TraceYield

Privacy Policy

This notice explains how TraceYield handles personal data when you use the public website, submit a demo enquiry or choose optional analytics. It does not describe customer-product deployments, which are covered by separate agreements.

Last updated: 8 October 2026

Who is responsible

TraceYield is the name used for this project and website. Kamil Wolski operates it as an individual; TraceYield is not a separate legal entity. Kamil Wolski is the controller of personal data processed through this website. For privacy requests, email info@kamilwolski.nl. The demo form is another contact route.

Website and server operation

When you request a page, the hosting environment may process technical request data such as an IP address, user-agent, requested path and time. This supports delivery, security, abuse prevention and diagnosis. The host and its log-retention period depend on the production hosting configuration and must be verified. We do not use this information to make decisions about you.

Demo enquiries

We use the name and email address you provide to receive and answer your request, arrange a demo and handle directly related follow-up. The optional fields include company, role, team or organization size, AI tools used, approximate active users, timing, your question or concern, demo interests, and security or deployment requirements. Do not include sensitive, confidential or student information. We do not add requesters to newsletters or unrelated marketing. The form sends submitted fields through the configured Microsoft 365 SMTP service to the TraceYield intake address and sends a confirmation to the requester. Authorized inbox recipients and the applicable Microsoft contracting entity must be confirmed.

Legal basis and retention

For a professional contacting the site on behalf of an employer or institution, the stated basis for handling the requested business enquiry is the operator’s legitimate interest under GDPR Article 6(1)(f): responding to the enquiry and arranging a requested demo. This is limited to the request and directly related follow-up, not unrelated marketing. The operator must assess and document the interest, necessity, reasonable expectations, likely impact and safeguards, and provide the right to object. Article 6(1)(b) applies only where the person making the request themselves seeks pre-contractual steps and the processing is objectively necessary for those steps. Non-converting enquiries have a deletion target of six months after meaningful contact ends; this is an operational target, not an automated deletion guarantee. If a business relationship starts, relevant information may move to customer or contract administration and follow applicable retention rules.

Analytics (optional)

Only after you actively allow Analytics, the site loads Google Analytics (measurement ID G-GDC34EMBL9) to understand use of the public website and improve it. The implementation sends page views for page paths, titles and timestamps. In browser QA, the current Google Analytics property also sent automatically collected scroll and form-start events. The form-start event included limited form metadata, such as the form destination and first field name, but not submitted values. Other Enhanced Measurement events depend on property settings, which must be checked. The browser and Google may also process referrer, device/browser information, approximate location and pseudonymous browser identifiers. Google necessarily receives network information, including an IP address, when the browser connects. Google states that for EEA traffic it uses IP data to derive coarse location and then discards it before logging; it does not log or store individual IP addresses in Analytics. This does not mean Google never receives an IP address or that the request is anonymous. Submitted demo values, including names, email addresses and message text, are not sent to Analytics. The legal basis is your consent. Rejecting or ignoring the banner does not affect the site or demo form.

Recipients and international processing

Personal data may be available to the operator and service providers needed to operate the site, deliver email and provide Analytics. The form uses Microsoft 365 SMTP at smtp.office365.com; the exact Microsoft contracting entity, role and authorized inbox recipients depend on the configured account and its terms and have not been independently confirmed here. Google provides Analytics; the relevant Google contracting entity and role depend on the configured account and terms. Some providers may process data outside the EEA, including in the United States. Any transfer must use a mechanism and safeguards applicable to the actual recipient and destination; the production hosting, provider contracts, transfer terms and safeguards still require verification.

Storage and security

This site is configured to remember your Analytics choice in first-party browser storage for up to 183 days. This is a site design choice, not a statutory period. If Analytics is enabled, Google Analytics may set _ga and _ga_<stream-id> cookies. The site configures a maximum 90-day cookie lifetime without extending expiry on each page view; this too is a design choice, not a statutory period. See the Cookie Policy for the inventory. Reasonable technical and organizational measures are used for the website, but no website transmission or storage can be guaranteed completely secure.

Your rights and contact

Depending on the circumstances, you may request access, correction, erasure or restriction, object to processing based on legitimate interests, request data portability where applicable, and withdraw consent at any time for future Analytics. Withdrawal does not affect processing that already took place. Contact Kamil Wolski at info@kamilwolski.nl or use the demo form and mark the message “Privacy request”; provide only information needed to respond. Proportionate identity information may be requested only where reasonably necessary. You may also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Other information

Demo information is supplied directly by you; technical request information comes from your browser/device and the website infrastructure. The public website and demo enquiry process are intended for professional and institutional enquiries. Please do not submit unnecessary personal data about students or minors. Personal data processed through the public website, optional Analytics and demo-request process is not used for solely automated decisions, including profiling, that produce legal or similarly significant effects. This statement does not describe TraceYield product analysis or customer deployments. We may update this notice when processing changes; the current version and date appear here.

Purposes, data, legal bases and retention

Operate, secure and diagnose the website

Data
IP address, user-agent, requested path and time, if recorded by the host
Legal basis
Legitimate interests in site operation, security and diagnosis (Article 6(1)(f)); balancing assessment and exact host logs need verification
Recipients
Kamil Wolski as operator; hosting provider and its infrastructure providers
Retention
Only as needed for security, operation and diagnosis; exact host log period to verify

Answer and arrange a requested demo

Data
Required: name and email. Company, role and other fields are optional; request details if supplied
Legal basis
For a B2B enquiry: legitimate interest under Article 6(1)(f), subject to the assessment described above. Article 6(1)(b) only where the requester themselves seeks objectively necessary pre-contractual steps
Recipients
Authorized TraceYield intake recipients; Microsoft 365 SMTP service; requester receives a confirmation email
Retention
Target: delete within 6 months after meaningful contact ends if no relationship starts; manual deletion process to verify

Remember cookie choice

Data
Consent version, Analytics choice and timestamp stored in this browser
Legal basis
Necessary to remember the choice and respect it on later visits; no optional Analytics is activated
Recipients
Browser storage on your device; not sent to a consent database
Retention
Up to 183 days (site choice); replaced when consent is renewed

Measure public website use (optional)

Data
Page path/title, time, referrer, browser/device signals, approximate location, pseudonymous identifiers and automatically collected scroll/form-start signals with limited form metadata; no submitted values
Legal basis
Consent (GDPR Article 6(1)(a)); Analytics tag loads only after opt-in
Recipients
Google as the Analytics provider; the contracting entity and role depend on the configured account and terms and still need verification
Retention
Analytics cookies: configured maximum 90 days, a site design choice. Chosen user/event-level Analytics retention target: 2 months; verify the property setting in Analytics Admin. Standard aggregated reports are not deleted on that schedule by this setting

Email Kamil Wolski about privacy: info@kamilwolski.nlOr use the demo formCookie Policy