GDPR

Privacy Policy

This Privacy Policy describes the rules for processing personal data and using cookies in connection with the use of the website and services provided by ITPER INTERNET SERVICES.

1

Data Controller

The controller of personal data is:

ITPER INTERNET SERVICES

VAT ID: 9532739176

REGON: 540641070

Main PKD: 62.10.B – Other software programming activities

PKD performed: 62.10.B, 62.20.B, 62.90.Z, 63.10.D, 63.91.Z, 73.11.Z

E-mail: kontakt@itper.pl

Address: company headquarters

For matters concerning personal data, you can contact the Controller at the e-mail address: kontakt@itper.pl.

The Controller has not appointed a Data Protection Officer (DPO), as there is no such obligation.

2

Scope of Processed Data

Depending on how you use the website and services, the Controller may process the following data:

Providing data is voluntary, but in many cases necessary for contact, quotation or service implementation.

  • first and last name,
  • company name,
  • VAT ID (if applicable),
  • e-mail address,
  • phone number,
  • IP address,
  • device and browser technical data,
  • correspondence data,
  • accounting data (e.g. invoice details),
  • data regarding ordered services (e.g. hosting, website, online store, SEO).
3

Purposes, Legal Bases and Data Processing Period

A) Contact via e-mail / form / phone

  • Purpose: providing a response, preparing an offer, contact regarding services
  • Legal basis: Art. 6(1)(f) GDPR (legitimate interest of the Controller)
  • Processing period: until contact is completed and for the period necessary to secure any claims

B) Contract / IT service implementation

  • Purpose: contract execution, settlements, contact, order handling
  • Legal basis: Art. 6(1)(b) GDPR (contract performance)
  • Processing period: for the duration of the contract and after its termination in accordance with legal obligations and limitation periods

C) Accounting and bookkeeping

  • Purpose: issuing invoices, maintaining accounting documentation
  • Legal basis: Art. 6(1)(c) GDPR (legal obligation)
  • Processing period: for the period required by tax regulations (as a rule 5 years)

D) Defense and pursuit of claims

  • Purpose: legal protection, potential claims
  • Legal basis: Art. 6(1)(f) GDPR (legitimate interest of the Controller)
  • Processing period: until claims expire

E) Own service marketing

  • Purpose: direct marketing of own services
  • Legal basis: Art. 6(1)(f) GDPR (legitimate interest of the Controller)
  • Processing period: until objection is raised

F) Newsletter (if launched)

  • Purpose: sending marketing information/newsletter
  • Legal basis: Art. 6(1)(a) GDPR (consent)
  • Processing period: until consent is withdrawn
4

Data Recipients

Data may be transferred to entities cooperating with the Controller only to the extent necessary to achieve the purposes, in particular:

The Controller does not sell personal data.

  • hosting / server / domain providers,
  • e-mail and communication tool providers,
  • accounting firms / bookkeeping offices,
  • analytical and marketing service providers (e.g. statistics, advertising),
  • subcontractors (e.g. graphic designer, programmer) – if necessary to complete the order.
5

Transfer of Data Outside the EEA

Due to the use of IT tools (e.g. Google, Meta, Microsoft), data may be transferred outside the European Economic Area (e.g. to the USA). In such cases, data transfer takes place with the required safeguards, in particular standard contractual clauses (SCC).

6

Rights of the Data Subject

Every person whose data is processed has the right to:

To exercise your rights, please contact the Controller: kontakt@itper.pl.

  • access to data,
  • rectification of data,
  • erasure of data ("right to be forgotten") – if there is no basis for further processing,
  • restriction of processing,
  • data portability,
  • objection to data processing based on legitimate interest (Art. 6(1)(f) GDPR),
  • withdrawal of consent (if processing is based on consent),
  • lodging a complaint with the President of the Personal Data Protection Office (UODO).
7

Automated Decision-Making and Profiling

The Controller may use marketing and analytical tools that may create a user profile (e.g. for advertising purposes), however the Controller does not make decisions in a solely automated manner that would produce legal effects concerning the user or similarly significantly affect them.

8

Cookies and Technical Data

Cookies are small text files stored on the user's device while using the website. They are used, among others, for the proper functioning of the website, statistics and marketing.

The Controller may use necessary cookies (essential for website operation), analytical cookies (for statistics and improving website performance) and marketing cookies (for advertising and measuring campaign effectiveness).

The user can change cookie settings in the browser, delete existing cookies or restrict or block cookie storage. Blocking cookies may affect some website functions.

9

Server Logs

Using the website involves sending queries to the server. Server logs may record, among others, the IP address, date and time of the event, browser and system information, and the entry/exit page address. This data is used for server administration, security and diagnostics.

10

Data Security

The Controller applies technical and organizational measures ensuring the protection of personal data, including in particular communication encryption (SSL), data access control, security backups, and system and security updates.

11

Changes to the Privacy Policy

The Controller may update the Privacy Policy, e.g. in case of technological, legal or organizational changes. The new version will be published on the website.

12

Contact

For matters concerning personal data and privacy, please contact: