Privacy policy

1. General information

This privacy policy sets out the rules for processing personal data and using cookies in connection with the use of the itama.pl website.

The data controller is F.H.U. ITAMA Dariusz Niemczak, Starowiejska 16/2, 81-356 Gdynia, NIP 9581479203, REGON 222025985. Contact regarding personal data: email kontakt@itama.pl.

2. What data we collect

You provide your personal data to us via the contact form. The data collected is: name, email address, phone number and the message content.

For technical and security reasons, together with your submission we also record the IP address, browser information (user-agent) and the address of the subpage from which the form was sent.

If you order a service through the order form on an offer page, we additionally process: company name, NIP (tax ID), address, contact person details and the selected package, and, as confirmation of the order, also the approximate location and network determined from the IP address and the time of sending.

Providing your data is voluntary but necessary in order to get in touch.

3. Purpose of data processing

We process data in order to respond, conduct correspondence and prepare a service offer.

We process order data in order to conclude and perform the contract, issue invoices and keep accounting records, and to confirm that the order has been placed.

When providing services, e.g. managing social media channels, we use access data provided by the client solely to perform the contract and do not share it with other parties.

4. Legal basis

We process data on the basis of your consent (Art. 6(1)(a) GDPR) and our legitimate interest in responding to the enquiry and handling correspondence (Art. 6(1)(f) GDPR).

We process order data in order to conclude and perform the contract (Art. 6(1)(b) GDPR), to comply with tax and accounting obligations (Art. 6(1)(c) GDPR), and in our legitimate interest in confirming the order and establishing or defending claims (Art. 6(1)(f) GDPR).

5. Data retention period

We store data for as long as necessary to handle the enquiry and any further cooperation, and then until consent is withdrawn or an effective objection is raised.

We store order and contract data for the duration of the contract and, after it ends, until the limitation periods for claims expire. We keep accounting documents, including invoices, for 5 years from the end of the year in which the tax obligation arose.

6. Data recipients (processors)

We entrust data to trusted providers who process it solely on our instructions and for the operation of the site:

Hosting and CDN infrastructure provider - website hosting, content delivery (CDN), security and server-level traffic statistics; may process data outside the European Economic Area under Standard Contractual Clauses (SCC).

Database provider - stores submissions and orders sent via the forms on the site (servers in the European Union).

Email delivery provider - delivering notifications about a new form submission.

Google Ireland Ltd. - the Google Analytics analytics tool used for visit statistics; activated only after you give consent to analytics cookies.

Entities handling accounting and invoicing - to the extent of order data needed for settlements.

Some providers may process data outside the European Economic Area (including in the USA). The transfer takes place on the basis of Standard Contractual Clauses approved by the European Commission.

7. Traffic analytics and cookies

We track visit statistics in two ways: at the hosting level (via the hosting infrastructure provider), in aggregate and anonymously, without cookies and without identifying users, and optionally via Google Analytics (Google Ireland Ltd.), which uses cookies and only starts once you have consented to analytics cookies.

We divide cookies into categories: essential (they remember your consent choice and basic settings - without them the site won't work properly), analytics (visit statistics, including Google Analytics - activated only after your consent) and marketing (currently unused; if introduced, they will only activate after your consent).

You can change or withdraw your consent to cookies at any time in the settings of the cookie banner displayed on the site.

8. Your rights

You have the right to access your data, to rectify, erase, restrict the processing of and port it, to object to its processing, and to withdraw consent at any time.

You also have the right to lodge a complaint with the supervisory authority - the President of the Personal Data Protection Office (Stawki 2, 00-193 Warszawa).

Withdrawing consent does not affect the lawfulness of processing carried out before its withdrawal. We do not make decisions based solely on automated processing of data, including profiling.

9. Voluntary provision of data

Providing your data is voluntary but required in order to use the contact form.

In the case of an order, providing data is a condition for concluding the contract, and invoice data is required by tax law.

10. Privacy policy changes

This policy may be updated in connection with changes to the site or applicable legal regulations. The current version is always available on this subpage.

11. Contact

For matters related to the protection of personal data, contact us by email at: kontakt@itama.pl.