Privacy Policy

1The data controller for personal data

The data controller for personal data collected via the sipsecurity.pl website is:

In accordance with Article 37 of the GDPR, the obligation to appoint a Data Protection Officer applies primarily to public bodies and organisations that process personal data on a large scale or in relation to specific categories of data. The controller, operating within its current scope of activities, has not appointed a separate Data Protection Officer. In all matters relating to the processing of personal data, you may contact the controller directly using the contact details provided above.

2What data do we process and for what purpose?

The categories listed above cover the standard range of data collected via the forms and features available on the website. Should the website be expanded to include new forms (e.g. newsletter sign-up, live chat), this table will be updated accordingly.

3Legal basis for processing

We process personal data on the basis of Article 6(1) of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR):

• (a) — the consent of the data subject (e.g. consent to the use of cookies that are necessary for this purpose, other than those required for the website to function);
• ( b ) — taking action prior to the conclusion of a contract at the request of the data subject (responding to a request for quotation, arranging a consultation);
• ( f ) — the controller’s legitimate interests (direct marketing of its own services, ensuring the security and statistics of the website, establishing, pursuing or defending against claims).

4Recipients of the data

Personal data may be transferred to entities that assist the controller in operating the website and carrying out its activities, in particular:

• hosting and IT service providers who maintain the sipsecurity.pl website;
• providers of email and CRM tools used to handle enquiries;
• entities entitled to receive data under applicable legislation (e.g. public authorities).

Some of the above entities may process data outside the European Economic Area (EEA) — this applies in particular to popular email, analytics and cloud tools provided by reputable global suppliers. In such cases, the data controller ensures an adequate level of data protection in accordance with the requirements of the GDPR, in particular by using providers that have been granted an adequacy decision by the European Commission confirming an adequate level of protection in the country concerned, or that apply standard contractual clauses.

5Data retention period

We retain personal data for the period necessary to fulfil the purposes for which it was collected, in particular:

• data from correspondence and requests for quotations — for the duration of the contact and until the expiry of any claims arising from the cooperation, generally for a period of 3 years from the end of the contact (the standard limitation period for claims relating to business activities under the Civil Code), and in the case of claims established by a final and binding court judgement — for 6 years;
• data processed on the basis of consent — until such consent is withdrawn;
• data in server logs and cookies — for a period not exceeding 12 months;
• job applicants’ data (where applicable) — for the duration of the relevant recruitment process and for up to 6 months after its completion; and, where separate consent has been given to take part in future recruitment processes, for a period of up to 2 years.

6The rights of the data subject

In relation to the processing of personal data, you have the following rights:

• the right to access data and to receive a copy of it;
• the right to rectify (correct) data;
• the right to erasure (‘the right to be forgotten’);
• the right to restrict the processing of data;
• the right to data portability;
• the right to object to the processing of data, including profiling and direct marketing;
• the right to withdraw consent to the processing of data at any time, without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal
• the right to lodge a complaint with the supervisory authority — the President of the Office for Personal Data Protection (ul. Stawki 2, 00-193 Warsaw).

To exercise the above rights, please contact us at info@sipsecurity.pl.

7Cookies

This website uses cookies, which are small text files stored on the user’s device. In particular, we use:

• essential cookies — necessary for the website to function properly; no consent is required;
• analytical/statistical cookies — which help you understand how to use the website;
• functional cookies — which remember the user’s preferences.

You can change your browser’s cookie settings at any time, including blocking or deleting cookies that have already been stored. Restricting the use of cookies may affect certain features available on the website. The table above sets out the standard categories of cookies used on websites — where specific tools are implemented (e.g. Google Analytics, advertising pixels), it is recommended to supplement this with their exact

8Data security

The controller shall implement technical and organisational measures to ensure that the personal data being processed is protected in a manner appropriate to the risks and the categories of data concerned, including safeguarding the data against unauthorised access, loss, damage or destruction.

9Changes to the privacy policy

The administrator reserves the right to make changes to this privacy policy, in particular in connection with changes to legislation, the technologies used on the website or the scope of its activities. The current version of the policy is always available on this page.

10Data protection contact

Please send any questions, requests or enquiries regarding the processing of personal data to the following email address info@sipsecurity.pl or in writing to the following address: SearchInform Polska Sp. z o.o., 31 Nowogrodzka Street, 00-511 Warsaw.

↑ Back to the table of contents