Privacy Policy

Last updated:

1. Who we are

Spectro Web Solutions sp. z o.o. (“Spectro”, “we”) is the controller of the personal data described in this policy. We build websites, digital platforms and business automations, and provide IT consulting.

Spectro Web Solutions sp. z o.o., ul. Władysława Pytlasińskiego 16, Warszawa, Poland · KRS: 0001052134 · NIP: 9512575211 · Contact for privacy matters: [email]

2. What this policy covers

This policy explains how we handle personal data of people who visit spectrowebsolutions.com, contact us, or become our clients. It applies under the EU General Data Protection Regulation (GDPR).

It does not cover the websites we build and host for clients. On those sites, the client decides what data is collected and is the controller; we act only as their processor, as described in our Website Service Terms.

3. What data we collect and why

We only collect what we need to talk to you, deliver our services and meet our legal obligations.

Purpose

Data

Legal basis (GDPR)

Answering your enquiries

Name, email, phone or WhatsApp number, company, your message

Taking steps at your request before a contract (Art. 6(1)(b))

Delivering our services

Contact details, business information and content you send us, access details for your domain or accounts

Performance of a contract (Art. 6(1)(b))

Payments and invoicing

Name, billing address, email, tax ID if applicable, payment status

Performance of a contract and legal obligations under Polish tax and accounting law (Art. 6(1)(b) and (c))

Support and service messages

Contact details and the content of your messages

Performance of a contract (Art. 6(1)(b))

Running and securing our website

IP address, browser and device data, pages visited

Our legitimate interest in keeping the website working and secure (Art. 6(1)(f))

Handling disputes and claims

Relevant correspondence and records

Our legitimate interest in establishing or defending legal claims (Art. 6(1)(f))

We do not see or store your full card details. Card payments are processed directly by our payment provider.

We do not sell personal data and do not use it for automated decisions that affect you.

4. Who we share data with

We share personal data only with service providers we need to run our business, and only as far as each one needs it:

  • Payment processing: Stripe, to process card payments and subscriptions.
  • Invoicing and accounting: our invoicing software (Fakturownia) and our accounting office.
  • Hosting and infrastructure: the providers that host our website and our clients’ websites.
  • Email and communication: our email provider and WhatsApp, when you contact us through them.
  • Authorities: public authorities, when the law requires it.

These providers process data on our instructions or under their own privacy terms, and are bound to protect it.

5. Transfers outside the EU

Some providers, such as Stripe and WhatsApp, may process data outside the European Economic Area, including in the United States. In those cases, transfers are protected by an adequacy decision (such as the EU-US Data Privacy Framework) or by the European Commission’s Standard Contractual Clauses.

6. How long we keep data

  • Enquiries that don’t lead to a contract: up to 12 months after our last contact.
  • Client data: for the duration of our contract, and afterwards until any possible claims expire under Polish law.
  • Invoices and accounting records: 5 years from the end of the calendar year in which the tax obligation arose, as required by Polish tax law.
  • Website technical logs: for a limited period needed for security and troubleshooting.

After these periods, we delete or anonymise the data.

7. Security

We protect personal data with appropriate technical and organisational measures, including encrypted connections, access controls, regular updates and backups. Access is limited to people who need it to do their work.

8. Cookies

Our website uses cookies that are necessary for it to work. Where we use analytics or marketing cookies, we ask for your consent first, and you can withdraw it at any time through the cookie settings on our website or in your browser.

9. Your rights

Under the GDPR, you have the right to:

  • access your personal data and get a copy of it
  • correct inaccurate data
  • have your data deleted, where there is no longer a reason to keep it
  • restrict or object to how we use it, including processing based on our legitimate interests
  • receive your data in a portable format
  • withdraw consent at any time, where we rely on it, without affecting earlier processing

To use any of these rights, contact us at [email]. We reply within one month.

If you believe we handle your data unlawfully, you can file a complaint with the Polish data protection authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, uodo.gov.pl), or with the authority in your own EU country.

10. Changes to this policy

We may update this policy when our services or the law change. The latest version is always on this page, with the date it was last updated.

11. Contact

Spectro Web Solutions sp. z o.o. ul. Władysława Pytlasińskiego 16, Warszawa, Poland yuran@spectrowebsolutions.com · spectrowebsolutions.com