Privacy Policy

Pursuant to Article 13(1) and (2) of the General Data Protection Regulation (GDPR) of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, we inform you that:

1. Data Controller
   The controller of your personal data is Patryk Hołub conducting business activity under the name: Kecharitomene Cybersecurity with its registered office in Bydgoszcz, NIP 967 134 93 84.
2. Purpose and legal basis of processing
   The processing of your personal data is necessary for the proper performance of the service consisting in IT consultancy, as well as for concluding a cooperation agreement. The legal basis for processing is Article 6(1)(b) of the GDPR (processing necessary for the performance of a contract to which the data subject is party).
3. Scope of data
   When concluding the agreement, we request the following personal data:
   • For a natural person: first name and surname, address, PESEL number and contact details (phone, email)
   • For a company: company name and registered office address, NIP number and contact details of the main representative
4. Rights of data subjects
   You have the right to access the content of your data and to rectify, erase or restrict processing, as well as the right to object, request cessation of processing and data portability, the right to withdraw consent at any time, and the right to lodge a complaint with the supervisory authority (President of the Personal Data Protection Office).
5. Data recipients
   Your personal data will be shared with other data recipients only in exceptional situations and exclusively with entities with which the company has concluded a data processing agreement.
6. Profiling
   Your data will not be subject to profiling.
7. Data storage period
   Your personal data will be stored only for the period necessary to perform the service, settle accounts, and for the period provided for in the agreement and legal regulations, as well as later for marketing purposes — until consent is withdrawn (withdrawal does not affect the lawfulness of processing before its withdrawal).
8. Legitimate interests of the controller
   Your data will be processed for the purposes of pursuing the legitimate interests of the Data Controller, i.e. pursuing possible claims related to the transaction — in accordance with applicable legal regulations concerning the limitation periods for claims (Articles 117 et seq. of the Civil Code).