Legal document
Our
privacy policy
This Privacy Policy sets out the rules for processing and protecting the personal data of people who use the cyfrowapomoc.pl website and the services provided by Cyfrowa Pomoc s.c. We act in accordance with the GDPR (EU Regulation 2016/679) and Polish personal data protection law.
General information
Last updated: 12 May 2026
Data controller
The controller of your personal data is:
- Full controller details
- Cyfrowa Pomoc s.c. Jakub Czernic, Hubert Kicia
- Królowej Jadwigi 14 lok. 81
- 20-282 Lublin, Lubelskie Province
- Tax ID (NIP): 9462747436
- REGON: 540212630
- Email: kontakt@cyfrowapomoc.pl
- Phone: +48 887-831-588
You can contact us on any matter concerning the processing of your personal data. We reply within 30 days (Article 12(3) GDPR).
What data we collect
Depending on the purpose, we process the following categories of personal data:
Contact data: first name, surname, email address, phone number (from contact forms and the quote calculator).
Company data: company name, address, tax ID (NIP), REGON (when concluding commercial contracts).
Technical data: IP address, browser identifier, operating system, approximate location (from cookies and server logs).
Activity data: pages visited, time spent on the website, clicks (from Google Analytics 4).
Content of correspondence: when you write to us by email, through a form or via messaging apps (Messenger, WhatsApp).
Purposes and legal bases of processing
We process your data for the following purposes:
Responding to enquiries and handling contact. Basis: Article 6(1)(b) GDPR (steps taken at the request of the data subject prior to entering into a contract).
Performance of contracts and provision of services. Basis: Article 6(1)(b) GDPR.
Tax and accounting obligations. Basis: Article 6(1)(c) GDPR (legal obligation).
Establishment, exercise or defence of claims. Basis: Article 6(1)(f) GDPR (legitimate interest).
Website statistics and analytics. Basis: Article 6(1)(f) GDPR (legitimate interest in improving the website).
How long we keep data
Data from contact forms: 12 months from the last contact (if no contract was concluded).
Data from commercial contracts: 5 years from the end of the year in which the last accounting document was issued (tax obligation).
Technical data (logs, cookies): up to 24 months.
Data in GA4: 14 months by default.
Who we share data with
Your data may be shared with entities we work with to provide our services, only to the extent necessary and on the basis of data processing agreements (Article 28 GDPR):
The operator of the server on which the website and the contact form run (OVH, data centre in Poland). Messages from the form go to our email inbox on the same server.
Google LLC: for Google Analytics 4, Google Search Console and Google Ads (transfer to the USA on the basis of standard contractual clauses).
Meta Platforms: when you contact us via Messenger / Facebook Ads.
Accounting office: for tax obligations.
Payment operators and couriers: when fulfilling orders.
Authorised public authorities: at their request, to the extent required by law.
Your rights
In connection with the processing of your data, you have the following rights:
Right of access to your data (Article 15 GDPR): you have the right to know what data about you we process.
Right to rectification (Article 16 GDPR): you have the right to correct inaccurate data.
Right to erasure (the “right to be forgotten”, Article 17 GDPR): in cases provided for by law.
Right to restriction of processing (Article 18 GDPR).
Right to data portability (Article 20 GDPR): you can receive your data in a machine-readable format (CSV, JSON).
Right to object to processing (Article 21 GDPR): in particular to direct marketing.
Right to withdraw consent at any time: without affecting the lawfulness of processing before withdrawal.
Right to lodge a complaint with the President of the Personal Data Protection Office (uodo.gov.pl) if you believe that we process data unlawfully.
To exercise any of these rights, write to kontakt@cyfrowapomoc.pl. We will reply within 30 days.
Cookies
Our website uses cookies: small text files stored in your browser. We use:
Essential cookies: required for the website to work (session, language preferences, basket). They do not require consent.
Analytics cookies: Google Analytics 4 for measuring traffic and optimising the website. They require consent.
Marketing cookies: Google Ads, Meta Pixel for remarketing and measuring ad effectiveness. They require consent.
Social media cookies: Facebook, Instagram, LinkedIn buttons. They require consent.
You can manage cookies at any time in your browser settings (Chrome, Firefox, Safari, Edge) or through the cookie banner shown on your first visit to the website.
Data security
We apply appropriate technical and organisational measures to ensure the security of your data:
Encrypted SSL/TLS (HTTPS) connection across the whole website.
Regular database backups (daily, kept for at least 30 days).
Software and plugin updates.
Limited staff access to data: only to the extent necessary to perform their tasks.
Monitoring of unauthorised access attempts.
A procedure for reporting personal data breaches to the Personal Data Protection Office (UODO) within 72 hours.
Transfers of data outside the EEA
Some of the tools we use (Google, Meta, Cloudflare) process data in third countries, including the USA. The transfer takes place on the basis of:
The EU-U.S. Data Privacy Framework: in the case of Google and Meta.
Standard Contractual Clauses (SCC) approved by the European Commission.
Appropriate technical safeguards (encryption, anonymisation).
Changes to the privacy policy
This policy may be updated in the event of changes in the law, new services or tools. We will notify you of significant changes 14 days in advance by email (if you have given us your address) or by a notice on the website. The current version is always available at this URL.
Questions about this document
Write to us or call, and we will answer in plain language, without referring you to further clauses.