1. Data Controller
The data controller is Marcin Szymański IT Consulting (Jednoosobowa działalność gospodarcza), address: Wrocław, ul. Sołtysowicka, nr 32B, lok. 14, 51-168, Polska, NIP: 8831838394, REGON: 522883202, rejestr: CEIDG.
Privacy contact: [email protected].
2. Data We Process
- account data (email, hashed password, profile data)
- billing data (company name, tax number, billing address)
- monitoring data (URLs, monitor configs, metrics, alerts)
- technical/security data (IP, identifiers, logs)
3. Purposes and Legal Bases
- service delivery and account operation - Art. 6(1)(b) GDPR
- tax/accounting obligations - Art. 6(1)(c) GDPR
- security and claims defense - Art. 6(1)(f) GDPR
- cookieless first-party service analytics based on legitimate interest, and optional external analytics/marketing based on consent
4. Data Recipients
Data may be processed by infrastructure, payment, communication, analytics, legal and accounting providers acting on our behalf.
5. Transfers Outside EEA
If data is transferred outside the EEA, we use appropriate safeguards, including Standard Contractual Clauses (SCCs) or adequacy decisions.
6. Retention Periods
Data is retained for the period necessary to provide services, fulfill legal obligations, and defend potential claims.
7. Public Audit Tools
When you run a public site audit, we process your IP address to prevent abuse and store only a keyed, pseudonymous hash with the audit result. The result and hash are deleted automatically after 24 hours. This processing is based on our legitimate interest in securing the service (GDPR art. 6(1)(f)).
8. Your Rights under GDPR
- right of access (Art. 15 GDPR)
- right to rectification (Art. 16 GDPR)
- right to erasure (Art. 17 GDPR)
- right to restriction of processing (Art. 18 GDPR)
- right to data portability (Art. 20 GDPR)
- right to object to processing (Art. 21 GDPR)
- right to withdraw consent at any time (where consent is the legal basis)