Last updated: 11 October 2026. This is the English version of the Polish privacy policy; in case of discrepancies the Polish version prevails.
1. General information
This Privacy Policy explains how personal data are processed and how cookies are used in connection with the website balcerzak.it.
The controller of personal data is:
balcerzak.it Radosław Balcerzak
ul. Słoneczna 11B, 64-730 Rosko, Poland
Tax ID (NIP): 763-197-82-91
E-mail: [email protected]
Phone: +48 609 880 234
2. Data we process
Depending on why you contact us or how you use the website, we may process:
- first name and surname,
- e-mail address,
- phone number,
- company name,
- IP address,
- data included in messages sent via the contact form or by e-mail,
- technical data about your device and browser.
Providing data is voluntary, but in some cases it is necessary to answer your inquiry or provide a service.
3. Purposes and legal bases
Contact
To answer a message sent via the contact form or by e-mail.
Legal basis: Art. 6(1)(f) GDPR – the controller’s legitimate interest in communicating with you.
Services
To prepare an offer, perform a contract or provide IT services.
Legal basis: Art. 6(1)(b) GDPR – performance of a contract or steps taken at your request before entering into a contract.
Tax and accounting obligations
To issue accounting documents and comply with legal obligations.
Legal basis: Art. 6(1)(c) GDPR.
Marketing of our own services
To inform you about our services.
Legal basis: Art. 6(1)(f) GDPR, or your consent where required by law (e.g. newsletter).
Statistics and security
To keep the website secure and to analyse traffic.
Legal basis: Art. 6(1)(f) GDPR; analytics and advertising cookies only with your consent.
4. Retention
Data are stored:
- for as long as necessary to answer your inquiry,
- for the term of a contract and afterwards for the period required by law,
- for the limitation period of possible claims,
- until you successfully object or withdraw your consent, where processing is based on consent.
Contact form and inquiry register
Messages sent via the contact form are delivered to the controller’s mailbox and stored in the website’s administration panel (inquiry register), so that we can answer, continue the conversation and see which inquiries turned into cooperation.
Data: name, e-mail address and/or phone number, type of request, shop address (if provided), message content, the page the form was sent from, the landing page and campaign parameters (UTM). If you accepted marketing cookies – also the Google Ads click identifier.
Purposes and legal bases:
- answering your inquiry and preparing an offer – Art. 6(1)(b) GDPR (steps taken at your request before entering into a contract),
- keeping a register of inquiries, protecting the form against spam and measuring the effectiveness of our own marketing – Art. 6(1)(f) GDPR (legitimate interest),
- sending Google Ads information about an inquiry (the ad click identifier or a hashed e-mail address/phone number) to measure advertising effectiveness – only with your consent to marketing cookies (Art. 6(1)(a) GDPR); you can withdraw it at any time in the cookie settings.
Spam protection: the form is protected by Google reCAPTCHA v3 (Google Ireland Ltd.), which assesses whether the form is being sent by a human. Submissions automatically rejected as spam are also stored in the register, so that messages rejected by mistake can be recovered.
Retention:
- inquiries that did not lead to cooperation – 24 months from the last update of the entry, after which they are deleted automatically,
- submissions automatically rejected as spam – 30 days,
- if an inquiry leads to cooperation – for the duration of the cooperation and afterwards for the limitation period of claims and the period required by tax and accounting law; such entries are not deleted automatically.
Recipients: hosting provider (CyberFolks S.A.), CDN and security provider (Cloudflare Inc.), e-mail provider, Google Ireland Ltd. (reCAPTCHA and – with marketing consent – Google Ads). Data are not sold or shared with other parties for their marketing purposes.
Orders in the online store (PrestaShop modules)
When you buy in the store we process the data given in the order (name, company and tax ID, address, e-mail, phone), order and payment data and the data needed to deliver files and licences. Legal basis: Art. 6(1)(b) GDPR (sales contract), Art. 6(1)(c) GDPR (tax and accounting obligations) and Art. 6(1)(f) GDPR (establishing claims, sales statistics).
The store records the traffic source assigned to an order (WooCommerce order attribution). If an order is not completed, the data entered in the checkout form may be saved as an abandoned cart so that you can complete the purchase.
Order data are kept for the period required by tax and accounting law and for the limitation period of claims. Recipients are payment operators (Tpay, PayPal), the hosting provider and the accounting office.
5. Recipients of data
Data may be shared with entities that support the controller’s business, in particular:
- hosting providers,
- e-mail providers,
- IT service providers,
- accounting office,
- operators of analytics and marketing tools,
- payment operators, when you buy a product in the online store.
These entities process data only under appropriate agreements and in accordance with the law.
6. Your rights
You have the right to:
- access your data,
- rectify your data,
- have your data erased,
- restrict processing,
- data portability,
- object to processing based on legitimate interest,
- withdraw consent at any time, where processing is based on consent.
To exercise your rights, contact the controller at [email protected]. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, Poland) or the supervisory authority in your country.
7. Cookies
The website uses cookies to:
- make the website work properly,
- keep it secure,
- remember your preferences,
- collect visit statistics,
- carry out marketing activities – only if you have given consent.
You decide which optional cookies we may use in the cookie banner; you can change your choice at any time. You can also manage cookies in your browser settings. Limiting cookies may affect some features of the website.
8. Third-party tools
The website currently uses the following third-party tools:
- Google Analytics 4 and Google Tag Manager (Google Ireland Ltd.) – visit statistics, with consent,
- Google Ads (Google Ireland Ltd.) – conversion and ad performance measurement, with consent to marketing cookies,
- Google reCAPTCHA (Google Ireland Ltd.) – protection of forms against spam,
- Google Maps (Google Ireland Ltd.) – location map on the contact page,
- Google Fonts (Google Ireland Ltd.) – fonts displayed on the website,
- Cloudflare (Cloudflare Inc.) – CDN, DNS, security and anonymised Cloudflare Web Analytics statistics,
- Jetpack / WordPress.com (Automattic Inc.) – image CDN, login protection and visit statistics,
- WooCommerce (Automattic Inc.) – the module store, including recording the traffic source of an order (order attribution),
- payment operators Tpay (Krajowy Integrator Płatności S.A.) and PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A.) – when you buy in the store,
- Mailchimp (Intuit Inc.) – newsletter, only if you subscribe.
These tools set cookies according to the consent you give in the cookie banner.
9. Transfers outside the European Economic Area
Some technology providers may process data outside the European Economic Area. In such cases data are transferred only in accordance with Chapter V GDPR, in particular on the basis of a European Commission adequacy decision (including the EU–U.S. Data Privacy Framework) or Standard Contractual Clauses.
10. Changes to this policy
The controller may change this Privacy Policy, in particular when the law, technology or website features change. The current version is always available on this website.