1. Scope
This policy covers go-solutions.org, inquiry forms, user-activated chat, consent-gated analytics and pre-contract contact. After an engagement is accepted, identity data and documents are collected through a separate secure channel. If that stage involves additional purposes, data categories or recipients, the relevant privacy information is provided before that stage begins.
2. Data categories
- contact data: email, name and optional telephone;
- inquiry data: tax residence, planned activity, owner count, timing and document needs;
- technical data: IP address, logs, security identifiers, browser/device information;
- Chat conversation content — only after the user starts chat;
- cookieless Matomo data — only after analytics consent.
Public forms do not request passports, ID cards, SSN/ITIN, national identifiers, full ownership records or document scans.
3. Purposes and legal bases
| Process | Purpose | Basis where GDPR applies | Retention criterion |
|---|---|---|---|
| Website and logs | Security, diagnostics and availability | Art. 6(1)(f) legitimate interests | normally up to 30 days, longer for an incident |
| Inquiry / qualification | Response and pre-contract steps | Art. 6(1)(b); Art. 6(1)(f) where supplementary | up to 12 months after closure unless a contract or claim follows |
| User-requested chat | Conversation support | Art. 6(1)(b) or (f), depending on content | up to 12 months unless part of a contract/claim |
| Matomo | Usage measurement and improvement | consent under Art. 6(1)(a) and applicable terminal-equipment rules | up to 14 months or withdrawal, subject to the active Matomo configuration |
| Contract and filing | Deliver scope, accounts and claims | Art. 6(1)(b), (c) and (f) | contract term plus statutory record and limitation periods |
4. Recipients and providers
- FormSubmit — technical transmission of forms to office@go-solutions.org;
- Chat provider — technical delivery of the conversation only after a click;
- self-hosted Matomo at analytics.go-solutions.org — only after consent;
- self-hosted/Synology and mail infrastructure in Poland, with RackNerd reverse proxy/VPS;
- Google Search Console — aggregated search visibility data, without an embedded tracker;
- Google Maps — only after “Load map” is clicked;
- after engagement and only as required: Wyoming Registered Agent Services LLC, Wyoming Secretary of State, IRS, notary, translator, courier, accountant, adviser or independent lawyer.
Stripe, PayPal, Brevo and advertising platforms are not described as active because they are not embedded in the current public site.
5. United States and transfers
The controller is established in the United States and some recipients may process data outside the EEA. Where GDPR applies to a transfer, the controller determines the recipient-specific mechanism under Chapter V GDPR — in particular an adequacy decision where it covers the recipient, or standard contractual clauses together with a transfer assessment. Article 49 derogations are not treated as a routine basis for recurring transfers. Information about safeguards applicable to a particular recipient may be requested by email.
6. Required and optional data
Providing form data is voluntary, but an email and basic purpose are needed to reply. Analytics consent is optional and does not affect contact functions.
7. Rights
Where GDPR applies, you may request access, correction, deletion, restriction and portability, object, and withdraw consent without affecting prior processing. You may complain to the competent supervisory authority. Send requests to office@go-solutions.org.
8. Security and minimisation
Do not send identity documents, tax numbers, passwords or card details through a form or chat. After engagement, secure onboarding instructions are provided. Access is restricted to people and partners needed for the relevant process.
9. Automated decisions and marketing
The site does not make solely automated decisions with legal or similarly significant effects. The public site does not run advertising profiling or a marketing newsletter.
10. Updates
Version: 6 August 2026. Provider, form or onboarding changes require a policy update before launch.