01Data controller

The controller of your personal data is IT SMARTCLOUT SP. Z O.O. z siedzibą w Turku, wpisana do rejestru przedsiębiorców KRS.

For anything related to data protection you can reach us by e-mail at: kontakt@smartclout.pl.

02Scope of data collected

We collect data only to the extent needed for the purpose it was given for — most often: first and last name, company name, e-mail address, phone number, the content of your message, IP address, device and browser data, and cookie identifiers.

We do not collect special categories of data (so-called “sensitive” data) unless you have voluntarily included it in the content of your message.

03Purposes and legal bases of processing

We process your personal data for the following purposes:

• Handling enquiries sent through the contact form — Art. 6(1)(b) and (f) GDPR (pre-contractual contact and legitimate interest).
• Providing services and performing contracts — Art. 6(1)(b) GDPR.
• Analysing site traffic and improving how the site works — Art. 6(1)(a) GDPR (your voluntary consent given in the cookie banner).
• Direct marketing of our own services — Art. 6(1)(a) and (f) GDPR.
• Meeting legal obligations (accounting, taxes) — Art. 6(1)(c) GDPR.

04Cookies and similar technologies

This site uses cookies and similar technologies in four categories:

You give consent for cookies other than the necessary ones in the banner shown on your first visit. You can change that choice at any time using the cookie icon in the bottom-right corner of the page, or the button at the bottom of this page.

05Data recipients

Your data may be shared with the following categories of recipients:

• IT and hosting providers acting on our instructions under a data processing agreement.
• Providers of analytics and marketing tools — only once you have given the relevant consent.
• Authorised public authorities — on the basis of applicable law.

We do not sell your data to third parties.

06Transfers of data outside the EEA

Some of our technology providers may be based outside the European Economic Area. In those cases data is transferred solely on the basis of standard contractual clauses approved by the European Commission, or other safeguards provided for by the GDPR.

07Retention period

• Contact form enquiries — up to 24 months after the correspondence ends.
• Data related to performing a contract — until claims become time-barred, and in line with archiving obligations.
• Analytics cookies — 24 months at most.
• Marketing consents — until they are withdrawn.

08Your rights

Under the GDPR you have the right to: access your data, have it corrected, have it erased (the “right to be forgotten”), restrict processing, port your data, object to processing, and withdraw consent at any time (without affecting the lawfulness of processing carried out before the withdrawal).

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw) if you believe that the processing of your data breaches the GDPR.

To exercise your rights, get in touch with us at: kontakt@smartclout.pl.

09Changes to this policy

We reserve the right to make changes to this Policy. We will announce material changes by publishing an updated version on this page and — where the changes affect how your data is processed — by contacting you directly where that is possible.