1. Data Controller
The controller of your personal data is MicrOne Sp. z o.o. with registered office at pl. Strzelecki 20, III piętro, 50-224 Wrocław, 50-224 Wrocław, Poland.
- VAT ID (NIP): PL8951967148
- REGON: 021211309
- KRS: —
- Email: [email protected]
- Phone: +48717227662
- e-Delivery address:
—
2. Purposes and legal basis
We process your personal data for the following purposes:
- Responding to inquiries — basis: GDPR Art. 6(1)(b) (pre-contractual measures) or Art. 6(1)(f) (legitimate interest — handling inquiries).
- Contract performance — GDPR Art. 6(1)(b).
- Legal obligations (invoicing, archiving) — GDPR Art. 6(1)(c).
- Direct marketing of our own services — GDPR Art. 6(1)(f) (legitimate interest), until objection.
- Newsletter (if subscribed) — GDPR Art. 6(1)(a) (consent), until withdrawn.
3. Scope of processed data
We process the following categories of data:
- Identification: first name, last name, company name
- Contact: email, phone, postal address
- Billing: VAT ID, invoice data (B2B clients)
- Technical: IP address, browser identifier, analytics
- Content of your message / inquiry
4. Data recipients
Your data may be transferred to the following categories of recipients:
- IT service providers (hosting, email, CRM, analytics)
- Accounting and legal service providers
- Payment processors (if applicable)
- Public authorities — only within legal obligations
All recipients are bound by data processing agreements (GDPR Art. 28) or operate under separate legal obligations.
5. Transfer outside EEA
Some services we use (e.g., Google Analytics, Meta Pixel) may transfer data to third countries (outside the European Economic Area).
Transfer is based on:
- Standard Contractual Clauses (SCC) approved by the European Commission
- Adequacy decisions (e.g., UK, Switzerland)
- Your explicit consent (where given)
6. Data retention period
- Contact form data: up to 12 months from last correspondence
- Customer data (contracts): for contract duration + 6 years (tax and claims limitation)
- Invoices: 5 years (Tax Ordinance)
- Newsletter: until consent withdrawn / unsubscribed
- Technical logs (IP): 30 days
7. Your rights (GDPR)
You have the following rights:
- Access (GDPR Art. 15) — receive a copy of your data
- Rectification (Art. 16) — correct inaccurate data
- Erasure ("right to be forgotten", Art. 17)
- Restriction of processing (Art. 18)
- Data portability (Art. 20) — structured format export
- Object (Art. 21) — to processing based on legitimate interest or marketing
- Withdraw consent (Art. 7(3)) — anytime, without affecting prior processing lawfulness
- Complaint to supervisory authority — Polish DPA uodo.gov.pl/en
To exercise your rights, contact us: [email protected]
9. Profiling and automated decisions
We do not make decisions based solely on automated processing (including profiling) that would produce legal effects or significantly affect you.
We use web analytics for statistics and site optimization — we do not create decision-making profiles.
10. Data security
We apply technical and organizational measures to protect your data from unauthorized access, loss, or destruction:
- SSL/TLS encryption for all transmissions (HTTPS)
- Password hashing (bcrypt/argon2)
- Regular backups
- Software and plugin updates
- Access control (RBAC)
- Security event monitoring
11. GDPR contact
For matters related to processing your personal data, contact us:
- 📧 Email: [email protected]
- 📞 Phone: +48717227662
- 📮 Postal address: MicrOne Sp. z o.o., pl. Strzelecki 20, III piętro, 50-224 Wrocław, 50-224 Wrocław
- 📨 e-Delivery:
—
12. Policy changes
We reserve the right to update this policy in the future. We will inform about material changes via homepage notice and/or email to affected individuals.
Last updated: 25.05.2026