Legal
This Privacy Policy explains how we collect, use, and protect personal data when you visit empowered.house (the Site), contact us, sign up for the newsletter, or apply to or are invited to Empowered Community. It applies to visitors, prospective clients, newsletter subscribers, and community applicants and contacts.
The controller of your personal data is Empowered House P.S.A., a simple joint-stock company (prosta spolka akcyjna) organized under the laws of Poland, operating the EmpoweredHouse brand.
We have appointed a Data Protection Officer, Karol Wojtaszek, whom you can reach at contact@empowered.house.
This policy covers the EmpoweredHouse marketing website, including the Empowered Intelligence product pages under empowered.house/intelligence, and direct correspondence with us. The Empowered Intelligence contact form and the Empowered Intelligence application are covered by the Empowered Intelligence privacy policy at empowered.house/intelligence/privacy.
Data you give us through a contact form, the newsletter signup, or by email:
We store enquiries and newsletter signups in our own database, where only administrators of our content management system can see them, and in Attio, the CRM we use to manage contacts.
Data collected automatically when you visit the Site:
We do not intentionally collect special categories of data, for example health, political, or biometric data. Please do not include such data in free-text fields.
| Purpose | Legal basis |
|---|---|
| Respond to your enquiry, schedule and run a fit call, and send a written recap | Steps taken at your request prior to entering a contract (GDPR Art. 6(1)(b)); our legitimate interest in responding to business enquiries (Art. 6(1)(f)) |
| Assess whether an engagement is a fit and prepare a proposal | Pre-contract steps (Art. 6(1)(b)); legitimate interest (Art. 6(1)(f)) |
| Operate, secure, and improve the Site | Legitimate interest in running a safe, functional website (Art. 6(1)(f)) |
| Send the newsletter to the work email address you gave us, once it starts | Your consent (Art. 6(1)(a)); you can unsubscribe at any time through the link in every issue or by writing to us |
| Non-essential analytics and business-visitor identification (Google Analytics, PostHog, Snitcher) | Your consent (Art. 6(1)(a)), given through the cookie banner |
| Count page views and clicks anonymously, without cookies (PostHog) | Our legitimate interest in knowing how the Site is used (Art. 6(1)(f)) |
| Assess an application to Empowered Community and run the membership | Our legitimate interest in running a community of practitioners (Art. 6(1)(f)) |
| Invite professional contacts to Empowered Community by a LinkedIn message | Our legitimate interest in inviting relevant professionals (Art. 6(1)(f)); you can object at any time |
| Comply with legal obligations, for example accounting and tax | Legal obligation (Art. 6(1)(c)) |
We do not run an automated nurture or marketing sequence, and we do not subscribe you to anything without your consent.
The Site uses cookies and similar technologies. Strictly necessary cookies keep the Site working and do not require consent.
Before you choose in the cookie banner, and if you decline, PostHog counts page views and clicks anonymously: without cookies, without storing anything in your browser, and without identifying you; to count unique visits, PostHog uses a hash of your IP address and browser that changes every day. This counting is based on our legitimate interest in knowing how the Site is used (Art. 6(1)(f)). Analytics cookies, PostHog with cookies, Google Analytics, and Snitcher run only after you click Accept; until then, the Site sends Google Analytics and Snitcher nothing. The newsletter form is the one exception: it loads Google reCAPTCHA when you start typing your email, as described below. You can grant, decline, or withdraw consent at any time through the cookie banner and your browser settings. Withdrawing consent does not affect processing carried out before the withdrawal.
With your consent, we use PostHog with cookies to collect product and usage analytics, such as pages visited and interactions, and Google Analytics to measure visits and usage of the Site. We use this data to understand how people use the Site and to improve it. With your consent, PostHog may also record how you move through pages, such as clicks, scrolls and page changes, to help us fix usability problems. Anything you type into a form is masked and never recorded.
With your consent, we also use Snitcher, a business-visitor identification service. It uses your IP address to identify the company or organization behind a visit, not you as an individual, and sets one cookie (SNID) to distinguish visitors. Snitcher processes data within the EU (AWS, Frankfurt).
The trackers in use after consent are PostHog's analytics cookies, Google Analytics cookies, and Snitcher's SNID cookie.
We also use Ahrefs Web Analytics to count visits and page views. It sets no cookies and, according to its provider, collects no personal data.
The newsletter signup is protected by Google reCAPTCHA v3, which keeps automated spam out. When you focus the email field, reCAPTCHA loads; when you subscribe, it collects your IP address, browser and device data, and how you interacted with the page, and sends them to Google, which may set its own cookies. We use the result only to decide whether a signup came from a person, based on our legitimate interest in keeping the list free of spam (Art. 6(1)(f)). Google's processing is covered by the Google Privacy Policy and Terms of Service.
Empowered Community is a group of people who own a process in their company and rebuild it with help from our engineers. We process personal data for it in 2 ways.
Applications. You apply through a Google Forms form. We collect your first name, work email address, company and role, your answers about the process you work on, and how you heard about the community. We use them to assess your application and, if you join, to run your membership, based on our legitimate interest (Art. 6(1)(f)). Google provides the form. We delete applications that are not accepted once the January group is complete.
Invitations. We may send a LinkedIn message to professionals we think the community fits. For this we keep your first name, company, role, and the link to your public LinkedIn profile. We find contacts among our own first-degree LinkedIn connections, people introduced to us, and authors of public posts and comments on these topics, chosen by hand. We do not buy lists or collect profiles automatically. We send at most 1 message and 1 reminder. Our basis is our legitimate interest in inviting relevant professionals (Art. 6(1)(f)). You can object at any time by replying "no" or by writing to contact@empowered.house; we then remove you within 7 days. We delete the data of people who did not apply 30 days after the application round closes.
We share personal data only with:
We do not sell your personal data.
Some of our providers may process data outside the European Economic Area. This may include PostHog and Attio, depending on the configured hosting region, and Google, for reCAPTCHA, in the United States. Google may also process Google Analytics and Google Forms data in the United States. Snitcher processes data within the EU (AWS, Frankfurt). For transfers outside the European Economic Area, we rely on an adequacy decision or appropriate safeguards such as the European Commission's Standard Contractual Clauses. You can request information about these safeguards by contacting us.
Under the GDPR you have the right to: access your data; rectify it; erase it; restrict or object to processing; data portability; and, where processing is based on consent, to withdraw consent at any time without affecting prior processing.
To exercise any right, contact contact@empowered.house. You also have the right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzedu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warszawa, or with the authority in your country of residence.
We apply technical and organizational measures appropriate to the risk, including access controls, encryption in transit, and limiting who can see enquiry data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
The Site is intended for businesses and is not directed at children. We do not knowingly collect data from children under 16.
We may update this policy. The current version and its effective date are posted on this page. Material changes will be made clear on the Site.
Questions about this policy or your data: contact@empowered.house.