Request for Offer
Legal

Privacy Policy

of the website www.dpiservices.eu
Last updated: 16.06.2026

1. Data Controller

The controller of personal data of users of the website available at www.dpiservices.eu (hereinafter: the “Website”) is:

DPI Services sp. z o.o.
ul. Puławska 2 bud B, 02-566 Warsaw, POLAND
e-mail: contact@dpiservices.eu
VAT ID/NIP: PL5213731753
KRS: 0000614645
(hereinafter: the “Controller”)

For matters related to personal data protection, you may contact us at: rodo@dpiservices.eu or in writing at the Controller’s registered address.

2. Legal Basis for Data Processing

Personal data is processed in accordance with:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR);
  • the Act of 10 May 2018 on the Protection of Personal Data (Journal of Laws 2018, item 1000, as amended);
  • the Act of 18 July 2002 on the Provision of Electronic Services (Journal of Laws 2002 No. 144, item 1204, as amended);
  • the Act of 16 July 2004 – Telecommunications Law (Journal of Laws 2004 No. 171, item 1800, as amended) as regards cookies.

3. Purposes and Legal Bases for Personal Data Processing

3.1 Contact and Handling of Enquiries

Legal basis: Article 6(1)(b) GDPR (necessity for the performance of a contract or pre-contractual measures) or Article 6(1)(f) GDPR (legitimate interest of the Controller in responding to enquiries).

Data processed: first and last name, e-mail address, phone number, message content.

Retention period: until the matter is resolved, and then for the limitation period of potential claims (generally 3 years, and 3 years for claims between entrepreneurs).

3.2 Conclusion and Performance of Contracts

Legal basis: Article 6(1)(b) GDPR.

Data processed: identification, contact, and billing data necessary to perform the service.

Retention period: for the duration of the contract and thereafter for the period required by law (e.g. 5 years for accounting records – Article 74 of the Accounting Act).

3.3 Legal and Accounting Requirements

Legal basis: Article 6(1)(c) GDPR (compliance with a legal obligation).

Retention period: for the periods required by tax and accounting law (generally 5 years from the end of the tax year).

3.4 Direct Marketing

Legal basis: Article 6(1)(f) GDPR (legitimate interest of the Controller) – solely towards existing customers regarding similar products or services, or Article 6(1)(a) GDPR (consent) – in other cases.

Consent may be withdrawn at any time without affecting the lawfulness of processing based on consent before its withdrawal.

3.5 Website Analytics and Statistics

Legal basis: Article 6(1)(a) GDPR (consent given by accepting analytical cookies) or Article 6(1)(f) GDPR (legitimate interest – anonymous traffic statistics).

Detailed information on cookies is contained in the Cookie Policy available on the Website.

4. Recipients of Personal Data

Personal data may be transferred to the following categories of recipients:

  • IT and hosting service providers (e.g. server provider, e-mail service) – on the basis of a data processing agreement in accordance with Article 28 GDPR;
  • an accounting office or tax advisor – to the extent necessary to fulfil accounting obligations;
  • a law firm or debt-collection agency – in the event of the pursuit or defence of claims;
  • public authorities (e.g. tax office, Social Insurance Institution (ZUS), law-enforcement agencies) – where the obligation to disclose arises from a legal provision;
  • analytics service providers (e.g. Google Analytics) – only after consent to analytical cookies has been given.

The Controller does not sell personal data to third parties.

5. Transfers of Data Outside the European Economic Area

As a rule, the Controller does not transfer personal data to third countries (outside the EEA). If such a transfer does occur – e.g. in connection with the use of cloud services from US providers – it takes place exclusively:

  • on the basis of a European Commission adequacy decision (e.g. the Data Privacy Framework for the USA);
  • on the basis of Standard Contractual Clauses adopted by the European Commission (Article 46(2)(c) GDPR);
  • on the basis of the explicit consent of the data subject (Article 49(1)(a) GDPR).

6. Rights of Data Subjects

Under the GDPR, you have the following rights:

  • right of access (Article 15 GDPR) – to obtain information about the data being processed and to receive a copy;
  • right to rectification (Article 16 GDPR) – to correct or complete inaccurate or incomplete data;
  • right to erasure (right to be forgotten, Article 17 GDPR) – where there are no grounds for continued processing;
  • right to restriction of processing (Article 18 GDPR) – to suspend processing operations in certain circumstances;
  • right to data portability (Article 20 GDPR) – to receive data in a structured, commonly used format;
  • right to object (Article 21 GDPR) – to processing based on the Controller’s legitimate interest;
  • right to withdraw consent – at any time, without affecting the lawfulness of processing based on consent before its withdrawal;
  • right to lodge a complaint with a supervisory authority – the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, www.uodo.gov.pl.

To exercise any of the above rights, please contact the Controller at: [E-MAIL ADDRESS FOR PERSONAL DATA ENQUIRIES]. The Controller will respond without undue delay – as a rule within 30 calendar days.

7. Data Security

The Controller applies appropriate technical and organisational measures to ensure the protection of personal data being processed, in particular:

  • encryption of data transmission (SSL/TLS protocols);
  • access controls to IT systems;
  • regular backups;
  • training for employees and collaborators who have access to data.

8. Cookies and Tracking Technologies

The Website uses cookies and similar tracking technologies. Detailed information on this subject is contained in the separate Cookie Policy available on the Website.

9. Links to Other Websites

The Website may contain links to websites of other entities. The Controller is not responsible for the privacy policies in force on those websites.

10. Changes to the Privacy Policy

The Controller reserves the right to amend this Privacy Policy. Users will be notified of any material changes by the publication of an updated version of the document on the Website with the date of the last update.

11. Contact

Any questions, comments, or requests regarding this Privacy Policy should be addressed to:

DPI Services sp. z o.o.
ul. Puławska 2 bud B, 02-566 Warsaw, POLAND
e-mail: contact@dpiservices.eu

This Privacy Policy is effective as of 16.06.2026.