Privacy and Cookie Policy
22 September 2026
This notice explains which data smakoza.pl processes, how cookies work and how you can change your choices.
Controller
Smakoza Sp. z o.o., ul. Warszawska 6/32, 15-063 Białystok, Poland, VAT ID 9662183205, REGON 526545703, KRS 0001061446. Privacy contact: ivan@smartpicasso.pl.
Enquiries
If you submit the form, we process your name, email, telephone number, restaurant name, city, interests, page URL and referral source to respond and discuss an offer. We rely on your consent, steps taken at your request before a contract, or our legitimate interest in handling enquiries and preventing abuse. The message goes to our company Telegram group. The website does not maintain a separate lead database.
Technical data and essential cookies
The server and hosting provider may process your IP address, request time, page URL, browser and diagnostic data to serve and secure the site. Cloudflare sets the essential __cf_bm bot protection cookie, which expires after 30 minutes of inactivity. We store your cookie choice locally in your browser as smakoza_cookie_choice_v1. These functions are not for ad profiling.
Analytics and advertising
With analytics consent, we use Google Analytics 4 to measure traffic and Google Tag Manager to manage tags. With separate marketing consent, we use Google Ads and advertising pixels, including Meta, TikTok and LinkedIn, for conversions, audiences and remarketing. These tools may store identifiers and collect pages visited, events, device details, approximate location and referral source. Optional tools run only within the categories selected in your cookie settings.
Your choices
Essential technology operates without separate consent. You can accept, reject or separately enable analytics and marketing in the banner. Use the ‘Cookie settings’ button in the website footer to change your mind later; withdrawal stops future loading of optional tools. You can also remove cookies in your browser. Consent is the legal basis for optional processing.
Recipients and transfers
Infrastructure, security and communications providers, notably Cloudflare and Telegram, may receive data. With consent, analytics and advertising vendors may also receive it. Some providers may process data outside the EEA. Where required, we rely on an adequacy decision or standard contractual clauses with appropriate safeguards. You can request details about recipients using the contact address above.
Retention and rights
We retain enquiries as needed to respond, continue discussions, meet legal obligations or pursue claims. Technical retention varies; __cf_bm expires after 30 minutes of inactivity. You can request access, correction, deletion, restriction and portability, object to processing and withdraw consent without affecting prior lawful processing. You may complain to the Polish Data Protection Authority (UODO). Contact us at the address above.