This notice explains how TraceYield handles personal data when you use the public website, submit a demo enquiry or choose optional analytics. It does not describe customer-product deployments, which are covered by separate agreements.
Who is responsible
TraceYield is the name used for this project and website. Kamil Wolski operates it as an individual; TraceYield is not a separate legal entity. Kamil Wolski is the controller of personal data processed through this website. For privacy requests, email info@kamilwolski.nl. The demo form is another contact route.
Website and server operation
When you request a page, the hosting environment may process technical request data such as an IP address, user-agent, requested path and time. This supports delivery, security, abuse prevention and diagnosis. The host and its log-retention period depend on the production hosting configuration and must be verified. We do not use this information to make decisions about you.
Demo enquiries
We use the name and email address you provide to receive and answer your request, arrange a demo and handle directly related follow-up. The optional fields include company, role, team or organization size, AI tools used, approximate active users, timing, your question or concern, demo interests, and security or deployment requirements. Do not include sensitive, confidential or student information. We do not add requesters to newsletters or unrelated marketing. The form sends submitted fields through the configured Microsoft 365 SMTP service to the TraceYield intake address and sends a confirmation to the requester. Authorized inbox recipients and the applicable Microsoft contracting entity must be confirmed.
Legal basis and retention
For a professional contacting the site on behalf of an employer or institution, the stated basis for handling the requested business enquiry is the operator’s legitimate interest under GDPR Article 6(1)(f): responding to the enquiry and arranging a requested demo. This is limited to the request and directly related follow-up, not unrelated marketing. The operator must assess and document the interest, necessity, reasonable expectations, likely impact and safeguards, and provide the right to object. Article 6(1)(b) applies only where the person making the request themselves seeks pre-contractual steps and the processing is objectively necessary for those steps. Non-converting enquiries have a deletion target of six months after meaningful contact ends; this is an operational target, not an automated deletion guarantee. If a business relationship starts, relevant information may move to customer or contract administration and follow applicable retention rules.
Analytics (optional)
Only after you actively allow Analytics, the site loads Google Analytics (measurement ID G-GDC34EMBL9) to understand use of the public website and improve it. The implementation sends page views for page paths, titles and timestamps. In browser QA, the current Google Analytics property also sent automatically collected scroll and form-start events. The form-start event included limited form metadata, such as the form destination and first field name, but not submitted values. Other Enhanced Measurement events depend on property settings, which must be checked. The browser and Google may also process referrer, device/browser information, approximate location and pseudonymous browser identifiers. Google necessarily receives network information, including an IP address, when the browser connects. Google states that for EEA traffic it uses IP data to derive coarse location and then discards it before logging; it does not log or store individual IP addresses in Analytics. This does not mean Google never receives an IP address or that the request is anonymous. Submitted demo values, including names, email addresses and message text, are not sent to Analytics. The legal basis is your consent. Rejecting or ignoring the banner does not affect the site or demo form.
Recipients and international processing
Personal data may be available to the operator and service providers needed to operate the site, deliver email and provide Analytics. The form uses Microsoft 365 SMTP at smtp.office365.com; the exact Microsoft contracting entity, role and authorized inbox recipients depend on the configured account and its terms and have not been independently confirmed here. Google provides Analytics; the relevant Google contracting entity and role depend on the configured account and terms. Some providers may process data outside the EEA, including in the United States. Any transfer must use a mechanism and safeguards applicable to the actual recipient and destination; the production hosting, provider contracts, transfer terms and safeguards still require verification.
Storage and security
This site is configured to remember your Analytics choice in first-party browser storage for up to 183 days. This is a site design choice, not a statutory period. If Analytics is enabled, Google Analytics may set _ga and _ga_<stream-id> cookies. The site configures a maximum 90-day cookie lifetime without extending expiry on each page view; this too is a design choice, not a statutory period. See the Cookie Policy for the inventory. Reasonable technical and organizational measures are used for the website, but no website transmission or storage can be guaranteed completely secure.
Your rights and contact
Depending on the circumstances, you may request access, correction, erasure or restriction, object to processing based on legitimate interests, request data portability where applicable, and withdraw consent at any time for future Analytics. Withdrawal does not affect processing that already took place. Contact Kamil Wolski at info@kamilwolski.nl or use the demo form and mark the message “Privacy request”; provide only information needed to respond. Proportionate identity information may be requested only where reasonably necessary. You may also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Other information
Demo information is supplied directly by you; technical request information comes from your browser/device and the website infrastructure. The public website and demo enquiry process are intended for professional and institutional enquiries. Please do not submit unnecessary personal data about students or minors. Personal data processed through the public website, optional Analytics and demo-request process is not used for solely automated decisions, including profiling, that produce legal or similarly significant effects. This statement does not describe TraceYield product analysis or customer deployments. We may update this notice when processing changes; the current version and date appear here.