The controller of your personal data is:
For matters related to personal data processing, please write directly to rodo@strefa-it.pl.
We only process data that is necessary to achieve specific purposes. Below is a summary of collected data by source:
Providing data is voluntary, but necessary — respectively — to answer your enquiry, conduct correspondence, or conclude and perform an agreement.
Data processing is carried out exclusively on the following legal bases:
- Art. 6(1)(a) GDPR — consent of the data subject (e.g., newsletter, analytical cookies).
- Art. 6(1)(b) GDPR — necessity for the performance of a contract or taking steps prior to entering into a contract (order processing, service delivery).
- Art. 6(1)(c) GDPR — compliance with a legal obligation (tax regulations, accounting requirements, obligation to retain invoices).
- Art. 6(1)(f) GDPR — legitimate interests of the controller (website security, pursuing claims, direct marketing to clients).
Personal data is not subject to automated decision-making, including profiling.
Personal data is retained for the period necessary to fulfill the purposes for which it was collected:
Personal data may be shared with the following categories of recipients:
- IT and hosting service providers (servers, email) — based on a data processing agreement.
- Accounting office / bookkeeping — to the extent necessary for tax settlements.
- Payment operators and banks — to the extent necessary for transaction processing.
- Courier companies / freight forwarding — to the extent necessary for goods delivery.
- Public authorities — solely on the basis of a legal obligation (e.g., Tax Office).
We do not sell or share personal data with third parties for marketing purposes.
The website uses cookies — small text files stored on the user's device. We distinguish the following categories:
You can manage cookie settings via the banner displayed on your first visit or by changing your browser settings. Withdrawing consent for analytical cookies will not affect the functioning of the website.
You have the following rights regarding the protection of your personal data:
Right of access (Art. 15)
You can obtain confirmation of whether we process your data and receive a copy of it.
Right to rectification (Art. 16)
You can request the correction of inaccurate data or the completion of incomplete data.
Right to erasure (Art. 17)
You can request the deletion of data when it is no longer necessary for the purposes for which it was collected.
Right to restriction (Art. 18)
You can request the restriction of data processing in certain cases provided for by GDPR.
Right to portability (Art. 20)
You can receive your data in a structured format or request its transfer to another controller.
Right to object (Art. 21)
You can object to data processing based on the legitimate interests of the controller.
Where processing is based on consent, you may withdraw it at any time — without affecting the lawfulness of processing carried out before withdrawal. To exercise the above rights, write to rodo@strefa-it.pl. We respond without undue delay, at the latest within one month (extendable by two further months for particularly complex requests, of which we will inform you).
As a rule, we do not transfer personal data to countries outside the European Economic Area (EEA). When using analytical tools (e.g., Google Analytics), data may be processed by providers based in the USA — solely on the basis of standard contractual clauses approved by the European Commission or an adequacy decision.
If you believe that the processing of your personal data violates GDPR provisions, you have the right to lodge a complaint with the supervisory authority:
This privacy policy may be updated in the event of legal or technical changes. We will notify you of significant changes through a clear notice on the website or via email.
Have questions about privacy?
Contact us — we'll respond within 24 hours on business days.