Website
Processing personal data on appjs.swmansion.com
1. Who we are and how to find us
App.js Conference is organized by Software Mansion. We process your personal data in accordance with the following Privacy Policy.
- We operate as Software Mansion S.A. based in Kraków (address: ul. Zabłocie 43b, 30-701 Kraków, Poland), entered in the register of businesses kept by the District Court for Kraków-Śródmieście in Kraków, XI Commercial Division of the National Court Register, under KRS number 0000961952, NIP 6793131302, REGON 364909814.
We are the administrator of your personal data.
- You can reach out to us for information, or to exercise the other rights granted to you under the GDPR, at [email protected] and phone number (+48) 518 987 184.
This Privacy Policy covers appjs.co. The general Software Mansion Privacy Policy and Cookie Policy apply in addition.
2. How and why we process your personal data
USAGE DATA
For each visitor, we process data describing how the website is used (so-called operational data). This includes the automatic reading of the identifier of the network endpoint or IT system you use (i.e. your IP address), the server date and time, technical parameters of your device and software (e.g. whether you browse our site on a laptop or a phone), and the approximate location from which you connect to our server. Data stored in server logs is not associated with specific people using the website and is used only to administer the site.
The legal basis for processing usage data is Art. 6(1)(f) of the GDPR (processing is necessary for the purposes of the legitimate interests pursued by the controller). Our legitimate interests are to keep the website running, diagnose errors, improve its quality, and detect, prevent, or investigate security incidents, fraud, and abuse.
COOKIES AND SIMILAR TECHNOLOGIES
Cookies are small pieces of text data stored on your device (e.g. computer, phone or tablet) when you visit a website, which may be read back by an IT system. Together with similar technologies (pixels, tags, local storage), they let us recognize your browser. By themselves, cookies do not identify you. We use session cookies, which disappear when you close your browser, and persistent cookies, which remain on your device for a set period.
Tags and cookies on our website are managed through Google Tag Manager and a cookie consent banner (Cookie-Script). We divide cookies into three categories:
- Strictly necessary cookies are essential for the basic functioning of the website, e.g. remembering your cookie choices and delivering forms securely. The legal basis is Art. 6(1)(f) of the GDPR (our legitimate interest in providing a working and secure website). These cookies cannot be switched off in the consent banner.
- Performance cookies collect information about how visitors use the website, e.g. pages visited, time spent, clicks, and scrolling, so that we can measure traffic and improve the website. They are set only after you consent to them, and the legal basis is Art. 6(1)(a) of the GDPR (consent).
- Targeting cookies are used by our advertising and lead generation partners to measure the effectiveness of our campaigns, build audiences for advertising, and identify companies visiting our website. They are set only after you consent to them, and the legal basis is Art. 6(1)(a) of the GDPR (consent).
Until you make a choice in the consent banner, performance and targeting cookies are not set. Google tags operate in Google Consent Mode, which means that without your consent they send only cookieless signals and do not store or read cookies on your device.
We use the following cookies and similar technologies:
I. Strictly necessary cookies
| Cookie | Provider | Purpose | Expiry |
|---|---|---|---|
| CookieScriptConsent | Cookie-Script | Stores your cookie consent choices so that they are respected on future visits. | 1 month |
| traffic_scope | Software Mansion | Marks traffic from Software Mansion staff so that it can be excluded from analytics. | 1 year |
| mailerlite_session_id | MailerLite | Keeps a temporary session for the newsletter sign-up form and protects it against abuse. | Session |
II. Performance cookies
| Cookie | Provider | Purpose | Expiry |
|---|---|---|---|
| _ga, _ga_* | Google Analytics | Distinguishes visitors by assigning a random client ID, used to calculate visitor, session, and campaign statistics. | Up to 2 years |
| _clck, _clsk, MUID, CLID | Microsoft Clarity | Records sessions, heatmaps, and interactions (clicks, scrolling, mouse movement) to help us improve usability. | 1 day to 1 year |
| _hjSessionUser_*, _hjSession_* | Hotjar | Records sessions, heatmaps, and interactions to help us understand how the website is used. | 30 minutes to 1 year |
III. Targeting cookies
| Cookie | Provider | Purpose | Expiry |
|---|---|---|---|
| _gcl_au | Google Ads | Measures advertising effectiveness and conversions. | 3 months |
| _fbp | Meta (Facebook) Pixel | Identifies browsers to measure advertising effectiveness and conversions, and to build audiences for remarketing. | 90 days |
| _twpid | X (Twitter) Pixel | Tracks website interactions after viewing or engaging with ads on X, for conversion tracking and audience building. | 1 year 1 month |
| _rdt_uuid, _rdt_em, _rdt_pn | Reddit Pixel | Attributes website actions to Reddit advertising campaigns and optimizes ad delivery. | 90 days |
| _lfa, _lfa_consent | Leadfeeder (Dealfront) | Identifies returning visitors and links visits to company-level information derived from IP addresses, for B2B analytics. | Up to 2 years |
| Apollo.io tracker | Apollo.io | Identifies companies visiting the website based on IP addresses, for B2B analytics and sales insights. | Up to 1 year |
You can change or withdraw your consent at any time by reopening the cookie consent banner on our website. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. You can also allow, block, or delete cookies in your browser settings. Blocking strictly necessary cookies may prevent parts of the website from working properly. To opt out of Google Analytics on all websites, you can install the Google Analytics Opt-out Browser Add-on.
NEWSLETTER
If you sign up for our newsletter, we process your email address to send you news about App.js Conference and other Software Mansion events and products. The legal basis is your consent (Art. 6(1)(a) of the GDPR), and we send commercial information by email in accordance with the Polish Act of 18 July 2002 on the provision of services by electronic means. You can unsubscribe at any time using the link at the bottom of every email or by contacting us. It may take up to three days to remove your address from our mailing lists.
3. Which data is subject to processing
We process the following personal data items:
USAGE DATA & COOKIES
- IP address,
- server date and time,
- approximate location (country or region) of the device used to access the website,
- technical parameters of your device and software (browser, operating system, device type, screen resolution),
- device interface language,
- UTM tags and referrer, determining where you came to the website from,
- interactions with the website (pages visited, clicks, scrolling, mouse movement),
- online identifiers, including cookie identifiers and device identifiers,
- cookie consent status and the date and time of consent.
NEWSLETTER
- email address.
4. Who we disclose your personal data to
We process personal data in an IT system partially based on cloud computing solutions of external providers, including website hosting, email hosting, and application software. We entrust the processing of personal data to, among others, the following providers:
- Google (Google Analytics, Google Ads, Google Tag Manager, Google Workspace) – analytics, advertising, tag management, email, and data storage,
- Microsoft (Microsoft Clarity) – behavior analytics,
- Hotjar – behavior analytics,
- Cookie-Script – cookie consent management,
- MailerLite – newsletter,
- Meta Platforms, X Corp., Reddit – advertising and conversion measurement,
- Dealfront (Leadfeeder) and Apollo.io – B2B lead generation analytics.
The full list of Software Mansion subprocessors is available at swmansion.com/privacy/subprocessors.
Some of these operations involve transferring your personal data to so-called third countries (outside the European Economic Area), including the United States, where the GDPR does not apply. Such transfers always take place on the basis of legal instruments provided for in the GDPR, such as the European Commission’s adequacy decision under the EU-U.S. Data Privacy Framework or Standard Contractual Clauses, guaranteeing adequate protection of your rights and freedoms. Detailed information can be found in the privacy policies of the providers. If you wish, we can send you a list of useful links (email us at [email protected]).
5. How long your personal data will be kept and maintained
Usage data in server logs and analytics tools is kept for up to 26 months.
Cookies remain in your browser for the periods listed in the tables above, unless you delete them earlier or withdraw your consent.
We process your newsletter data until you unsubscribe or withdraw your consent.
6. How you can take advantage of your rights
We make every effort for you to be satisfied with our cooperation. You have a number of rights that let you influence how we process your data, and in some cases stop us from processing it altogether:
- the right to access your personal data (Art. 15 of the GDPR),
- the right to rectify your data (Art. 16 of the GDPR),
- the right to have your data erased (Art. 17 of the GDPR),
- the right to restrict processing of your data (Art. 18 of the GDPR),
- the right to data portability (Art. 20 of the GDPR),
- the right to object to processing of your data (Art. 21 of the GDPR),
- the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal (Art. 7(3) of the GDPR).
To exercise these rights, contact us at [email protected]. We will respond within one month of receiving your request, after confirming your identity. This period may be extended by two further months if the request is complex or we receive many requests. In that case, we will inform you of the extension and the reasons for it within one month.
7. A formal complaint to supervisory authorities
According to Art. 77 of the GDPR, you have the right to file a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement. In Poland, the supervisory authority is the President of the Personal Data Protection Office (UODO). A complaint can be filed by mail at ul. Stawki 2, 00-193 Warszawa, or by email at [email protected]. More information (including current phone numbers) is available at https://uodo.gov.pl/.
8. Is submitting personal data necessary to conclude a contract with us
The data is not collected in order to conclude a contract. Providing your email address is voluntary, but it is necessary to receive our newsletter.
9. How your personal data gets obtained
We obtain your personal data directly from you, and automatically through cookies and similar technologies when you use the website.
10. Automated processing and profiling
Usage data and cookie data are processed by automated means. If you consent to targeting cookies, our advertising and lead generation partners may use this data for profiling, i.e. to assess your interests in order to show you relevant ads or to identify the company you visit from. We do not make decisions that have legal effects on you, or similarly significantly affect you, based solely on automated processing.
Event
Processing of personal data of event participants
1. Who we are and how to find us
App.js Conference is organized by Software Mansion. We process your personal data in accordance with the following Privacy Policy.
- We operate as Software Mansion S.A., a joint stock company based in Kraków (address: ul. Zabłocie 43b, 30-701 Kraków, Poland), KRS 0000961952, NIP 6793131302, REGON 364909814.
We are the controller of your personal data.
- You can reach out to us for information, or to exercise the other rights granted to you under the GDPR, at [email protected].
2. Why we process your personal data
We process your personal data in order to ensure your participation in the event held by us.
The legal basis for processing your data is your consent (Art. 6(1)(a) of the GDPR) and Art. 6(1)(f) of the GDPR (processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party). These legitimate interests are:
- operational necessity – running the event, e.g. badge printing, attendance tracking, and sending you essential information,
- fraud and security prevention – detecting, investigating, and preventing security incidents, fraud, abuse, or misuse of the event services,
- evaluation and improvement – analyzing attendance data and collecting feedback (e.g. through anonymous surveys or aggregated data) to evaluate the event and improve future editions,
- defense of legal claims – establishing, exercising, or defending legal claims that may arise in connection with the event.
Photos and video recordings taken during the event may be published on our website and social media channels to document and promote the event.
3. Which data is subject to processing
We process the following personal data items:
- first name(s) and surname,
- email address,
- dietary and other preferences regarding the elements of our event,
- any other personal data provided by you in the registration form for the event,
- photos and video recordings of participants taken during the event.
4. Who we disclose your personal data to
We process personal data in an IT system partially based on cloud computing solutions of external providers, including email hosting, server hosting, application software, and our ticketing provider (Tito). Whenever such processing involves transferring your data outside the EEA (where the GDPR does not apply), it is done on the basis of legal instruments provided for in the GDPR, ensuring adequate protection of your rights and freedoms. Detailed information can be found in the privacy policies of the providers. If you wish, we can send you a list of useful links. The full list of Software Mansion subprocessors is available at swmansion.com/privacy/subprocessors.
5. How long your personal data will be kept and maintained
Your personal data will be processed no longer than necessary to ensure your safe and uninterrupted participation in the event, and afterwards for as long as needed to establish, exercise, or defend legal claims. If you wish to stay in touch with us longer, please let us know.
6. How you can take advantage of your rights
You have the same rights as described in section 6 of the Website part of this Privacy Policy, including the right to access, rectify, erase, restrict, and port your data, the right to object, and the right to withdraw your consent at any time. To exercise them, contact us at [email protected].
7. A formal complaint to supervisory authorities
According to Art. 77 of the GDPR, you have the right to file a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement. In Poland, the supervisory authority is the President of the Personal Data Protection Office (UODO). A complaint can be filed by mail at ul. Stawki 2, 00-193 Warszawa, or by email at [email protected]. More information (including current phone numbers) is available at https://uodo.gov.pl/.
8. Is submitting personal data necessary to conclude a contract with us
We do not sign a contract with you for data processing purposes. However, providing your data is necessary for you to take part in the event.
9. How your personal data gets obtained
We obtain your personal data directly from you.
10. Automated processing and profiling
We do not process your data in an automated way and we do not conduct profiling as understood by the GDPR.