Privacy policy

Who is responsible

The data controller is Autentika Sp. z o.o., ul. Antoniukowska 17/49, 15-740 Białystok, Poland, KRS 0001008834, VAT 5423460579. For privacy requests, email michal.samojlik@autentika.com or write to this address. These are also the contact details in Autentika’s company privacy policy.

Report access and your requests

We collect your email address and the details you submit, such as first name and publisher. We also record the type of request, any article it relates to, your community interest and email-update choice. Access records can include an access token and the time access is activated. Email is required for report access and the PDF; first name is optional for the PDF. Other required fields are marked in the form.

We use these details to provide the access you request and handle related communication (GDPR Article 6(1)(b), providing the requested service). Without the required details, we cannot process that request. You can still read the freely available content.

Requesting a community invitation and subscribing to email updates are optional. We use your details for these purposes only when you choose them (Article 6(1)(a), consent). Report access and PDF downloads do not require marketing consent. You can withdraw your community request or email consent by contacting us; where an email contains an unsubscribe link, you can use that too.

With your request we also keep the first recorded campaign labels of the link that brought you to the site (utm_source, utm_medium, utm_campaign, utm_content and utm_term), the domain of the referring site and the first page you opened. We use them to see which channels bring readers, based on our legitimate interest in measuring our communication (Art. 6(1)(f) GDPR). This does not use cookies and does not depend on your cookie choices. You can object to this use at any time by writing to michal.samojlik@autentika.com.

Newsroom Video Community applications

When you apply to join Newsroom Video Community through our application form, Autentika Sp. z o.o., named above, is the data controller. The form asks for your full name, the email address for your Slack invitation, your organisation and your role. Your LinkedIn profile and how you heard about us are optional.

We use these details to review your application, contact you about it and arrange a Slack invitation. Applications are stored in Google Forms and Google Sheets and reviewed by authorised community hosts. If your application is approved, we use your email address to invite you through Slack.

Applying is voluntary and relies on your consent (GDPR Article 6(1)(a)). You can withdraw your application at any time and ask about access, correction or deletion at michal.samojlik@autentika.com. We keep application details while needed to respond or arrange your invitation; limited records may be retained where necessary for legal obligations or claims.

Google and Slack describe how they handle data in their own policies: Google Privacy Policy and Slack Privacy Policy.

Reading progress and privacy choices

Without functional consent, reading progress stays in temporary page memory. If you enable “Remember my reading progress” in Cookie settings, we save which materials you opened or marked as read and your percentage progress on this browser. When you identify yourself through a form or an access link, this history can be associated with your access record and synchronised with the server. It does not store the exact place where you stopped scrolling. This optional processing relies on your consent (Article 6(1)(a)).

Withdrawing functional consent clears the local history and the server history available through your authenticated reader session. If you no longer have that session, contact us to request deletion of a previous server record. The expiry of a privacy-choice cookie does not itself delete a server record.

We remember your privacy choices so we can respect them and keep access and PDF cookies needed for your request. Server requests also involve technical information such as IP address, browser information and request times. We use necessary technical data to operate and protect the service, prevent abuse and handle faults (Article 6(1)(f), our legitimate interest in a secure, reliable service).

Optional analytics and advertising

The current availability of each provider is shown below. All optional categories start off. An available provider runs only after you consent to its category. A new provider configuration requires a fresh choice.

• Google Analytics 4 (Analytics): available, runs only after your consent to this category.
• Microsoft Clarity (Analytics): available, runs only after your consent to this category.
• Meta Pixel (Advertising): available, runs only after your consent to this category.
• LinkedIn Insight Tag (Advertising): available, runs only after your consent to this category.
• Google Ads (Advertising): disabled on this site; no data is sent to this provider.

With Analytics consent, Google Analytics 4 can measure page visits and report interactions, using browser and device information and cookie identifiers, and Microsoft Clarity can record how pages are used, such as clicks, scrolling and page layout, to produce heatmaps and session replays; text typed into form fields is masked and not sent. With Advertising consent, Meta and LinkedIn can measure campaign results and associate visits with their identifiers for advertising audiences, and Google Ads can measure the results of Google ads and build audiences for Google advertising. Both optional categories load Google Tag Manager, which starts these providers. These providers may connect this activity with information held in their own services. This processing relies on consent (Article 6(1)(a)).

We do not intentionally send form fields, email addresses or access tokens to these tools, and do not enable advanced matching. Google Analytics uses basic consent mode: no Analytics requests are sent before consent. Read the Cookie policy for storage details.

Who receives data and where it is processed

Authorised Autentika staff and service providers supporting hosting, technical maintenance, access-record storage and communication may process data to deliver this service. Professional advisers or competent authorities may receive information when necessary for a legal obligation or claim. Footer partner links do not themselves submit your form details to the partners; visiting a partner site is subject to that site’s own policy.

If enabled and consented to, optional measurement also involves Google, Microsoft, Meta Platforms Ireland Limited and LinkedIn Ireland Unlimited Company and their service providers. Their processing may take place outside the EEA, including in the United States. Provider policies describe transfer safeguards, such as applicable adequacy decisions and European Commission standard contractual clauses. The applicable mechanism depends on the provider, recipient and service. Contact us for information about recipients and safeguards applicable to your data or a copy of relevant safeguards.

• Google, including Google Ads: Privacy policy and data transfer frameworks.
• Microsoft (Clarity): Microsoft Privacy Statement.
• Meta: Privacy policy and European data transfer terms.
• LinkedIn: Privacy policy and data processing and transfer terms.

How long we keep information

We keep access and request records for as long as needed to provide the report and handle the request. Community requests are kept while needed to respond or arrange the requested invitation. Details used for optional emails are kept until you withdraw consent. Where necessary, limited records may be retained to demonstrate a choice, comply with a legal obligation or establish, exercise or defend legal claims. We assess retention against these purposes; cookie lifetimes are not automatic deletion deadlines for contact details or server history.

Local reading history remains until you clear it, withdraw functional consent or your browser removes it. Provider-side retention is governed by the relevant service and account settings; a cookie’s expiry does not necessarily erase data already received by a provider.

Your rights and how to change your choice

Subject to the conditions in the GDPR, you can request access, correction, deletion, restriction and portability of your data, and object to processing based on legitimate interests. You can withdraw consent at any time without affecting the lawfulness of processing before withdrawal. To make a request, use the controller’s email above. We may ask for information needed to verify your identity.

You can also complain to the President of the Personal Data Protection Office in Poland (UODO) or your local supervisory authority. We do not use your report request to make solely automated decisions with legal or similarly significant effects.

Use Cookie settings to change browser categories; this is separate from withdrawing email or community consent. Rejecting optional categories does not remove report or PDF access.