Privacy Policy
Version of 25 September 2026. Last updated: 25 September 2026.
This policy explains how IT-COM Sp. z o.o. processes the personal data of visitors to the it-com.pl website (Polish and English versions) and how it uses cookies. It is provided in accordance with Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and the Polish Electronic Communications Law of 12 July 2024.
1. Data controller
The controller of your personal data is IT-COM Sp. z o.o., ul. Kard. St. Wyszyńskiego 7F lok. 20, 05-530 Góra Kalwaria, Poland, VAT ID (NIP) PL1231134882.
For any matters relating to personal data, contact us by e-mail at info (at) it-com (dot) pl, by phone at +48 22 702 32 01 or by post at our registered address. The controller has not appointed a data protection officer.
2. What data we process, why and on what legal basis
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Contact form – replying to your enquiry | name, e-mail, phone (optional), message | Art. 6(1)(f) GDPR – legitimate interest (replying to enquiries); where the enquiry concerns a contract – Art. 6(1)(b) | until the correspondence is closed, then up to 3 years (limitation of claims) |
| Sending commercial information electronically or contacting you by phone for marketing | e-mail, phone, name | Art. 6(1)(a) GDPR – consent (voluntary and separate from sending the enquiry), in conjunction with Art. 398 of the Electronic Communications Law | until consent is withdrawn |
| Providing PDF datasheets after e-mail verification and recording downloads | e-mail, verification code (stored encrypted for 15 minutes), downloaded file name, page, date and time, IP address, browser information | Art. 6(1)(a) GDPR – consent given in the download window; and Art. 6(1)(f) – legitimate interest (protection of materials, security, statistics of interest in our offer) | download log – 3 years or until consent is withdrawn / an objection is raised; code – 15 minutes |
| Protecting forms against spam and abuse (Google reCAPTCHA) | IP address, device and browser data, how the site is used | Art. 6(1)(f) GDPR – legitimate interest (website security) | according to Google’s rules (see section 5) |
| Operation and security of the website (server logs, backups) | IP address, date and time, requested page, browser and error information | Art. 6(1)(f) GDPR – legitimate interest | server logs – per hosting settings, usually up to 30 days; backups – up to 3 months |
| Remembering your cookie and language choices | consent identifier, selected language | Art. 6(1)(f) GDPR; Art. 399(3) of the Electronic Communications Law (strictly necessary cookies) | see the cookie table (section 7) |
| Establishing, pursuing or defending legal claims | data from the categories above | Art. 6(1)(f) GDPR | until the limitation period expires |
Providing data is voluntary. Without an e-mail address we cannot reply to your enquiry or send you a datasheet download code. Sending an enquiry does not depend on giving marketing consent.
We do not take decisions based solely on automated processing, including profiling, within the meaning of Art. 22 GDPR.
3. Recipients of data
Your data may only be disclosed to entities processing it on our behalf (processors) or providing services to us, in particular:
- dhosting.pl Sp. z o.o., ul. Pamiętna 14B/2, 02-972 Warszawa, Poland, NIP 7010198361, KRS 0000336780 – website and e-mail hosting (dpanel.pl panel), under a data processing agreement;
- Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) and Google LLC (USA) – reCAPTCHA service protecting the forms;
- CookieYes Limited (United Kingdom) – cookie consent management and storage of consent records;
- BunnyWay d.o.o. (Slovenia) – delivery of website fonts (Bunny Fonts), without cookies;
- OpenStreetMap Foundation (United Kingdom) – displaying the location map on the Contact page;
- authorised employees and associates of IT-COM Sp. z o.o. and, where necessary, providers of legal, accounting and IT services.
We do not sell personal data or share it with other entities for their marketing purposes.
4. Transfers outside the European Economic Area
In connection with Google reCAPTCHA, data (including your IP address) may be transferred to Google LLC in the United States. The transfer is based on the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework, in which Google LLC participates, and additionally on the Standard Contractual Clauses adopted by the European Commission.
Data processed by CookieYes Limited and the OpenStreetMap Foundation may be processed in the United Kingdom, which is covered by a European Commission adequacy decision.
5. Google reCAPTCHA
The forms on this website are protected by Google reCAPTCHA v3, which assesses whether a form is being completed by a human. For this purpose Google may process your IP address, browser and device information and how you use the site. See the Google Privacy Policy and Google Terms of Service.
6. Your rights
You have the right to:
- access your data and receive a copy (Art. 15 GDPR),
- rectification (Art. 16 GDPR),
- erasure (Art. 17 GDPR),
- restriction of processing (Art. 18 GDPR),
- data portability for data processed on the basis of consent or a contract (Art. 20 GDPR),
- object to processing based on legitimate interest (Art. 21(1) GDPR) – and object to processing for direct marketing at any time and without giving reasons (Art. 21(2) GDPR),
- withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal; you can change your cookie consent in the cookie settings,
- lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa, Poland (uodo.gov.pl).
To exercise your rights, write to info (at) it-com (dot) pl. We will respond without undue delay and within one month at the latest.
7. Cookies
Cookies are small files stored on your device. This website only uses strictly necessary and functional cookies. We do not use analytics or advertising cookies (no Google Analytics, advertising pixels or remarketing). On your first visit a banner lets you accept or refuse cookies other than strictly necessary ones; you can change your choice at any time in the cookie settings (link in the website footer) or by clicking the icon in the bottom-left corner.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| cookieyes-consent | it-com.pl (CookieYes) | strictly necessary – stores your cookie choices | 1 year |
| pll_language | it-com.pl | strictly necessary – remembers the selected language version | 1 year |
| itcom_pdf_v | it-com.pl | strictly necessary – confirms e-mail verification for datasheet downloads | until the browser is closed (max. 12 hours) |
| _GRECAPTCHA | google.com (Google reCAPTCHA) | strictly necessary – protects forms against spam and bots | 6 months |
| wordpress_*, wordpress_logged_in_*, wp-settings-*, _lscache_vary | it-com.pl | strictly necessary – only for logged-in website administrators | session / up to 1 year |
You can also delete or block cookies in your browser settings. Blocking strictly necessary cookies may prevent some features (e.g. datasheet downloads) from working.
8. Links to external websites
The website contains links to IT-COM profiles on Facebook, X and Instagram and to the websites of manufacturers whose products we offer. We do not embed plug-ins of these services – data is only transferred to them after you click a link and visit their websites, under their own privacy policies.
9. Data security
- all communication with the website is encrypted (HTTPS/TLS),
- access to the administration panel is protected by a strong password, two-factor authentication and login attempt limits,
- the website software is regularly updated,
- backups are made regularly.
10. Changes to this policy
This policy may be updated, e.g. following changes in the law or in the website’s features. The current version is always available on this page, with the date of the last update shown at the top.