Privacy Policy
Last updated: September 16, 2026
1. Data Controller
The controller of personal data processed in connection with the use of the innowacje4it.pl website is:
Innowacje 4 IT Sp. z o.o.
Registered office: Sierosław 129, 97-310 Sierosław, Poland
KRS (National Court Register): 0001195941
Tax ID (NIP): 7712940453
REGON: 542794598
Contact e-mail: kontakt@innowacje4it.pl
Phone: +48 573 213 444
For any matters related to the processing of personal data, you can contact the Controller using the details above.
2. What data we process and why
| Purpose of processing | Scope of data | Legal basis (GDPR) |
|---|---|---|
| Responding to inquiries sent by phone, SMS, WhatsApp, or e-mail | Name, contact details, message content | Art. 6(1)(b) — pre-contractual measures / Art. 6(1)(f) — legitimate interest of the Controller |
| Traffic analysis and visit statistics (Google Analytics 4) | Device data, approximate location, on-site behavior, IP address (anonymized) | Art. 6(1)(a) — consent given via cookie acceptance |
| Fulfilling legal obligations (e.g. accounting, if a contract is concluded) | Data necessary to issue an invoice/contract | Art. 6(1)(c) — legal obligation |
Providing contact details is voluntary but necessary to respond to your inquiry.
3. Cookies
The website uses cookies in two categories:
- Essential — necessary for the website to function correctly (e.g. remembering your cookie consent choice). These do not require consent.
- Analytics (Google Analytics 4) — help us understand how visitors use the site. These require your consent, given by accepting the visible cookie notice on the site. Consent can be withdrawn at any time by changing your browser settings or contacting the Controller.
Declining analytics cookies does not restrict access to the website's content.
4. Recipients of data
Data may be shared with the following categories of recipients:
- Google LLC (Google Analytics 4) — for analytics data only, and only if you have consented to analytics cookies. Google may process data outside the European Economic Area; such transfers rely on standard contractual clauses approved by the European Commission.
- Providers of hosting and website maintenance services.
- Entities authorized under applicable law (e.g. public administration bodies).
The Controller does not sell personal data to third parties.
5. Data retention period
Data from contact inquiries is retained for as long as necessary to respond, and, if cooperation is established, for the duration of that cooperation plus the statute-of-limitations period for any claims. Analytics data (Google Analytics 4) is retained according to Google Analytics' retention settings — 14 months by default.
6. Rights of data subjects
Every individual whose data is processed has the right to:
- access their data and receive a copy of it,
- rectify (correct) their data,
- erase their data,
- restrict processing,
- data portability,
- object to processing based on legitimate interest,
- withdraw consent at any time (without affecting the lawfulness of processing carried out before withdrawal),
- lodge a complaint with the President of the Polish Data Protection Authority (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.
7. Data security
The Controller applies appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or destruction.
8. Changes to this policy
This Privacy Policy may be updated from time to time. The current version is always available at innowacje4it.pl/en/privacy-policy.
This document is a working draft prepared for approval and does not constitute legal advice — legal review is recommended before relying on it, particularly regarding any additional legal bases for processing that may arise in the future.