Privacy policy

01 Data controller

The controller of personal data is IT Services Kamil Wieczorek, Północna 7A, 05-300 Brzóze, VAT ID PL8222355239 (the "Controller").

For any matter concerning the processing of personal data, please write to [email protected].

02 Scope and purposes of processing

Personal data is processed only to the extent necessary for the following purposes:

• Responding to an enquiry sent by email — legal basis: the legitimate interest of the Controller in conducting correspondence (Art. 6(1)(f) GDPR).
• Arranging and holding a consultation through the booking system — legal basis: steps taken at the request of the data subject prior to entering into a contract (Art. 6(1)(b) GDPR).
• Concluding and performing a service agreement — legal basis: necessity for the performance of a contract (Art. 6(1)(b) GDPR).
• Meeting tax and accounting obligations — legal basis: a legal obligation to which the Controller is subject (Art. 6(1)(c) GDPR).

03 Provision of data is voluntary

Providing personal data is voluntary but necessary in order to answer an enquiry, arrange a consultation or conclude an agreement. Without it, those purposes cannot be fulfilled.

04 Recipients of data

Personal data may be disclosed to the following categories of recipients:

• Providers of hosting and server infrastructure on which this website runs.
• Microsoft Ireland Operations Limited — for email services and the Microsoft Bookings scheduling system.
• Accounting and legal service providers — to the extent required to meet statutory obligations.
• Public authorities — solely in the cases provided for by law.

05 Transfers outside the EEA

Data is processed within the European Economic Area as a rule. Where Microsoft services are used, a transfer to a third country may take place on the basis of Standard Contractual Clauses approved by the European Commission or an adequacy decision.

06 Retention period

• Email correspondence — for as long as necessary to handle the matter, and no longer than 24 months from the last contact.
• Contract-related data — for the term of the agreement and until the limitation period for claims expires.
• Accounting records — for 5 years from the end of the tax year, as required by law.

07 Rights of the data subject

In connection with the processing of personal data, you have the following rights:

• The right of access to your data and to obtain a copy of it.
• The right to rectify inaccurate data or complete incomplete data.
• The right to erasure.
• The right to restriction of processing.
• The right to data portability.
• The right to object to processing based on legitimate interest.
• The right to lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland.

08 Cookies and analytics

This website does not use cookies for marketing, profiling or analytics. We do not use tools that track visitors across websites, which is why viewing the site does not require cookie consent.

The web server keeps standard access logs containing the IP address, the date and time of the request and browser information. Logs are used solely to keep the site secure and functioning correctly, on the basis of the Controller’s legitimate interest.

09 Third-party embedded content

The contact page can display a booking calendar provided by Microsoft Bookings. That element is loaded only after you explicitly click the button. Until you do, no request is made to the third-party service and no data is sent to it. Once the calendar loads, Microsoft’s privacy policy applies.

10 Changes to this policy

This policy may be updated following changes in legislation or in the scope of services provided. The date of the last modification is shown at the top of the document.