Privacy policy
The short version: we collect what you type into the contact form, our host keeps ordinary server logs, and nothing else runs until you say yes.
Who is responsible
Groundwork is a service of YEM, Krakow, Poland, the data controller for this site. For anything in this policy, write to v.baranouski@yourextramarketer.com.
What we collect, and why
The contact form
Your name, company, work email and what you selected under “What are you looking for”. We use it to answer you and to discuss whether the kit fits — the lawful basis is taking steps at your request before entering a contract (Art. 6(1)(b) GDPR). The form also has a hidden anti-spam field; if it is filled in we discard the message and store nothing. Enquiries reach us by email and stay in our mailbox. We keep them for up to two years after our last exchange, then delete them, unless a contract requires us to keep records for longer.
Server logs
Our host records the usual request data — IP address, browser, time, page. It is used to run and secure the site, on the basis of our legitimate interest in keeping it working (Art. 6(1)(f) GDPR), and it is kept short-term by the host.
Your cookie choice
Saved in your browser's local storage under gw-consent. It never leaves your device and is not sent to us. Clearing your browser data resets it and the banner returns.
Cookies and similar technologies
Google's tag loads on every page under Consent Mode v2: every storage type starts denied, so nothing is written to your browser and no identifiers are sent until you accept. Loading the tag does mean Google's servers see your IP address and which page you are on, which is why it sits under Analytics rather than Necessary. Everything else waits for your choice outright — Meta's pixel and the Clutch review widget are not requested at all until you accept the category they belong to.
| Category | What it does | Provider | Basis |
|---|---|---|---|
| Necessary | None. The site sets no cookies of its own and stores nothing in your browser to make the page work. | — | Not applicable |
| Functional | Loads our review widget from clutch.co. The request lets Clutch see your IP address and which page you came from, and their server sets __cf_bm (bot protection, about 30 minutes). | Clutch | Consent |
| Analytics | Measures which pages are read and where visits come from, in aggregate. Google’s tag loads on every page, but with all storage denied until you accept: no cookies are set and no identifiers are stored. Accepting switches on analytics cookies (_ga, _ga_*, up to 2 years). | Google Analytics | Consent |
| Marketing | Measures whether an ad led to an enquiry and allows advertising to people who visited before. Nothing is stored and no advertising identifiers are sent until you accept. Meta’s pixel is not loaded at all unless you do. | Google Ads, Meta | Consent |
You can change your mind whenever you like: .
Who else processes your data
We do not sell anything to anyone. These providers process data on our behalf so the site and our email work:
| Provider | What they do for us | Processed in |
|---|---|---|
| Vercel | Hosting and delivery of this site. Processes request logs, including IP addresses. | EU / United States |
| Resend | Delivers the enquiry email from the contact form to our inbox. | United States |
| Google Workspace | Our email. Enquiries land here and are kept in the mailbox. | EU / United States |
| Google Calendar | Booking a call. Opening the booking link takes you to Google, under their privacy policy. | EU / United States |
| Clutch | The review widget, loaded only if you accept functional cookies. | United States |
Where a provider processes data outside the European Economic Area, the transfer relies on the safeguards in their data processing terms — an adequacy decision, or the European Commission's standard contractual clauses under Art. 46 GDPR.
Your rights
Under the GDPR you can ask us to do any of the following. Write to v.baranouski@yourextramarketer.com and we will answer within one month.
- Access
- Ask what we hold about you and get a copy.
- Rectification
- Have anything inaccurate corrected.
- Erasure
- Ask us to delete it.
- Restriction
- Ask us to stop processing it while something is disputed.
- Portability
- Receive what you gave us in a machine-readable form.
- Objection
- Object to processing we base on legitimate interest.
- Withdraw consent
- Change your cookie choices at any time, with no effect on what happened before.
If you think we have handled your data badly, you can complain to a supervisory authority. In Poland that is the President of the Personal Data Protection Office (UODO); you may also go to the authority where you live or work.
Changes
If we add a service that stores or transmits anything new, we update this page and ask for your cookie choice again rather than assuming the old answer still stands.
Last updated: 5 September 2026