Skip to content

Privacy Policy

Last updated: 21 sierpnia 2026

We want you to know what happens to your data when you visit our website or write to us
through the contact form. Below we set it out as precisely as we can: who is responsible
for your data, what we use it for, how long we keep it, and what you can require us to do.

1. Who the data controller is

The controller of your personal data is INVESTIT SYSTEMS spółka z ograniczoną odpowiedzialnością, with its registered
office in Poznań, ul. Królowej Jadwigi 43, 61-871 Poznań, Poland, entered in the Register of Entrepreneurs of the National
Court Register under KRS 0000615160, VAT ID (NIP) 6172209166, REGON 364313079.

For anything concerning personal data, write to poczta@investitsystems.pl
or call +48 783 477 243.

We have not appointed a Data Protection Officer — data protection matters are handled
directly by the company’s management board at the address above.

2. What data we collect and why

2.1. Contact form

When you write to us through the form, you provide your name, e-mail address,
phone number and the content of your message. Together with the submission we
record your IP address, browser identifier and the date and time — used
solely to establish where the submission came from and to defend against abuse.

Purpose: to answer your question, prepare a quote and continue
the correspondence.

Legal basis: Article 6(1)(b) GDPR — steps taken at your request prior
to entering into a contract; and, for the technical records and protection against abuse,
Article 6(1)(f) GDPR, our legitimate interest.

Please note: providing this data is voluntary, but without an e-mail
address or phone number we have no way to reply.

The submission is stored in our website’s database and delivered to our mailbox.

2.2. Visit statistics

We use Google Analytics 4 to see how many people visit the site and which content is
useful. The tool collects data about how the site is used, together with a truncated
IP address.

Legal basis: Article 6(1)(a) GDPR — your consent, given through the
cookie banner. Until you give it, analytics collects no data that could identify you.
You can withdraw consent at any time using “Cookie settings” at the bottom of the page —
withdrawal does not affect the lawfulness of processing carried out beforehand.

2.3. Form protection

Our forms are protected by Google reCAPTCHA, which distinguishes a person from a spam
robot. To do so it sends Google information about your browser and how you move around
the page. Google’s
privacy
policy applies to that processing.

Legal basis: Article 6(1)(f) GDPR — our legitimate interest in
protecting the site against abuse.

2.4. Server technical data

Our hosting provider records IP addresses and request details in server logs — a standard
mechanism on every server, necessary for it to operate and for fault detection.

Legal basis: Article 6(1)(f) GDPR.

3. How long we keep your data

  • Form submissions — 36 months from sending, after which they are
    deleted automatically. If a submission leads to cooperation, contract-related data is kept
    for the duration of the contract and the limitation period for claims, and accounting
    records for the 5 years required by tax law.
  • Statistical data — in line with Google Analytics settings, no longer
    than 14 months.
  • Server logs — in line with the hosting provider’s policy, typically
    up to several months.
  • Your cookie choice — 12 months, after which we ask again.

4. Who we share data with

We do not sell your data and we do not share it for marketing purposes. It reaches only
those parties that help us run the website:

  • our hosting provider, whose servers run the site and our mail,
  • Google Ireland Limited — statistics and form protection,
  • Clutch — the client reviews widget embedded on the site; once it loads,
    Clutch receives your IP address and browser information,
  • software providers we use to handle correspondence and accounting,
  • public authorities, where disclosure is required by law.

Each of them processes data on our behalf under a data processing agreement and only to
the extent needed.

5. Transfers outside the European Economic Area

Google may also process data outside the EEA, including in the United States. This takes
place on the basis of the European Commission’s adequacy decision (Data Privacy Framework)
and standard contractual clauses approved by the Commission. We will provide a copy of these
safeguards on request sent to poczta@investitsystems.pl.

6. Your rights

In relation to your data you have the right to:

  • access — ask what data we hold about you and request a copy,
  • rectification — if the data is wrong or out of date,
  • erasure — where we no longer have grounds to keep it,
  • restriction of processing — you can require us to only store the data
    until a disputed matter is resolved,
  • data portability — for data processed on the basis of consent
    or a contract,
  • object — to processing based on our legitimate interest; we will then
    stop, unless we demonstrate compelling grounds overriding your rights,
  • withdraw consent — at any time, without affecting the lawfulness of
    processing before withdrawal.

To exercise any of these rights, write to poczta@investitsystems.pl.
We reply within one month.

You also have the right to lodge a complaint with the President of the Personal
Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland) if you believe we
process your data unlawfully.

7. Cookies

Cookies are small files stored in your browser. We group them into three categories:

  • necessary — required for the site to work, including remembering your
    cookie choice; these cannot be switched off,
  • analytics — let us count visits and see which content is useful;
    active only with your consent,
  • marketing — allow advertising to be tailored to you; active only with
    your consent.

You can change your choice at any time using the “Cookie settings” button
at the bottom of every page. You can also delete or block cookies in your browser settings —
parts of the site may then work less well.

8. Automated decisions and profiling

We do not make decisions about you based solely on automated processing, and we do not
profile you in a way that produces legal effects.

9. Links to other websites

The site contains links to external websites, including social media. Once you follow such
a link, that website’s own privacy policy applies — we are not responsible for how it
processes data.

10. Changes to this policy

Whenever we change how we process data, we will update this document and the date at the
top. If a change is significant, we will say so clearly on the website.