This Policy sets out the rules for the processing of personal data and for the use of cookies and similar technologies in connection with the use of the website available at https://ajitecom.eu/ (hereinafter: the “Website”).
§ 1. Data controller
The controller of your personal data is:
AJIT Adam Jasińskiul. Bojowników 25, 07-410 Ostrołęka
NIP: 7582272911, REGON: 146913730
e-mail: kontakt@ajit.pl
tel.: 728 658 005
The controller has not appointed a Data Protection Officer. In all matters concerning the processing of personal data you can contact us at kontakt@ajit.pl.
§ 2. Purposes, legal bases and processing periods
| Purpose of processing | Legal basis | Retention period |
|---|---|---|
| Handling an enquiry sent via the contact form or the on-site chat, preparing an offer | Art. 6(1)(b) GDPR (steps prior to entering into a contract) and Art. 6(1)(f) GDPR (legitimate interest — handling correspondence) | Until the correspondence is concluded, and then for a maximum of 12 months for archival and evidentiary purposes |
| Entering into and performing a contract — providing IT services, supplying digital content, customer service | Art. 6(1)(b) GDPR | For the duration of the contract and until the limitation period for claims expires |
| Sending the newsletter (direct marketing by electronic means) | Art. 6(1)(a) GDPR (consent) in conjunction with Art. 398 of the Electronic Communications Law (Prawo komunikacji elektronicznej) | Until consent is withdrawn / you unsubscribe from the newsletter |
| Website traffic analytics and marketing using cookies and similar technologies | Art. 6(1)(a) GDPR (consent given in the cookie banner) | Until consent is withdrawn, but no longer than the lifetime of the individual cookies (§ 8) |
| Compliance with legal obligations — issuing invoices, accounting records | Art. 6(1)(c) GDPR | 5 years counted from the end of the tax year |
| Ensuring the security of the Website, server logs, defence against claims | Art. 6(1)(f) GDPR (legitimate interest) | Server logs: up to 12 months. Data needed for claims: until the limitation period expires |
§ 3. Scope of data collected
Depending on which features of the Website you use, we process:
- Contact form: first name and surname, e-mail address, telephone number (if you provide it), content of the message.
- On-site chat: first name or nickname, e-mail address (if you provide it), content of the conversation, session identifier, IP address.
- Newsletter: e-mail address, first name (optional), date and scope of the consent given, IP address at the time of subscription.
- Contract / invoice: first name and surname, company details (name, address, NIP), contact details.
- Technical data collected automatically: IP address, cookie identifiers and device identifiers, type of browser and system, approximate location, information about activity on the Website (pages visited, time of visit, source of the visit).
Providing data is voluntary; however, failing to provide it makes the following impossible, respectively: contacting you, subscribing to the newsletter or entering into a contract.
§ 4. Recipients of data
Your data may be entrusted to the following categories of recipients, solely to the extent necessary to achieve the purposes indicated above:
- Hosting provider: SEOHOST Sp. z o.o., ul. Obornicka 330, 60-689 Poznań, NIP 9721323212, REGON 520718284, KRS 0000939910. The servers are located in Poland (EEA). Processing takes place under a data processing agreement (Art. 28 GDPR).
- Accounting office — with regard to accounting records.
- Google Ireland Limited — Google Analytics 4 and Google Ads services (only after consent to analytical / marketing cookies has been given).
- Meta Platforms Ireland Limited — Meta Pixel (only after consent to marketing cookies has been given).
- Consent management platform (CMP) provider — operation of the cookie banner.
- Newsletter service provider and entities providing e-mail services.
- Entities authorised under the provisions of law — upon their request.
The controller does not sell personal data to third parties.
§ 5. Transfers of data outside the European Economic Area
Data processed in connection with hosting, e-mail and contract handling remain within the EEA.
When Google tools (Google Analytics 4, Google Ads) and Meta Pixel are used, data — including cookie identifiers and IP address — may be transferred to Google LLC and Meta Platforms, Inc., based in the United States. The basis for the transfer is a decision of the European Commission finding an adequate level of protection (EU–U.S. Data Privacy Framework) and, additionally, standard contractual clauses (SCC).
The transfer takes place only if you give the relevant consent to analytical or marketing cookies. You can obtain a copy of the safeguards by writing to kontakt@ajit.pl.
§ 6. Your rights
You have the right to:
- access your data and obtain a copy of it,
- rectification (correction) of your data,
- erasure of your data (“right to be forgotten”),
- restriction of processing,
- data portability,
- object to processing based on legitimate interest, including to direct marketing,
- withdraw consent at any time — without affecting the lawfulness of processing carried out before its withdrawal,
- lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw.
In matters concerning cookies, the supervisory authority is also the President of the Office of Electronic Communications (Prezes Urzędu Komunikacji Elektronicznej).
§ 7. Profiling and automated decision-making
Within the analytical and marketing tools (Google Analytics, Google Ads, Meta Pixel), your data may be subject to profiling, consisting in the automated analysis of your activity on the Website in order to tailor advertising content and to create statistics. Profiling takes place solely on the basis of your consent to marketing / analytical cookies.
We do not take decisions about you based solely on automated processing that would produce legal effects concerning you or similarly significantly affect you.
§ 8. Cookies
The Website uses cookies — small text files stored on your end device. Some of them store identifiers which, in combination with other data, may constitute personal data.
Legal basis
Cookies that are necessary to provide a service requested by the user are used without consent (Art. 398(3) of the Act of 12 July 2024 — Electronic Communications Law (Prawo komunikacji elektronicznej)). All other categories — analytical and marketing — are activated only after you have given your consent beforehand in the cookie banner. Until consent is given, the relevant scripts are not loaded.
Categories of cookies
- Necessary (technical) — maintaining the session, operation of the contact form and the chat, remembering your choice in the cookie banner, security. They do not require consent.
- Analytical / statistical — measuring traffic and the way the Website is used (Google Analytics 4). They require consent.
- Marketing / advertising — measuring the effectiveness of ads and remarketing (Google Ads, Meta Pixel). They require consent.
List of cookies used
| Name | Provider | Category | Purpose | Lifetime |
|---|---|---|---|---|
| PHPSESSID | ajit.pl | Necessary | Maintaining the user session | Session |
| CMP consent cookie | Seigi (cookie banner) | Necessary | Remembering the scope of the consents given | Up to 12 months |
| chat cookie | ajit.pl | Necessary | Identifying the chat conversation session | Session / up to 30 days |
| _ga | Google Ireland Ltd | Analytical | Distinguishing users (GA4) | 2 years |
| _ga_<ID> | Google Ireland Ltd | Analytical | Maintaining the GA4 session state | 2 years |
| _gcl_au | Google Ireland Ltd | Marketing | Measuring Google Ads conversions | 90 days |
| _fbp | Meta Platforms Ireland Ltd | Marketing | Identifying the browser for Meta advertising purposes | 90 days |
| fr | Meta Platforms Ireland Ltd | Marketing | Delivering and measuring Meta ads | 90 days |
Managing consents
You can change or withdraw your consent at any time — it is as easy as giving it. Consent expires after 12 months at the latest; after that time we will ask for it again.
You can also change the cookie settings in your browser yourself or block them completely. Restricting necessary cookies may affect the operation of some features of the Website (e.g. the form or the chat). The Website remains available even if you refuse consent to analytical and marketing cookies.
The rules for the processing of data by third-party providers are described in their privacy policies: Google — policies.google.com/privacy, Meta — facebook.com/privacy/policy.
§ 9. Data security
The controller applies technical and organisational measures ensuring the protection of the data processed, in particular against access by unauthorised persons, loss or unauthorised modification, including encryption of transmission (SSL/TLS), access control and regular backups.
§ 10. Changes to the Policy
The controller may make changes to this Policy if required by the provisions of law or by functional changes to the Website. Information about the changes, together with the date on which they enter into force, is published on this page.