Privacy policy

1. Data controller

The controller of personal data is KODiSEO, Chrobrego 4/7, 14-100 Ostróda, Poland, Polish tax identification number (NIP): 7411908934, email: [email protected], telephone: +48 575 995 271.

For matters relating to the processing of personal data, please contact [email protected].

2. Scope and purposes of processing

The controller processes personal data provided by clients, prospective clients and people contacting the controller about its services.

The data may include, in particular: first and last name; telephone number; email address; company and invoicing details; the content of enquiries, arrangements and correspondence; and other data necessary to perform the service.

The data is processed for: contact before entering into a contract; entering into and performing a contract; issuing accounting documents; handling complaints and pursuing claims; and the controller’s legitimate interests, such as archiving correspondence or defending against claims.

3. Legal bases for processing

Personal data is processed under Article 6(1)(b) GDPR where necessary to take steps before entering into a contract or to perform a contract; Article 6(1)(c) GDPR where necessary to comply with a legal obligation, particularly accounting and tax obligations; and Article 6(1)(f) GDPR where necessary for the controller’s legitimate interests.

4. Recipients of data

Personal data may be shared with parties supporting the controller’s business, particularly email providers; hosting and IT service providers; communication and customer service tool providers; an accounting firm; and law firms or debt recovery providers where necessary.

Personal data will not be sold to third parties.

5. Data retention

Data processed to enter into or perform a contract is kept for the period needed to perform the contract and subsequently for the period required by law and applicable limitation periods for claims.

Data in accounting documents is kept for the period required by tax and accounting regulations.

Correspondence about enquiries may be kept for the period needed to handle the contact and subsequently for a period justified by protection against claims.

6. Your rights

The data subject has the right to access and rectify their data; to erasure in the circumstances provided by law; to restriction of processing; to data portability where automated processing is based on a contract or consent; to object to processing based on legitimate interests; and to lodge a complaint with the President of the Polish Personal Data Protection Office (UODO).

7. Providing data is voluntary

Providing data is voluntary, but in many cases is necessary to respond, prepare a quotation, enter into a contract or perform a service.

8. Sources of data

The controller receives personal data directly from the data subject or from the entity on whose behalf that person acts.

Where contact is made through platforms connecting clients with service providers, data may also come from those platforms to the extent shared by the user.

9. Automated decision-making

Personal data is not used for automated decision-making that produces legal effects concerning the data subject.

10. Cookies and technical data

Where the controller operates its own website, it may process basic technical data, such as IP addresses, server logs, device identifiers or session data, to ensure security and the correct functioning of the website.

Detailed cookie rules may additionally be described on the controller’s website, where one is operated.

11. Final provisions

This privacy policy takes effect on the date stated at the beginning of the document.

The controller may update this policy where required by changes in the law, the way services are provided or the scope of data processing.