Privacy Policy
This Privacy Policy describes the rules for processing personal data and using cookies in connection with the use of the website and services provided by ITPER INTERNET SERVICES.
Data Controller
The controller of personal data is:
ITPER INTERNET SERVICES
VAT ID: 9532739176
REGON: 540641070
Main PKD: 62.10.B – Other software programming activities
PKD performed: 62.10.B, 62.20.B, 62.90.Z, 63.10.D, 63.91.Z, 73.11.Z
E-mail: kontakt@itper.pl
Address: company headquarters
For matters concerning personal data, you can contact the Controller at the e-mail address: kontakt@itper.pl.
The Controller has not appointed a Data Protection Officer (DPO), as there is no such obligation.
Scope of Processed Data
Depending on how you use the website and services, the Controller may process the following data:
Providing data is voluntary, but in many cases necessary for contact, quotation or service implementation.
- first and last name,
- company name,
- VAT ID (if applicable),
- e-mail address,
- phone number,
- IP address,
- device and browser technical data,
- correspondence data,
- accounting data (e.g. invoice details),
- data regarding ordered services (e.g. hosting, website, online store, SEO).
Purposes, Legal Bases and Data Processing Period
A) Contact via e-mail / form / phone
- Purpose: providing a response, preparing an offer, contact regarding services
- Legal basis: Art. 6(1)(f) GDPR (legitimate interest of the Controller)
- Processing period: until contact is completed and for the period necessary to secure any claims
B) Contract / IT service implementation
- Purpose: contract execution, settlements, contact, order handling
- Legal basis: Art. 6(1)(b) GDPR (contract performance)
- Processing period: for the duration of the contract and after its termination in accordance with legal obligations and limitation periods
C) Accounting and bookkeeping
- Purpose: issuing invoices, maintaining accounting documentation
- Legal basis: Art. 6(1)(c) GDPR (legal obligation)
- Processing period: for the period required by tax regulations (as a rule 5 years)
D) Defense and pursuit of claims
- Purpose: legal protection, potential claims
- Legal basis: Art. 6(1)(f) GDPR (legitimate interest of the Controller)
- Processing period: until claims expire
E) Own service marketing
- Purpose: direct marketing of own services
- Legal basis: Art. 6(1)(f) GDPR (legitimate interest of the Controller)
- Processing period: until objection is raised
F) Newsletter (if launched)
- Purpose: sending marketing information/newsletter
- Legal basis: Art. 6(1)(a) GDPR (consent)
- Processing period: until consent is withdrawn
Data Recipients
Data may be transferred to entities cooperating with the Controller only to the extent necessary to achieve the purposes, in particular:
The Controller does not sell personal data.
- hosting / server / domain providers,
- e-mail and communication tool providers,
- accounting firms / bookkeeping offices,
- analytical and marketing service providers (e.g. statistics, advertising),
- subcontractors (e.g. graphic designer, programmer) – if necessary to complete the order.
Transfer of Data Outside the EEA
Due to the use of IT tools (e.g. Google, Meta, Microsoft), data may be transferred outside the European Economic Area (e.g. to the USA). In such cases, data transfer takes place with the required safeguards, in particular standard contractual clauses (SCC).
Rights of the Data Subject
Every person whose data is processed has the right to:
To exercise your rights, please contact the Controller: kontakt@itper.pl.
- access to data,
- rectification of data,
- erasure of data ("right to be forgotten") – if there is no basis for further processing,
- restriction of processing,
- data portability,
- objection to data processing based on legitimate interest (Art. 6(1)(f) GDPR),
- withdrawal of consent (if processing is based on consent),
- lodging a complaint with the President of the Personal Data Protection Office (UODO).
Automated Decision-Making and Profiling
The Controller may use marketing and analytical tools that may create a user profile (e.g. for advertising purposes), however the Controller does not make decisions in a solely automated manner that would produce legal effects concerning the user or similarly significantly affect them.
Cookies and Technical Data
Cookies are small text files stored on the user's device while using the website. They are used, among others, for the proper functioning of the website, statistics and marketing.
The Controller may use necessary cookies (essential for website operation), analytical cookies (for statistics and improving website performance) and marketing cookies (for advertising and measuring campaign effectiveness).
The user can change cookie settings in the browser, delete existing cookies or restrict or block cookie storage. Blocking cookies may affect some website functions.
Server Logs
Using the website involves sending queries to the server. Server logs may record, among others, the IP address, date and time of the event, browser and system information, and the entry/exit page address. This data is used for server administration, security and diagnostics.
Data Security
The Controller applies technical and organizational measures ensuring the protection of personal data, including in particular communication encryption (SSL), data access control, security backups, and system and security updates.
Changes to the Privacy Policy
The Controller may update the Privacy Policy, e.g. in case of technological, legal or organizational changes. The new version will be published on the website.
Contact
For matters concerning personal data and privacy, please contact: