ProLogLab
Privacy policy
This policy explains how ProLogLab handles personal data collected through prologlab.com, its forms, e-mails and call bookings.
Who is responsible for your data
The controller of your personal data is ProLogLab Michał Cwajna, ul. Warszawska 40/2A, 40-008 Katowice, Poland (“ProLogLab”, “I”). For any question about your data, write to michal@prologlab.com.
What data I collect and why
| When | Data | Purpose | Legal basis (GDPR) |
|---|---|---|---|
| You request a material (Readiness Index, Vendor Kit, Site Checklist) | First name, work e-mail, company, role, project stage, consent, the page and campaign you came from (UTM parameters, referrer) | Sending you the material you asked for and replying to you | Art. 6(1)(b) – steps taken at your request |
| You subscribe to The Deployment Brief, or tick consent when requesting a material | E-mail address, first name, list membership, confirmation date, opens and clicks | Sending the newsletter and occasional related e-mails | Art. 6(1)(a) – your consent, given with double opt-in |
| You send your Readiness Index result | First name, work e-mail, company, your answers and score | Replying with feedback on your result | Art. 6(1)(a) – your consent |
| You book a call | Name, e-mail, company, role, project stage, your notes; for calls with the Notetaker on, a recording-based transcript and summary | Organising and preparing the call, notes from the call | Art. 6(1)(b) and Art. 6(1)(f) – legitimate interest in running the meeting; you can ask me to switch the Notetaker off |
| You e-mail me or write on LinkedIn | Your contact details and the content of the message | Answering and continuing the conversation | Art. 6(1)(f) – legitimate interest in replying |
| You visit prologlab.com | Aggregated, anonymous usage statistics (pages, referrer, country, device type); server logs kept by the host | Understanding which content is useful; security of the site | Art. 6(1)(f) – legitimate interest |
Giving data in forms is voluntary, but without an e-mail address I can't send you the material. I don't make automated decisions about you and I don't buy or sell contact lists.
Cookies and analytics
prologlab.com uses privacy-friendly analytics (Plausible Analytics and Simple Analytics). They don't use cookies, don't track you across websites and don't collect personal data; I only see aggregated statistics.
With your consent, the site also loads the Google tag (Google Ads) to measure which ads bring visitors and sign-ups (conversion measurement). Google may then set cookies and process data such as your IP address, browser details and ad click identifiers. The legal basis is your consent (Art. 6(1)(a) GDPR). Until you click „Accept” in the cookie banner, the Google tag is not loaded at all. You can withdraw or change your choice at any time with the „Cookie settings” link in the page footer. Google may transfer data outside the EEA under the EU–US Data Privacy Framework and standard contractual clauses.
The booking calendar on the prologlab.com/book/ pages is provided by Calendly and loads only on those pages; Calendly may set its own cookies inside the calendar, and Calendly's cookie notice applies there.
Who processes the data for me
I use these service providers (processors), each bound by a data processing agreement:
- Netlify, Inc. (USA) – website hosting and form submissions
- Sendinblue SAS / Brevo (France, EU) – e-mail lists, confirmation e-mails and newsletter
- Calendly LLC (USA) – booking calls and, if enabled, meeting notes
- PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg, EU) – payment for paid consultations booked on prologlab.com/book/ (PayPal processes your payment details; I only see the payment confirmation)
- Google (Google Workspace / Google Meet) – e-mail and video calls
- Google Ireland Ltd. (Ireland, EU) – Google Ads conversion measurement, only with your consent
- Plausible Insights OÜ (Estonia, EU) and Simple Analytics B.V. (Netherlands, EU) – cookieless website statistics
- Attio Ltd (UK) – my CRM, for contacts I am actively in conversation with
Where data goes outside the European Economic Area (USA, UK), the transfer relies on an adequacy decision (EU–US Data Privacy Framework, UK adequacy) or on Standard Contractual Clauses.
How long I keep the data
- Newsletter and material requests: until you unsubscribe or withdraw consent; unconfirmed sign-ups are removed after 30 days.
- Form submissions and Readiness Index results: up to 24 months from the last contact.
- Call bookings and notes: up to 24 months from the call, longer only if we start working together.
- Correspondence: for as long as the conversation is active and up to 3 years after, for possible claims.
Your rights
You have the right to access your data, have it corrected or deleted, restrict its processing, receive it in a portable format and object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time – for e-mails, one click on “unsubscribe” is enough – without affecting what happened before. To use any of these rights, write to michal@prologlab.com; I reply within one month.
You can also lodge a complaint with the Polish supervisory authority: Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.
Changes
I update this policy when the tools or purposes change. The current version is always on this page. Last updated: 14 October 2026.