1. Data Controller

The controller of personal data collected through the website openarca.com is:

Visio Lab Sp. z o.o.

ul. Rydzowa 8/42, 91-211 Łódź, Poland

NIP: 725-230-48-78

KRS: 0000875935

Website: visiolab.pl

Contact: hello@openarca.com

2. What Data We Collect

We do not collect personally identifiable information directly through forms on this website (the enterprise waitlist form is not yet active). However, the analytics and tracking tools described below may collect the following categories of data automatically:

IP address (anonymised where applicable)
Browser type and version
Operating system
Pages visited, time spent, navigation paths
Referring URL
Device type and screen resolution
Mouse movements, clicks, and scrolling behaviour (Microsoft Clarity)
Session recordings and heatmaps (Microsoft Clarity)

3. Analytics and Tracking Tools

3.1 Google Analytics 4 (GA4)

We use Google Analytics 4, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. GA4 collects data about your visits to this website and sends it to Google servers, which may be located in the United States or other countries.

GA4 uses cookies and similar technologies to analyse how visitors interact with our website. IP addresses are anonymised by default in GA4. Data is processed on the basis of our legitimate interest (Article 6(1)(f) GDPR) in understanding website traffic and improving the service.

Google is certified under the EU-US Data Privacy Framework, providing an adequate level of protection for data transfers to the USA. For more information, see Google's Privacy Policy at policies.google.com/privacy.

You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

3.2 Microsoft Clarity

We use Microsoft Clarity, a behavioural analytics tool provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA. Clarity records anonymised session replays, generates heatmaps, and analyses user interactions to help us improve the website's usability.

Clarity may collect mouse movements, clicks, scroll depth, and page navigation. Data is processed on the basis of our legitimate interest (Article 6(1)(f) GDPR). Microsoft may store data on servers outside the European Economic Area. Microsoft is certified under the EU-US Data Privacy Framework.

For more information, see Microsoft's Privacy Statement at privacy.microsoft.com. You can opt out of Clarity at choice.microsoft.com.

3.3 Google Search Console

We use Google Search Console to monitor the website's presence in Google Search results. Google Search Console does not collect personal data of website visitors — it provides aggregated statistics about search queries and indexing status. Data is processed by Google on our behalf to help us maintain and improve the site's search visibility.

4. Cookies

This website uses cookies — small text files stored in your browser. The following cookies may be set:

Cookie	Provider	Purpose	Duration
_ga	Google Analytics	Distinguishes unique users	2 years
_ga_*	Google Analytics	Maintains session state	2 years
_clck	Microsoft Clarity	Persists Clarity user ID	1 year
_clsk	Microsoft Clarity	Connects page views within a session	1 day
CLID	Microsoft Clarity	Identifies the first visit	1 year
MR	Microsoft Clarity	Indicates whether to refresh MUID	7 days

You can manage or delete cookies through your browser settings. Note that disabling cookies may affect the functionality of some features of this website.

5. Legal Basis for Processing

We process data under the following legal bases (Article 6 GDPR):

Legitimate interest (Art. 6(1)(f) GDPR) — analytics and website improvement via Google Analytics and Microsoft Clarity.
Legal obligation (Art. 6(1)(c) GDPR) — compliance with applicable law, including tax and accounting obligations.

6. Data Retention

Analytics data collected via Google Analytics is retained for 14 months by default (as configured in GA4 settings). Microsoft Clarity session data is retained for 30 days. We review and may shorten these periods periodically.

7. International Data Transfers

Google LLC and Microsoft Corporation are based in the United States. Data transfers to these companies are governed by Standard Contractual Clauses (SCCs) approved by the European Commission and/or the EU-US Data Privacy Framework, ensuring an adequate level of protection for your personal data.

8. Your Rights under GDPR

As a data subject, you have the following rights:

Right of access (Art. 15) — obtain confirmation of whether we process your data and receive a copy.
Right to rectification (Art. 16) — request correction of inaccurate data.
Right to erasure (Art. 17) — request deletion of your data ("right to be forgotten").
Right to restriction (Art. 18) — request that we limit how we process your data.
Right to data portability (Art. 20) — receive your data in a structured, machine-readable format.
Right to object (Art. 21) — object to processing based on legitimate interest, including for direct marketing.
Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise your rights, contact us at hello@openarca.com. We will respond within 30 days.

You also have the right to lodge a complaint with the supervisory authority in your country. In Poland, this is the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl. In other EU member states, the competent supervisory authority is the one in your country of habitual residence.

9. Data Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or destruction. These include HTTPS encryption for all data transmitted to and from this website, and the use of trusted third-party services with their own robust security practices.

10. Links to Third-Party Websites

This website contains links to third-party websites (e.g. GitHub). We are not responsible for the privacy practices of those websites. We encourage you to review their privacy policies before providing any personal data.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The date of the latest revision is indicated at the top of this page. We encourage you to review this policy periodically.

12. Contact

For any questions regarding this Privacy Policy or to exercise your data subject rights, please contact us:

Visio Lab Sp. z o.o.

ul. Rydzowa 8/42, 91-211 Łódź, Poland

Email: hello@openarca.com

Website: visiolab.pl