Privacy Policy

1. Controller

Hammerschmied Sp. z o.o.
ul. Jana Heweliusza 11/811
80-890 Gdańsk
Poland

Represented by the Management Board: Natalia Dziadus-Hammerschmied, Alexander Hammerschmied
Email: office@automatethis.pro · Phone: +43 660 5641253
Further details: Imprint

2. Overview

We process personal data of website visitors, prospects, clients and their employees, and business partners. This includes contact details (name, email, phone), the content of your enquiries, contract and billing data, and technical usage data (e.g. IP address, browser, pages visited).

The legal bases are Art. 6(1) GDPR, namely (a) consent, (b) contract and pre-contractual measures, (c) legal obligations and (f) legitimate interests.

Where service providers transfer data to countries outside the EU/EEA (in particular the USA), we rely on the adequacy decision for the EU-US Data Privacy Framework (Art. 45 GDPR) or on standard contractual clauses (Art. 46 GDPR).

3. Hosting and server log files

This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. When you visit the website, the server automatically processes your IP address, date and time, the URL requested, the referrer and browser information. This is necessary to deliver and secure the website (Art. 6(1)(f) GDPR). We have a data processing agreement with Hetzner. The fonts on this website are loaded locally from our server; no connection to Google Fonts is made.

Without your consent, we only use cookies and access that are strictly necessary to operate the website. We load analytics and marketing services only after you have consented via the cookie banner (Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG or Art. 399 of the Polish Electronic Communications Law). You can withdraw your consent at any time via “Cookie settings” in the footer.

5. Web analytics with PostHog

With your consent, we use PostHog, a service of PostHog Inc., 2261 Market Street #4008, San Francisco, CA 94114, USA. PostHog measures how the website is used (e.g. page views, time on page, clicks on buttons and links). To do so, PostHog stores a pseudonymous identifier in a cookie or in your browser’s local storage (ph_…). We use PostHog’s EU Cloud; the data is processed on servers in Frankfurt am Main. We do not create profiles of individual visitors, and session recording is switched off. We have a data processing agreement with PostHog; standard contractual clauses (Art. 46 GDPR) cover any access from the USA. The legal basis is your consent (Art. 6(1)(a) GDPR). If you withdraw your consent, the identifier is deleted from your browser.

6. Appointment booking via Google Calendar

On our booking page, we embed appointment booking from Google Calendar (Google Ireland Limited). When you open the page, a connection to Google is established and your IP address is transmitted. When you book an appointment, we process your name, email address and the appointment to hold the call (Art. 6(1)(b) GDPR). For the embedding, we rely on our legitimate interest in simple appointment scheduling (Art. 6(1)(f) GDPR).

7. Contact by email and phone

When you contact us, we process your details to handle your enquiry (Art. 6(1)(b) GDPR, otherwise (f)). For email and calendar, we use Google Workspace from Google Ireland Limited. We have a data processing agreement with Google.

8. Blog images (Amazon Web Services)

Images in blog posts are loaded from Amazon S3 by Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg, server location Frankfurt am Main. Your IP address is transmitted in the process (Art. 6(1)(f) GDPR).

9. Working with clients via Sally

Collaboration with our clients (tasks, communication, documentation, approvals, file exchange) takes place on the Sally platform. Sally is operated by Kraft Fabrik Media Ltd, Moutallion 9, 8577 Tala, Cyprus, which acts as our processor for this purpose. We process data of our clients’ contact persons and employees and content stored in tasks and files (Art. 6(1)(b) GDPR; for the client’s employees (f)).

10. Hosting via hartmut.io

If a client orders hosting via hartmut.io (Kraft Fabrik Media Ltd), the client concludes its own contract for it. hartmut.io is then the client’s processor. Where we pass on contact and access details during setup, we do so to perform the contract (Art. 6(1)(b) GDPR).

11. Retention

We store personal data only for as long as necessary for the respective purpose. We retain contract and invoice data for up to ten years due to statutory retention obligations.

12. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to withdraw consent with effect for the future (Art. 7(3)).

Right to object (Art. 21 GDPR): Where we process data on the basis of legitimate interests, you may object to this processing at any time on grounds relating to your particular situation.

An email to office@automatethis.pro is enough to exercise your rights. You may also lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority responsible for us is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warsaw, Poland.

13. Changes

We update this privacy policy when our data processing or the legal situation changes. The version published here applies.

Last updated: 1 October 2026