Privacy Policy
Version of 31 October 2026. Last updated: 31 October 2026.
This policy explains how IT-COM Sp. z o.o. processes the personal data of visitors to the it-com.pl website (Polish and English versions) and how it uses cookies. It is provided in accordance with Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and the Polish Electronic Communications Law of 12 July 2024.
1. Data controller
The controller of your personal data is IT-COM Sp. z o.o., ul. Kard. St. Wyszyńskiego 7F lok. 20, 05-530 Góra Kalwaria, Poland, VAT ID (NIP) PL1231134882.
For any matters relating to personal data, contact us by e-mail at info (at) it-com (dot) pl, by phone at +48 22 702 32 01 or by post at our registered address. The controller has not appointed a data protection officer.
2. What data we process, why and on what legal basis
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Contact form – replying to your enquiry | name, e-mail, phone (optional), message; IP address (anonymised after 30 days) | Art. 6(1)(f) GDPR – legitimate interest (replying to enquiries); where the enquiry concerns a contract – Art. 6(1)(b) | until the correspondence is closed, then up to 3 years (limitation of claims) |
| Avionics database quote request form – preparing an offer | name, e-mail, phone, company or organisation, country, customer type, aircraft and avionics details (e.g. type, registration, systems), comments; IP address (abuse prevention) | Art. 6(1)(b) GDPR – steps taken at your request prior to entering into a contract; Art. 6(1)(f) GDPR – legitimate interest (replying to the enquiry, abuse prevention) | up to 36 months from submission – then deleted automatically |
| Sending commercial information electronically or contacting you by phone for marketing | e-mail, phone, name | Art. 6(1)(a) GDPR – consent (voluntary and separate from sending the enquiry), in conjunction with Art. 398 of the Electronic Communications Law | until consent is withdrawn |
| Providing PDF datasheets after e-mail verification and recording downloads | e-mail, verification code (stored encrypted for 15 minutes), downloaded file name, page, date and time, IP address, browser information | Art. 6(1)(a) GDPR – consent given in the download window; and Art. 6(1)(f) – legitimate interest (protection of materials, security, statistics of interest in our offer) | download log – 3 years or until consent is withdrawn / an objection is raised; code – 15 minutes |
| Protecting forms against spam and abuse (hidden honeypot field; the quote form also limits the number of submissions) | IP address, submission content | Art. 6(1)(f) GDPR – legitimate interest (website security) | as for the respective form; no third parties involved |
| Operation and security of the website (server logs, backups) | IP address, date and time, requested page, browser and error information | Art. 6(1)(f) GDPR – legitimate interest | server logs – per hosting settings, usually up to 30 days; backups – up to 3 months |
| Remembering your cookie and language choices | consent identifier, selected language | Art. 6(1)(f) GDPR; Art. 399(3) of the Electronic Communications Law (strictly necessary cookies) | see the cookie table (section 6) |
| Establishing, pursuing or defending legal claims | data from the categories above | Art. 6(1)(f) GDPR | until the limitation period expires |
Providing data is voluntary. Without an e-mail address we cannot reply to your enquiry or send you a datasheet download code. Sending an enquiry does not depend on giving marketing consent.
We do not take decisions based solely on automated processing, including profiling, within the meaning of Art. 22 GDPR.
3. Recipients of data
Your data may only be disclosed to entities processing it on our behalf (processors) or providing services to us, in particular:
- dhosting.pl Sp. z o.o., ul. Pamiętna 14B/2, 02-972 Warszawa, Poland, NIP 7010198361, KRS 0000336780 – website and e-mail hosting (dpanel.pl panel), under a data processing agreement;
- CookieYes Limited (United Kingdom) – cookie consent management and storage of consent records;
- BunnyWay d.o.o. (Slovenia) – delivery of website fonts (Bunny Fonts), without cookies;
- OpenStreetMap Foundation (United Kingdom) – displaying the location map on the Contact page;
- authorised employees and associates of IT-COM Sp. z o.o. and, where necessary, providers of legal, accounting and IT services.
We do not sell personal data or share it with other entities for their marketing purposes.
4. Transfers outside the European Economic Area
We do not transfer personal data to the United States or to other third countries without an adequacy decision.
Data processed by CookieYes Limited and the OpenStreetMap Foundation may be processed in the United Kingdom, which is covered by a European Commission adequacy decision.
5. Your rights
You have the right to:
- access your data and receive a copy (Art. 15 GDPR),
- rectification (Art. 16 GDPR),
- erasure (Art. 17 GDPR),
- restriction of processing (Art. 18 GDPR),
- data portability for data processed on the basis of consent or a contract (Art. 20 GDPR),
- object to processing based on legitimate interest (Art. 21(1) GDPR) – and object to processing for direct marketing at any time and without giving reasons (Art. 21(2) GDPR),
- withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal; you can change your cookie consent in the cookie settings,
- lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa, Poland (uodo.gov.pl).
To exercise your rights, write to info (at) it-com (dot) pl. We will respond without undue delay and within one month at the latest.
6. Cookies
Cookies are small files stored on your device. This website only uses strictly necessary and functional cookies. We do not use analytics or advertising cookies (no Google Analytics, advertising pixels or remarketing). On your first visit a banner lets you accept or refuse cookies other than strictly necessary ones; you can change your choice at any time in the cookie settings (link in the website footer) or by clicking the icon in the bottom-left corner.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| cookieyes-consent | it-com.pl (CookieYes) | strictly necessary – stores your cookie choices | 1 year |
| pll_language | it-com.pl | strictly necessary – remembers the selected language version | 1 year |
| itcom_pdf_v | it-com.pl | strictly necessary – confirms e-mail verification for datasheet downloads | until the browser is closed (max. 12 hours) |
| wordpress_*, wordpress_logged_in_*, wp-settings-*, _lscache_vary | it-com.pl | strictly necessary – only for logged-in website administrators | session / up to 1 year |
You can also delete or block cookies in your browser settings. Blocking strictly necessary cookies may prevent some features (e.g. datasheet downloads) from working.
7. Links to external websites
The website contains links to IT-COM profiles on Facebook, X and Instagram and to the websites of manufacturers whose products we offer. We do not embed plug-ins of these services – data is only transferred to them after you click a link and visit their websites, under their own privacy policies.
8. Data security
- all communication with the website is encrypted (HTTPS/TLS),
- access to the administration panel is protected by a strong password, two-factor authentication and login attempt limits,
- the website software is regularly updated,
- backups are made regularly.
9. Changes to this policy
This policy may be updated, e.g. following changes in the law or in the website’s features. The current version is always available on this page, with the date of the last update shown at the top.