisation name,
- job title or function,
- content of the message or enquiry (optional).
The provision of first name, last name, e-mail address, company name, and job title is necessary for scheduling a demonstration of the INVO product. The content of the message is optional.
2.2. Resource Download Form (e-books / Resources)
For the purpose of providing free materials (e-books), the Controller collects the following data through the form:
- first name and last name,
- e-mail address,
- telephone number.
The provision of the above data is necessary for the delivery of the selected material. Commercial contact takes place only upon the expression of a separate, voluntary consent indicated in the form.
2.3. Google Analytics 4
The Website uses the Google Analytics 4 tool provided by Google Ireland Ltd. (hereinafter: "Google"). The tool collects statistical data concerning the use of the Website, including:
- type of device, operating system, and browser,
- duration and length of visit,
- subpages visited,
- source of entry to the Website,
- approximate location (at the city / region level).
Google Analytics 4 does not store full IP addresses - the IP address is used solely on a temporary basis to determine approximate location and is not retained. The tool is activated only upon the expression of the user's consent in the cookie banner (Google Consent Mode v2 mechanism - consent is denied by default and the script is not loaded). Google processes data as a data processor. Further details: https://policies.google.com/privacy.
2.4. HubSpot
The Website uses the HubSpot tool provided by HubSpot, Inc. (data processed in a data centre within the European Union - EU1 region). HubSpot is used for traffic analytics, user contact management (CRM), and the handling of enquiries submitted through forms. The tool sets cookies (including __hstc, __hssc, hubspotutk) and is activated only upon the expression of the user's consent in the cookie banner. HubSpot processes data as a data processor. Further details: https://legal.hubspot.com/privacy-policy.
2.5. Snitcher
The Website uses the Snitcher tool (the Radar tracking script) provided by Snitcher B.V. (data processed on servers within the European Union - AWS Frankfurt). Snitcher processes the visitor's IP address, the technical characteristics of the browser and device, and browsing behaviour (pages visited, source of entry, time spent on the Website, clicked links and buttons, interactions with forms) in order to identify the company from which the visit originates. The data is aggregated at company level and is not used to identify individual users. The tool stores identifiers in the browser (the snitcher_device_id cookie and the corresponding snitcher_* entries in local storage) and is loaded only upon the expression of the user's consent (marketing category) in the cookie banner. Further details: https://www.snitcher.com/privacy-policy/.
§ 3. Purposes and Legal Bases for Data Processing
3.1. Handling of the Demo Form
Purpose: scheduling and conducting a demonstration of the INVO system and establishing commercial contact.
Legal basis: Article 6(1)(b) GDPR - taking steps at the request of the data subject prior to entering into a contract; and Article 6(1)(f) GDPR - the legitimate interests of the Controller consisting in carrying out commercial activities.
3.2. Handling of the Resource Download Form (e-books)
Purpose: delivery of the requested material and - upon the expression of separate consent - presentation of the INVO commercial offer.
Legal basis:
- Article 6(1)(b) GDPR - fulfilling the request of the data subject (delivery of material);
- Article 6(1)(f) GDPR - the legitimate interests of the Controller consisting in direct marketing of its own products (solely with respect to persons who have expressed consent to commercial contact in the form).
Consent to commercial contact is voluntary and may be withdrawn at any time by contacting j.panek@invo.ventures.
3.3. Analytics and Tracking Tools (Google Analytics 4, HubSpot, Snitcher)
Purpose: analysis of Website traffic, optimisation of Website content and functionality, and measurement of the effectiveness of marketing activities.
Legal basis: Article 6(1)(a) GDPR - consent of the data subject expressed in the cookie banner; and Article 173 of the Polish Telecommunications Act (with respect to storing and accessing information on terminal equipment). In the absence of consent, these tools are not activated.
3.4. Direct Marketing
Where the user has expressed separate consent, data may be processed for the purpose of sending commercial information about INVO products and services.
Legal basis: Article 6(1)(a) GDPR - consent of the data subject.
§ 4. Data Retention Periods
- data from the demo form - until the conclusion of the sales process and, thereafter, for no longer than 3 years; in the event of a contract being concluded - until the expiry of the limitation period for claims arising therefrom;
- data from the resource download form - until withdrawal of consent or the lodging of an objection, for no longer than 3 years from the date of last contact;
- data processed on the basis of consent - until withdrawal of consent;
- analytics data (Google Analytics 4, HubSpot, Snitcher) - in accordance with the retention policy of the respective provider and the validity period of cookies (see § 7).
§ 5. Recipients of Data
Personal data may be transferred to the following categories of recipients acting on the basis of data processing agreements:
| Recipient | Role | Location / Transfer outside the EEA |
|---|---|---|
| Google Ireland Ltd. | analytics (Google Analytics 4) | EU / USA - Standard Contractual Clauses (SCC) and Data Privacy Framework |
| HubSpot, Inc. | CRM, analytics, form handling | data in EU (EU1 region); US entity - SCC / Data Privacy Framework |
| Snitcher B.V. | identification of companies visiting the Website | Netherlands - data processed in the EU (AWS Frankfurt) |
| Resend, Inc. | sending e-mail notifications from forms | USA - Standard Contractual Clauses (SCC) |
| Cloudflare, Inc. | Website hosting and content delivery (CDN) | USA - Standard Contractual Clauses (SCC) |
| Authorised employees and associates of the Controller | handling of enquiries | - |
The Controller does not sell personal data to third parties nor disclose them for marketing purposes to third parties without the consent of the data subject.
§ 6. Rights of Data Subjects
Every person whose data is processed by the Controller has the right to:
- access their personal data (Article 15 GDPR);
- rectification of data (Article 16 GDPR);
- erasure of data - "right to be forgotten" (Article 17 GDPR);
- restriction of processing (Article 18 GDPR);
- data portability (Article 20 GDPR) - where processing is based on consent or a contract;
- object to processing based on legitimate interests (Article 21 GDPR);
- withdraw consent at any time - without affecting the lawfulness of processing carried out prior to withdrawal (Article 7(3) GDPR);
- lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).
To exercise the above rights, please contact the Controller at: j.panek@invo.ventures. The Controller responds to requests within 30 days.
§ 7. Cookies
The Website uses cookies. Upon the first visit, a banner is displayed enabling the user to grant or refuse consent to analytical and marketing cookies. Cookies other than strictly necessary ones are activated only upon the expression of consent; the user may change their preferences at any time using the "Cookie Settings" option in the Website footer.
Strictly Necessary Cookies (no consent required)
| Name | Purpose | Storage period |
|---|---|---|
invo_consent |
storing the user's cookie consent decision | 180 days |
i18n_redirected |
storing the user's selected language version of the Website | session / until changed |
| Anti-spam form rate-limiting cookie | protecting forms against abuse | 60 seconds |
Analytical and Marketing Cookies (consent required)
| Name / provider | Purpose | Storage period |
|---|---|---|
_ga, _ga_* (Google Analytics 4) |
Website traffic and usage statistics | up to 2 years |
__hstc, __hssc, __hssrc, hubspotutk (HubSpot) |
analytics, contact identification, effectiveness measurement | up to 13 months |
snitcher_device_id (Snitcher - cookie and local storage) |
identification of the company visiting the Website | up to 12 months |
snitcher_session (Snitcher - browser local storage) |
linking pageviews within a single visit | 30 minutes from the last activity |
Disabling analytical and marketing cookies does not affect the ability to use the Website. Cookie settings may also be changed in the web browser.
§ 8. Data Security
The Controller applies appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, or disclosure. The Website uses an encrypted HTTPS connection.
§ 9. Amendments to the Privacy Policy
The Controller reserves the right to amend this Privacy Policy. Users will be informed of material changes through a notice on the Website. The current version of the Policy is always available at: https://warfare.info.technology/en/privacy-policy (and in other language versions under the respective prefix /pl, /de, /ar).
§ 10. Final Provisions
- In matters not regulated by this Privacy Policy, the provisions of the GDPR and applicable Polish law shall apply.
- This Policy is made available in several language versions. In the event of discrepancies, the Polish language version shall be binding.
Effective date: 08 June 2026