Privacy policy

1. Data controller

The controller of your personal data is Michał Russak, running a sole proprietorship under the business name Interaktywny Dom Usługowy, registered in the Polish Central Register and Information on Economic Activity (CEIDG), ul. Książąt Mazowieckich 4/55, 01-990 Warsaw, Poland, tax ID (NIP) 521-270-97-63 (“IDU”, “we”).

For any matter concerning personal data you can write to info@idu.net.pl, call +48 515 177 761 or send a letter to the address above.

2. What data we process

• Contact form data: full name, company name, email address, phone number (if provided), the selected topic and your message.
• Correspondence data: if you write or call us directly, we process your email address or phone number and whatever you share in the conversation or message.
• Technical data: on every visit, our hosting provider’s servers automatically record data such as your IP address, date and time of the visit, browser and operating system type, and the page visited.

3. Purposes and legal bases

• Replying to your enquiry and following up on it – based on the consent you give in the form (Art. 6(1)(a) GDPR) and, where the enquiry concerns working together, to take steps prior to entering into a contract (Art. 6(1)(b) GDPR).
• Handling correspondence when you contact us directly – based on our legitimate interest in replying to messages (Art. 6(1)(f) GDPR).
• Keeping the website running and secure, including protection against attacks and abuse – based on our legitimate interest (Art. 6(1)(f) GDPR).
• Establishing, pursuing or defending legal claims, if necessary – based on our legitimate interest (Art. 6(1)(f) GDPR).

4. How long we keep data

• Enquiry and correspondence data – up to 12 months after the last contact, unless we start working together; in that case for the duration of the cooperation and the period required by law (e.g. tax law).
• Data processed on the basis of consent – until consent is withdrawn, and no longer than stated above.
• Technical data – for as long as the hosting provider keeps its logs, usually no longer than a few days.
• Data needed to pursue or defend claims – until those claims become time-barred.

5. Who receives your data

We do not sell data or share it for marketing purposes. Data may only be received by providers who help us run the website and communicate with you, under data processing agreements:

• Cloudflare, Inc. – website hosting and protection,
• Formspree, Inc. – receiving messages sent through the contact form,
• cyber_Folks S.A., based in Poznań, Poland – email services.

We may also disclose data to public authorities where required by law.

6. Transfers outside the EEA

Some of our providers (Cloudflare and Formspree) are based in the USA. Data may be transferred there on the basis of a European Commission adequacy decision (the EU-US Data Privacy Framework) or standard contractual clauses approved by the European Commission. You can request a copy of these safeguards by writing to info@idu.net.pl.

7. Your rights

You have the right to:

• access your data and receive a copy of it,
• have inaccurate or incomplete data corrected,
• have your data erased (“right to be forgotten”),
• restrict processing,
• data portability,
• object to processing based on legitimate interest,
• withdraw consent at any time, without affecting the lawfulness of processing before withdrawal,
• lodge a complaint with the President of the Polish Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl) or the supervisory authority in your country of residence.

To exercise these rights, write to info@idu.net.pl. We will respond without undue delay and within one month at the latest.

8. Providing data is voluntary

Providing data is voluntary, but without your name, email address and message we cannot reply to your enquiry. We do not make automated decisions or profile website visitors.

9. Cookies and similar technologies

This website does not use analytics or advertising cookies and does not track your activity. Fonts are loaded from our own server, not from third-party services.

Our hosting provider (Cloudflare) may set strictly necessary technical cookies used only to protect the website against attacks and bot traffic. They do not require consent and are not used to identify you. You can manage cookies in your browser settings.

10. Links to other websites

This website contains links to other services, such as LinkedIn. Once you visit them, their own privacy policies apply.

11. Changes to this policy

We may update this policy, for example when the law or the way the website works changes. The current version is always available on this page, with its effective date shown at the top.