Privacy Policy and Cookie Policy

SDR – IT Spółka z ograniczoną odpowiedzialnością
(referred to as SDR-IT)

Preliminary Information

As of May 25, 2018, the General Data Protection Regulation (EU) 2016/679 of April 27, 2016 (hereinafter referred to as “GDPR”) has come into effect across the entire EU, governing the protection of personal data and the free movement of such data while repealing Directive 95/46/EC. In light of the above, this document (hereinafter referred to as the “Policy”) provides you with information on the legal basis for data processing, the methods of data collection and usage, as well as the rights associated with it.

Personal Data – What Does Processing Mean?

Personal data refers to any information relating to an identified or identifiable natural person, i.e., one who can be directly or indirectly identified based on such data as name, identification number, location data, online identifier, or one or more specific factors determining their physical, physiological, genetic, mental, economic, cultural, or social identity.

Processing of personal data includes any operation performed on data, whether or not by automated means, including collection, storage, recording, organization, modification, retrieval, usage, sharing, restriction, deletion, or destruction of personal data.

Data Controller

The data controller for personal data that may be processed in connection with the use of the websites is SDR-IT Sp. z o.o., based at 58-560 Jelenia Góra, ul. Wojewódzka 13a, registered in the National Court Register at the District Court for Wrocław-Fabryczna in Wrocław, IX Commercial Division of the National Court Register under KRS: 777786, NIP: 6112800476, REGON: 38286846100000 (hereinafter: “Administrator”).

Contact with the Administrator regarding personal data matters is possible via email: rodo@sdr-it.pl.

Purpose and Legal Basis for Processing Personal Data

When using SDR-IT websites, your data is processed solely to the necessary and minimal extent required to provide services at the desired level. Additionally, if you choose to subscribe to the newsletter, your data will also be processed for that purpose.

The legal basis for processing personal data depends on how you use SDR-IT websites:

If you only visit SDR-IT websites, the legal basis for processing your data is the legitimate interest of the Administrator in ensuring the proper functioning of SDR-IT websites.
If you subscribe to the newsletter, the legal basis for processing data is taking action prior to the contract and then fulfilling the contract for the provision of the newsletter service.

How Long Are Personal Data Processed?

The duration for which the Administrator may process your personal data depends on the legal basis for processing. We strive to ensure the processing period is as short as possible and compliant with applicable regulations.

If you use the newsletter service, your data will be processed as long as you use this service.
If the Administrator processes data based on a legitimate interest, the processing period lasts until this interest ceases or until you object to further processing, provided that the objection is legally justified.

Sharing Personal Data with Third Parties

Personal data may be transferred to other entities only when permitted by law and required to fulfill contracts between you and SDR-IT. In such cases, the Administrator ensures security provisions in agreements with third parties to protect data confidentiality and security.

Your personal data may be shared with the following categories of recipients: data processors under data processing agreements, the entity providing hosting services to SDR-IT, the entity responsible for sending newsletters (if different from SDR-IT), SDR-IT’s contractors providing software supply, software or hardware maintenance services, legal and tax advisors, and courier service providers. IMPORTANT – Your personal data is shared with these entities only when necessary for achieving the specified processing purpose.

Rights Related to Personal Data Processing

Regarding the processing of your personal data, you have the following rights:

Right of access – to obtain information on whether and how we process your personal data.
Right to rectification – to correct incomplete, incorrect, or outdated data we process.
Right to restrict processing – to temporarily stop processing in cases such as verifying data accuracy, unlawful processing, or pending an objection decision.
Right to erasure – to request deletion of data if they are no longer needed, consent is withdrawn, or data processing was unlawful.
Right to data portability – applicable to data processed based on consent or contractual necessity and processed in an automated manner.

Additionally, you have the right to:

File a complaint with the President of the Personal Data Protection Office.
Object to data processing when it is based on the Administrator’s legitimate interest or for direct marketing purposes.

Cookies – How to Manage Them?

Cookies are small text files stored on users’ devices when using SDR-IT websites. They enhance user experience by remembering preferences and improving website usability.

There are two types of cookies used on the website:

Session cookies – temporary files stored until you leave the website.
Persistent cookies – stored longer, depending on their expiration parameters, or until manually deleted.

Cookies track social media activity. SDR-IT websites also use third-party plugins such as Share buttons for Facebook, Twitter, Instagram, Spotify, Snapchat, and YouTube.

Most web browsers allow you to block, delete, or reject cookies. Below are links to relevant settings for popular browsers: (a) Google Chrome
(b) Internet Explorer
(c) Mozilla Firefox
(d) Safari

Newsletter Service

SDR-IT offers a newsletter service, an electronic bulletin sent periodically and indefinitely via email. The newsletter provides updates on SDR-IT, services, and company-related events.

Subscription is voluntary and free of charge. You can unsubscribe at any time via the link in each newsletter or by emailing: rodo@sdr-it.pl.

Final Information

The Administrator regularly reviews this privacy policy and updates it when necessary due to:

Changes in law,
New guidelines from data protection authorities,
Best practices in personal data protection.

Any changes to the privacy policy will be announced on the website.

Jelenia Góra, June 20, 2024