Privacy and cookie policy

Last updated: 19 July 2026

1. Data controller

The controller of your personal data is Markol FUH, 41-300 Dąbrowa Górnicza, Piłsudskiego 31/12, e-mail: admin@auditwcag.eu. You can reach us at admin@auditwcag.eu for any privacy-related matters.

2. What data we process and why

  • URL of the scanned page — required to deliver the service (accessibility scan, PDF report). Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
  • E-mail address — the one you provide at checkout (Stripe) is used to send you the report link and a notification if your order fails (legal basis: performance of a contract, Art. 6(1)(b) GDPR); if you additionally leave it voluntarily in the “notify me” form — based on your consent (Art. 6(1)(a) GDPR).
  • Payment data — handled by Stripe; we never store card numbers. From Stripe we receive only the transaction confirmation (session ID, status, amount). Legal basis: performance of a contract.
  • Technical data (IP address, browser type, request time) — scan rate limits, service security, error diagnostics. Legal basis: the controller's legitimate interest (Art. 6(1)(f) GDPR).

3. Cookies and similar technologies

The service uses the following mechanisms:

  • the lang cookie — remembers your chosen interface language (12 months). Strictly necessary for the service to work; no consent required.
  • localStorage awc_consent — remembers your consent banner decision (accept or reject).
  • localStorage awc_conv_fired — prevents counting the same ad conversion more than once.
  • Google Ads / gtag.js — the Google tag runs in restricted mode (Consent Mode v2): without consent no marketing cookies are stored, and only anonymous pings about the consent state are sent to Google. Only after you choose “Accept all” are the ad_storage, ad_user_data, ad_personalization and analytics_storage signals enabled, allowing Google to measure ad performance. You can change your decision at any time via the “Manage cookies” link in the footer.

4. Data recipients

  • Stripe, Inc. — payment processor for the full report.
  • Google Ireland Ltd. — ad performance measurement, only after consent is given.
  • Hosting provider — the server the service runs on.

5. Retention period

Scan results and orders are kept for the period necessary to deliver the service, handle complaints and meet tax and accounting obligations. PDF report download links expire 7 days after generation (extension available on request). Technical data used by the rate-limit mechanisms is deleted automatically when the limit window elapses.

6. Your rights

You have the right to access your data, rectify it, erase it, restrict its processing, data portability, and to object to processing based on legitimate interest. You may withdraw your consent to marketing cookies at any time (the “Manage cookies” link in the footer) — withdrawal does not affect the lawfulness of processing carried out before it. You also have the right to lodge a complaint with a supervisory authority (in Poland: the President of the Personal Data Protection Office).

7. Changes to this policy

We will announce significant changes on this page with reasonable advance notice. The current version of this document is always available at this address.