Privacy policy
Effective from: 27.10.2026. Covers the cohaos.com website, the Founding Studios and Immersive forms, sign-ups for the demo at the Warsaw Home stand, demo accounts in the Cohaos app, and the “Cohaos - Do pracowni” Chrome extension.
01 · Data controller
The controller of your data is LEOVES MEDIA GROUP sp. z o.o., ul. Jana Kilińskiego 15/17, 26-600 Radom, Poland, tax ID (NIP) 7963024989, KRS 0001089141, owner of the Cohaos brand. For anything related to your data, write to [email protected].
02 · What data we collect
- From the Founding Studios form: first name, work e-mail, studio name, city, team size, areas of interest, your answer to the open question and your Founding code, if you provide one.
- From the Immersive form, additionally: 3D tools, number of headsets, where you hold presentations, number of projects and planned start date.
- Signing up for the VR demo at the stand has a separate data notice, available next to the sign-up form.
- Technical data: IP address and browser type, recorded in the server logs and by the website protection service.
- Visit statistics: pages visited, the page you came from, browser and device type, country and page load time, collected by Cloudflare Web Analytics without cookies.
- Email measurement: whether an email from us was opened and whether a link was clicked.
- In a demo account: when you activate the account and sign in, which features you open and what you do in them (e.g. the sample project, the project wizard, the client portal, pricing, going to payment), with date, time and device type (phone, tablet, computer). We do not record the content of your projects or your clients' data.
03 · Purposes and legal basis
- Responding to your application, talking with you and preparing the pilot: steps taken prior to entering into a contract, Art. 6(1)(b) GDPR.
- Running the pilot: performance of a contract, Art. 6(1)(b) GDPR.
- Information about Cohaos sent by e-mail: your consent, Art. 6(1)(a) GDPR. You can withdraw your consent at any time.
- Visit and website speed statistics (Cloudflare Web Analytics, no cookies, we only see aggregate results): our legitimate interest, Art. 6(1)(f) GDPR. You can object or block the script in your browser.
- Measuring email opens and link clicks (a small image in the email and a link redirect through our server), which we view in aggregate to improve our communication: our legitimate interest, Art. 6(1)(f) GDPR. You can block images in your email app.
- Steps in a demo account, which we look at to help you during the demo (e.g. to get in touch if you stop at payment) and to improve the app: our legitimate interest, Art. 6(1)(f) GDPR. You can object by writing to the address in section 01.
- Accounting and tax obligations: Art. 6(1)(c) GDPR.
- Defence against claims: our legitimate interest, Art. 6(1)(f) GDPR.
04 · How long we keep data
We keep sign-up data for up to 12 months from the last contact or until you withdraw consent. Pilot agreement data for the term of the agreement and until claims become time-barred. Invoice data for 5 years from the end of the year in which the invoice was issued. Visit statistics are available in the Cloudflare dashboard for up to 6 months, in aggregate form. We keep demo account steps for up to 120 days.
05 · Who we share data with
Only to companies that help us operate: the hosting company whose server runs the website, Cloudflare (network, protection, speed and visit statistics), the e-mail provider we use to reply to sign-ups, and SMSAPI if we send a text message. Each of them processes data on our instructions. If a provider transfers data outside the European Economic Area (e.g. Cloudflare to the USA), we rely on the European Commission's decision (EU-US Data Privacy Framework) or its standard contractual clauses.
06 · Your rights
You have the right to access your data, to have it rectified or erased, to restrict its processing, to data portability, to object and to withdraw your consent. You can lodge a complaint with the President of the Personal Data Protection Office (UODO). Providing your data is voluntary, but without it we cannot respond to your application. We do not make decisions by automated means.
07 · “Cohaos - Do pracowni” Chrome extension
The extension works only when you click its icon on an online shop page. It then reads product data from that single page (name, price, image, variant, manufacturer code, availability and page address) and passes it to the Cohaos app window, where a person from the studio decides whether to save the product to a project. The extension does not track the pages you visit, does not read other tabs, does not collect personal data and does not share data with anyone other than Cohaos. Saved products are processed like other project data, under the terms of this policy.
08 · Changes
We will announce any changes to this policy on this page. The current version is dated at the top.