Privacy policy

The controller of personal data is:

ITrust sp. z o.o.
ul. Tadeusza Kościuszki 22
87-600 Lipno, Poland

E-mail: zarzad@itrust.dev

The controller has not appointed a Data Protection Officer.

For matters related to the protection of personal data, you can contact the controller at the e-mail address above.

Depending on how you use the site, we may process:

Data provided by the user

• first and last name
• e-mail address
• phone number
• company name
• position or role
• the content of a message sent via the contact form or e-mail

Technical data

While using the website, the following information may also be processed automatically:

• IP address
• date and time of the visit
• the address of the requested page
• information about the web browser and operating system
• session identifiers and data related to the security of the service

We process personal data in order to:

• respond to an enquiry you have sent
• conduct correspondence
• prepare a commercial offer
• take steps toward concluding or performing a contract
• fulfil obligations arising from the law
• ensure the security and correct operation of the website
• keep statistics on the use of the service

Data is processed on the basis of:

• Article 6(1)(b) GDPR – steps taken prior to entering into a contract or performance of a contract
• Article 6(1)(c) GDPR – fulfilment of legal obligations
• Article 6(1)(f) GDPR – the legitimate interest of the controller, including:
  • conducting correspondence
  • handling the contact form
  • ensuring the security of IT systems
  • analysing how the website is used
  • pursuing or defending against claims

Data will be stored:

• until the correspondence is concluded and for the limitation period of any potential claims
• for the duration of the contract and the limitation period of claims arising from it
• for the period required by law (e.g. tax and accounting regulations)
• technical data and system logs – for the period necessary to ensure the security of the systems

Data may be shared with:

• entities authorised under the law
• IT service providers
• hosting service providers
• cloud infrastructure providers
• e-mail service providers
• e-mail delivery service providers
• law firms and accounting offices – where necessary to provide the services

The controller uses the services of processors that handle personal data, in particular:

• Vercel – website hosting and traffic analytics
• Microsoft Azure – cloud infrastructure used to provide the services
• Google Workspace – e-mail and document handling
• Twilio SendGrid – e-mail delivery

These entities process data solely on the basis of appropriate agreements and in accordance with applicable data protection regulations.

In connection with the use of IT infrastructure, e-mail and cloud service providers, data may be transferred to countries outside the European Economic Area, in particular to the United States.

Transfers take place only in accordance with the requirements of the GDPR and with appropriate safeguards, such as a European Commission adequacy decision (EU–US Data Privacy Framework) or standard contractual clauses.

Every person has the right to:

• access their data
• rectify their data
• erase their data
• restrict processing
• data portability
• object to the processing of their data
• lodge a complaint with the President of the Personal Data Protection Office

Providing personal data is voluntary, however not providing it may make it impossible to respond to an enquiry or to conclude a contract.

Personal data is not used for automated decision-making, including profiling.