1. Data Controller Administratorem jest Operify Sp. z o. o., e‑mail: contact@operify.pro.
2. Scope of Processed Data
• Contact data: first name, last name, e-mail, phone number, company, job title.
• Technical data: IP address, browser type, operating system, cookies.
• Data collected automatically while using the website: logs, analytics.
3. Purposes and Legal Bases for Data Processing
Purpose
Handling inquiries
Newsletter and marketing
Website analytics and optimization
Cookie management
Legal Basis
Art. 6(1)(b) GDPR – necessary for the performance of a service
Art. 6(1)(a) GDPR – based on the user's consent
Art. 6(1)(f) GDPR – legitimate interests of the Controller
Based on user consent; refusal does not affect website functionality
4. Data Recipients Data may be shared with technical service providers, such as hosting providers, analytics services (e.g., Google Analytics), or IT support, under data processing agreements.
5. Data Transfers Outside the EEA Service providers may be located outside the European Economic Area (e.g., Google, Facebook). In such cases, standard contractual clauses approved by the EU are used to ensure data protection.
6. Data Retention Period
• Inquiries: until the inquiry is resolved, plus an additional 6 months.
• Marketing (newsletter): until consent is withdrawn.
• Analytical and cookie data: anonymized for 26 months or in accordance with server configuration.
7. Rights of Data Subjects You have the right to:
• Access and rectify your data,
• Erase your data ("right to be forgotten"),
• Restrict processing,
• Data portability,
• Object to processing (including direct marketing),
• Withdraw consent at any time (without affecting the lawfulness of prior processing).
