WEBSITE DOCUMENTS
Privacy policy
1. Controller and scope
The controller is Ewelina Wojciechowska, a sole trader trading as WEBee Solutions Ewelina Wojciechowska, Polish tax identification number (NIP) 7972006548, address: Pobiedna 94a, 26-420 Nowe Miasto nad Pilicą, Poland. For personal data matters, contact it@webeesolutions.pl or write to ul. Obornicka 32, 64-514 Lulinek, Poland. This policy covers visitors to https://www.webeesolutions.pl, people sending enquiries, complaints or other messages to WEBee, and individuals representing businesses or other organisations in that correspondence. Where a paid audit, implementation or other engagement involves broader processing, or where WEBee acts as a processor of client data, appropriate additional rules are agreed for that process or contract.
2. Data we process and its sources
correspondence data: email address, message content and any name, company, role, telephone number or other information voluntarily provided to discuss the matter; technical data connected with use of the website, in particular the IP address and — to the extent actually logged by the infrastructure — request date and time, requested resource, browser or device information, response status, and error or security-event information; information relating to a report or complaint where the user provides it; business contact details and context received from an employer, colleague or other representative of the organisation where the data was not obtained directly from the individual. Please provide only information needed for the matter. An ordinary initial enquiry does not require passwords, national identification numbers, copies of identity documents or customer databases. Where personal data is obtained from another source, WEBee provides the information required by Article 14 GDPR unless a statutory exemption applies. The information is provided within a reasonable period, no later than one month after obtaining the data, or — where the data is to be used to communicate with the individual — at the first communication if that occurs earlier.
3. Purposes, legal bases and retention
Purpose Legal basis Data Retention / criterion Website delivery, diagnostics and security Article 6(1)(f) GDPR — legitimate interest in website operation, error diagnosis and security technical data including IP and technical logs for the period necessary for operation, diagnostics and security under the infrastructure configuration; longer only where required by an incident, legal duty or claim Responding to an individual acting on their own behalf and pre-contract steps Article 6(1)(b) GDPR contact data, correspondence and information needed to respond or prepare a proposal while handling the matter and up to 12 months after closure if no contract follows Communication with a business or organisation representative Article 6(1)(f) GDPR — legitimate interest in business communication, identifying needs and maintaining the relationship with the represented organisation business contact details, correspondence and context while handling the matter and up to 12 months after closure unless the data becomes part of engagement records Website reports and complaints generally Article 6(1)(f) GDPR — legitimate interest in handling and documenting the matter; where a legal or contractual duty applies, Article 6(1)(c) or (b) as appropriate contact details, issue description, correspondence and technical information supplied while handling the matter and up to 12 months after closure; longer only where required by law or a specific claim Establishing, exercising or defending claims Article 6(1)(f) GDPR — legitimate interest in protecting WEBee’s rights information and records necessary for the particular claim until the applicable limitation period expires and any proceedings have ended Handling GDPR rights requests Article 6(1)(c) GDPR together with Articles 12–22 GDPR information necessary to receive, verify and document the request for the period needed to handle the request and demonstrate proper compliance with legal duties If an enquiry leads to a contract, information necessary to perform, settle and document the engagement becomes part of contract records and may be subject to different retention periods arising from the type of document, tax or accounting duties and protection of legal claims.
4. Recipients and processors
Personal data may be entrusted or disclosed only to the extent necessary for the relevant purpose. Recipients may include providers of hosting and cloud infrastructure, email, security and technical support and — where necessary for a particular matter — legal or accounting advisers. Public authorities may receive data where there is a legal basis. WEBee does not sell personal data. Sending an enquiry does not automatically result in sharing contact details with prospective contractors. If a client asks WEBee to introduce a specific contractor or provider, the recipient, purpose and necessary scope of disclosure are agreed before the data is shared.
5. Transfers outside the European Economic Area
In connection with the use of IT services, particularly cloud, email or technical-support services, data may be processed by providers that have entities, personnel or infrastructure outside the European Economic Area. Where data is transferred to a third country, WEBee uses a mechanism required by Chapter V GDPR, in particular a European Commission adequacy decision or Standard Contractual Clauses together with supplementary safeguards where necessary. Information about the mechanism applicable to a specific provider can be obtained by contacting WEBee using the details in section 1.
6. Your rights
Subject to the GDPR, you may request access to your personal data and a copy, rectification, erasure and restriction of processing. Where the legal conditions are met, you also have the right to data portability for data you provided that is processed by automated means on the basis of consent or a contract. Where processing is based on legitimate interests, you may object on grounds relating to your particular situation. WEBee will stop that processing unless it demonstrates compelling legitimate grounds overriding your interests, rights and freedoms or the processing is required to establish, exercise or defend legal claims. If any processing is based on consent, you will be informed accordingly. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal. You may lodge a complaint with the President of the Polish Personal Data Protection Office (UODO) or another competent supervisory authority under the GDPR.
7. How to exercise your rights
Send your request to it@webeesolutions.pl or ul. Obornicka 32, 64-514 Lulinek, Poland. WEBee responds without undue delay and normally within one month. Where the GDPR permits, the period may be extended by a further two months; WEBee will notify you of the extension and reasons within the first month. Requests are generally handled free of charge. If there are reasonable doubts about the requester’s identity, WEBee may request only additional information necessary to confirm identity. WEBee does not routinely require a scan of an identity document.
8. Voluntary provision, automation and profiling
Providing information in a message is voluntary, but without a reply address and sufficient context WEBee may be unable to respond. Technical information necessary to establish the website connection is processed during website use. WEBee does not use website data for solely automated decisions that produce legal effects or similarly significantly affect an individual. The website covered by this policy does not perform advertising profiling.
9. Security and updates
WEBee applies organisational and technical measures appropriate to the risk. Security measures are adjusted to the actual infrastructure, providers and nature of the information processed. This policy is updated when processes, providers, website functions or applicable law change. Each published version states its effective date. Publishing an updated policy is not, by itself, user consent to new processing purposes.