The controller of your personal data is ITboost with its registered office at ul. Cechowa 18/10, 43-300 Bielsko-Biała, Poland (email: info@itboost.pl, tel: +48 606 789 526).
1. Introduction and General Provisions
We respect your privacy. This Privacy Policy sets out the rules for the collection, processing and use of personal data collected via the ITboost website (available at itboost.pl). We process your data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and Polish personal data protection regulations.
2. What Data We Collect and for What Purpose?
We collect and process only the data necessary to provide our services and communicate with clients:
-
Contact form and inquiries: First and last name, email address, phone number, company name, and message content.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest of the Controller consisting in handling correspondence and taking action at the request of the data subject). -
Performance of contracts and services: Billing data, tax identification number (NIP), address data, and collaboration history.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(c) GDPR (compliance with a legal obligation arising from tax regulations). -
Server logs and technical data: IP address, browser type, operating system, date and time of visit.
Legal basis: Art. 6(1)(f) GDPR (ensuring security and proper functioning of the website).
3. Who Do We Share Your Data With?
Your personal data is never sold nor shared with third parties for marketing purposes. Access to data is granted only to trusted entities providing technical and organisational services for us:
- Hosting service providers and server infrastructure (located within the European Union / EEA).
- Providers of process automation tools (e.g. n8n) with full data encryption in place.
- Law firms and accounting offices (to the extent necessary for settlements and legal requirements).
4. Data Retention Period
We store your data only as long as necessary:
- Contact form data: Stored for the duration of correspondence, but no longer than 12 months after its conclusion.
- Contractual and financial-accounting data: Stored for a period of 5 years from the end of the calendar year in which the tax payment deadline expired (in accordance with legal regulations).
5. Your Rights Under GDPR
In connection with the processing of your personal data, you have the following rights:
Right of Access
You may request information about what data we process and obtain a copy of it.
Right to Rectification
You have the right to correct inaccurate or incomplete personal data.
Right to Erasure
"Right to be forgotten" — you may request the deletion of your personal data.
Right to Object
You may object to the processing of data for legitimate interest purposes.
To exercise your rights, contact us at: info@itboost.pl. You also have the right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (PUODO).
6. Cookies and Tracking Technologies
Our website uses essential cookies to ensure proper functioning of the site, remember session preferences, and protect against malicious traffic (e.g. CSRF attacks).
With your consent, we also use Google Analytics 4 analytics cookies, which help us understand how visitors use the site (traffic sources, page popularity, time spent on site). Google Analytics 4 may set the following cookies: _ga (user identifier, 2-year retention), _gid (session identifier, 24 hours), _gat (request throttling, 1 minute), _ga_<CONTAINER_ID> (session data and cache, 2 years), and _fpl (first-party identifier, 3 months).
The legal basis for processing data through analytics cookies is Article 6(1)(a) GDPR — your voluntary consent, which you may withdraw at any time (e.g. by clearing cookies in your browser or changing your choice in the cookie banner). Refusing consent does not affect the availability of the site.
To withdraw your consent and see the cookie banner again, click: Change cookie preferences.
Data collected by Google Analytics may be transferred to Google LLC based in the USA. Details of Google's data processing are described in Google's privacy policy.
We do not use third-party advertising tracking cookies without your explicit consent.
7. Data Security
We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss, or modification. All traffic on the website is encrypted using SSL/TLS (HTTPS) protocol.
8. Changes to the Privacy Policy
We reserve the right to amend this Privacy Policy in the event of changes in legislation or technological development of the website. Last updated: 22 July 2026.