Privacy policy.
Introduction
This Privacy Policy describes the rules for processing and protecting personal data provided by Users in connection with using the IT Solutions website.
Data controller
The controller of your personal data is IT Solutions Dawid Zmarzlak (Tax ID: 7133119904), based at Warszawa, PL. For any matter related to personal-data protection, contact us at kontakt@itsolutionsdz.pl.
What data we collect
We collect the following categories of data:
- •Contact data (name, email, phone) - when you fill out contact forms
- •Technical data (IP address, browser type, operating system) - automatically while browsing the site
- •Site usage data (pages visited, time spent on site) - through cookies
- •Communication content - when you contact us
Purposes of data processing
We process your data for the following purposes:
- •Responding to inquiries and correspondence
- •Preparing quotes and offers
- •Analyzing site traffic and improving functionality
- •Marketing our services (with your consent)
- •Fulfilling legal obligations
Legal basis
We process your data based on:
- •Your consent (Article 6(1)(a) GDPR)
- •Necessity to perform a contract (Article 6(1)(b) GDPR)
- •Legal obligation (Article 6(1)(c) GDPR)
- •Legitimate interest of the administrator (Article 6(1)(f) GDPR)
Recipients of your data
We may share your data with trusted processors under data-processing agreements (Art. 28 GDPR):
- •Google Ireland Limited / Google LLC — analytics tooling (Google Analytics) with IP anonymisation
- •Our hosting and application-server provider, including backups
- •Email/SMTP provider used to handle correspondence
- •Cloudflare, Inc. — form protection against automated abuse (Turnstile)
Transfers outside the EEA
Some of our processors (e.g. Google, Cloudflare) are based in the United States. Transfers outside the European Economic Area rely on Standard Contractual Clauses (SCCs) approved by the European Commission and, where applicable, on an adequacy decision (Data Privacy Framework). You can request a copy of the safeguards in place by writing to our contact address.
Data retention period
We retain your data only as long as necessary for the relevant purpose: contact correspondence and briefs — up to 24 months from the last contact; billing data (invoices, contracts) — for the period required by tax and accounting law (typically 5 years from the end of the fiscal year); Google Analytics statistics — up to 14 months.
Your rights
Under GDPR, you have the following rights:
- •Right to access your data
- •Right to rectification of data
- •Right to erasure (right to be forgotten)
- •Right to restriction of processing
- •Right to data portability
- •Right to object to processing
- •Right to withdraw consent at any time
Complaint to a supervisory authority
If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes UODO): ul. Stawki 2, 00-193 Warsaw, Poland — https://uodo.gov.pl.
Voluntary nature of the data
Providing your personal data is voluntary, but in many cases necessary to receive a reply, prepare a quote, or conclude and perform a contract. Failing to provide the data may mean we cannot get back to you.
Profiling and automated decision-making
We do not subject you to automated decision-making, including profiling, that would produce legal effects concerning you or similarly significantly affect you.
Data security
We apply appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or destruction.
Contact
For any data-protection question, contact the controller (IT Solutions Dawid Zmarzlak):