Privacy Policy

The controller of your personal data is a natural person running a business under the IT Deweloper brand. The data is stored and processed personally, without being handed to anyone else.

No Data Protection Officer (DPO) has been appointed — the law does not require one for a business of this size. All data matters are handled personally, at This email address is being protected from spambots. You need JavaScript enabled to view it..

We do not buy databases and we do not gather information about you from outside sources. Everything we hold, you gave us yourself.

When you write or call

The contact form, the brief and the online calculator deliver exactly what you typed into them: your name, e-mail, optionally a phone number, the text of your message and any files you attached. The same goes for an e-mail, a WhatsApp or Telegram message and a phone call — we are left with your address, number or handle and the content of the conversation.

What the server records

Like any website, our server keeps a technical log: IP address, date and time of the request, the page opened, browser type. This serves the operation and security of the site, not the identification of you.

Cookies

One technical cookie needed for the site to work and one that remembers your answer to the cookie banner. Details in the “Cookies and similar technologies” section.

What we do not do

We show you no personalised advertising and use no advertising pixels. Google Analytics switches on only with your consent and counts nothing more than aggregate visit statistics — which pages get viewed, where visitors come from, what kind of device they use; it does not identify you personally. Beyond that we do not build a profile of you, we take no automated decisions about you (Art. 22 GDPR) and we do not collect special categories of data — health, opinions or religious beliefs (Art. 9 GDPR).

We run no mailing lists and we do not use your data for advertising or marketing — that purpose of processing simply does not exist here.

• Correspondence that did not lead to cooperationup to 12 months from the last message
• Project and contract datafor the duration of the work plus 6 years — the limitation period for claims under the Polish Civil Code
• Accounting documents5 years from the end of the year in which the tax payment fell due
• Web server logsup to 12 months
• The cookie holding your choice (yootheme_consent)30 days, after which the banner asks again
• Session cookieuntil the browser session ends

If you withdraw consent or ask us to delete your data, we will delete it — except for what we are required by law to keep, such as invoices and accounting records.

Under the GDPR you have the right to:

• know what data we hold about you and receive a copy of it Art. 15
• rectify inaccurate or incomplete data Art. 16
• erase your data — the “right to be forgotten” Art. 17
• restrict processing Art. 18
• receive your data in a machine-readable format and transfer it to another controller Art. 20
• object to processing based on legitimate interest Art. 21
• withdraw consent at any time — this does not affect the lawfulness of processing before the withdrawal Art. 7(3)

To exercise any of these, write to This email address is being protected from spambots. You need JavaScript enabled to view it.. We reply within one month (Art. 12 GDPR); if the request turns out to be complex the deadline may be extended, and we will tell you.

Complaint to the supervisory authority

If you believe we are processing your data improperly, you have the right to lodge a complaint with the Polish supervisory authority:

On your first visit you see a banner with the buttons “Accept”, “Reject” and “Manage cookies”. Until you agree, optional cookies and external services do not load at all — this is an opt-in model, not “consent by default”.

You can change your decision at any time: the “Manage cookies” button opens the same dialogue with the categories. Cookies can also be deleted separately in your browser settings.

The “I am not a robot” check

Forms are protected by PowCaptcha: it solves a small computational task directly in your browser. It does not track you, does not set cookies and does not send data to third-party services — unlike the usual picture-based captchas.

We do not sell data, we do not pass it to advertisers and we do not share it for marketing. Data leaves our correspondence only where the service itself would not work otherwise.

• dhosting.pl sp. z o.o. hosting, Poland

  The site, the database, the mail and the backups physically live on its servers. This is a processor under Art. 28 GDPR; the data stays on Polish territory, that is, within the EEA.

• OpenStreetMap Foundation maps, with consent

  Connects only if you allowed the map. At that moment your IP address becomes visible to the map service's servers.

• Google Ireland Limited analytics, with consent

  Google Analytics — anonymised site visit statistics, switched on only if you allow the “Statistics” category. Some of the processing takes place outside the EEA, under Google's EU–US Data Privacy Framework certification.

• WhatsApp and Telegram you choose the channel

  If you write to us on a messenger yourself, the conversation is processed under those services' own rules and some data may be processed outside the EEA. If this matters to you, write by e-mail.

• Accounting and state authorities required by law

  Only to the extent expressly required by legislation.

Data leaves the EEA only via Google Analytics and only with your consent; otherwise nothing crosses the EEA border on our side.