Skip to main content
LiFactorLinkedIn Powerhouse

Privacy Policy for lifactor.com

1. General Provisions

1.1. This Privacy Policy sets out the rules for processing personal data of users of the website available at https://www.lifactor.com (hereinafter: "Website").

1.2. The Data Controller is LiFactor (hereinafter: "Controller").

1.3. For matters related to personal data protection, you can contact the Controller via email: contact@lifactor.com

1.4. Personal data is processed in accordance with applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and the Personal Data Protection Act.

1.5. Use of the Website is voluntary. Providing data in the contact form or advertising forms (e.g., Meta Ads) is voluntary but may be necessary to receive a response, prepare an offer, or establish cooperation.

2. Scope of Processed Data

2.1. The Controller may process the following categories of personal data:

Data provided by the user via the contact form on the Website:

  • first name
  • last name
  • email address
  • phone number (if provided)
  • message content and other information voluntarily provided in the form

Data provided by the user via advertising forms linked to this Policy (e.g., Meta Ads contact forms):

  • first name
  • last name
  • email address
  • phone number (if collected)
  • other data required in the given form (according to its content)

Technical data related to the use of the Website, collected automatically:

  • IP address
  • browser type and version
  • operating system
  • cookie identifiers and other device identifiers
  • date and time of visit, visited subpages, source of entry to the Website

Data necessary for potential B2B cooperation, if it occurs:

  • contact person data on the client side (name, contact details)
  • company name, position, other data provided during business conversations

3. Purposes and Legal Bases for Processing

3.1. Handling the contact form on the Website and advertising forms (e.g., Meta Ads)

Purpose: responding to inquiries, conducting correspondence, preparing cooperation proposals and offers.

Legal basis:
• Art. 6(1)(f) GDPR – legitimate interest of the Controller in communicating with persons interested in the offer and building business relationships
• Art. 6(1)(b) GDPR – to the extent that communication leads directly to contract conclusion.

3.2. Performance of B2B contracts and cooperation

Purpose: conclusion and performance of contracts, ongoing contact, settlements, customer service.

Legal basis: Art. 6(1)(b) GDPR – performance of a contract to which the data subject is party, or taking steps at the request of the data subject prior to entering into a contract.

3.3. Fulfilling legal obligations of the Controller

Purpose: maintaining accounting and tax documentation and archiving required documents.

Legal basis: Art. 6(1)(c) GDPR – legal obligation of the Controller.

3.4. Direct marketing of Controller's services (B2B)

Purpose: presentation and promotion of Controller's services, including contact regarding offers and activities in social selling and campaigns on channels such as LinkedIn, Meta, paid advertising.

Legal basis: Art. 6(1)(f) GDPR – legitimate interest of the Controller in direct marketing of own services.

3.5. Statistics, analytics and Website optimization

Purpose: analysis of Website usage, measurement of marketing effectiveness, improvement of Website functionality and content.

Legal basis: Art. 6(1)(f) GDPR – legitimate interest of the Controller in developing the Website and business.

3.6. Establishment, pursuit or defense against claims

Purpose: possible establishment, pursuit or defense against claims arising from business activities.

Legal basis: Art. 6(1)(f) GDPR – legitimate interest of the Controller in protecting its rights.

4. Data Recipients

4.1. Personal data may be transferred to the following categories of recipients:

  • hosting and technical infrastructure providers (e.g., Webflow)
  • email service provider (Google Workspace)
  • analytics and advertising tools providers (Google – GA4 and Google Ads, Meta – Facebook/Instagram Ads, LinkedIn Ads)
  • entities providing advisory, legal, accounting, IT services to the Controller – to the extent necessary for the performance of these services
  • public authorities, courts and other entities authorized under law – only to the extent the Controller is obliged to do so

4.2. Entities processing personal data on behalf of the Controller act on the basis of appropriate data processing agreements and are obliged to maintain confidentiality and apply appropriate security measures.

5. Data Transfer Outside the EEA

5.1. Due to the use of tools such as Google Workspace, Google Analytics 4, Google Ads, Meta Ads or LinkedIn Ads, personal data may be transferred to countries outside the European Economic Area (EEA), in particular to the United States.

5.2. In the case of such transfers, the Controller uses solutions provided for in the GDPR, ensuring an appropriate level of data protection, in particular standard contractual clauses adopted by the European Commission or other appropriate legal mechanisms.

5.3. Detailed information on the safeguards applied when transferring data outside the EEA may be provided to the user upon request.

6. Data Retention Period

6.1. Personal data will be stored for the following periods:

  • data from contact forms and advertising forms (e.g., Meta Ads) concerning persons with whom a contract was not ultimately concluded – for a period not longer than until the expiry of limitation periods for potential claims related to communication and marketing (generally up to 3 years from the last contact), unless an objection to processing is effectively raised earlier or consent is withdrawn (if it was the basis)
  • data related to contract performance – for the duration of the contract, and after its termination for the period required by law (in particular tax and accounting law, generally up to 5 years from the end of the tax year in which the last settlement was made), as well as for the limitation period for claims arising from the contract
  • data processed on the basis of consent – until consent is withdrawn or the purpose of processing is achieved, unless legal provisions or the legitimate interest of the Controller require longer storage (e.g., in connection with claims)
  • data related to analytics and cookies – for the validity period of a given cookie or until cookies are deleted by the user in the browser, with these periods resulting from the settings of external tools and the user's browser

7. Rights of Data Subjects

7.1. The data subject has the following rights:

  • right of access – to obtain confirmation whether data is being processed and information about such processing
  • right to rectification – to correct inaccurate data or supplement incomplete data
  • right to erasure – in cases provided for in Art. 17 GDPR (e.g., when data is no longer necessary for the purposes for which it was collected or consent has been withdrawn)
  • right to restriction of processing – in cases provided for in Art. 18 GDPR
  • right to data portability – in cases where processing is based on consent or contract and is carried out by automated means
  • right to object – to processing of data based on the legitimate interest of the Controller, in particular to processing for direct marketing purposes (in such case the data will no longer be processed for this purpose)
  • right to withdraw consent – to the extent that processing is based on consent; withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal

7.2. To exercise the above rights, please contact the Controller using the email address indicated in point 1.3.

7.3. The data subject also has the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).