1. Who is the controller of your data

The controller of the personal data collected through this website is Iseno spółka z ograniczoną odpowiedzialnością with its registered office in Warsaw, Poland, at Plac Bankowy 2, 00-095 Warszawa, entered into the register of entrepreneurs under KRS number 0000775753, kept by the District Court for the capital city of Warsaw, XIII Commercial Division of the National Court Register, with tax identification number NIP 5242882561, statistical number REGON 382807991 and share capital of PLN 5,000.00 (the “Company”, “we”, “us”).

You can contact us about anything relating to your personal data by email at office@iseno.net.

We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the “General Data Protection Regulation” or “GDPR”) and other applicable data-protection legislation.

2. What this policy covers

This policy explains what personal data we collect when you visit our website, contact us or cooperate with us; why and on what legal basis we process it; who we share it with; how long we keep it; and what rights you have. Providing your personal data is always voluntary, but in some cases it may be necessary for us to answer your message or to perform a contract with you.

3. What data we collect

Depending on how you interact with us, we may collect:

Contact data

Your name and surname, job title, company name, phone number, email address and postal address, and any other information you choose to include in a message you send us.

Business data

Information about matters, projects or cases you tell us about or in which you are involved.

Information from public sources

Information available on professional and social networks such as LinkedIn, and in public publications.

Subscription and preference data

Information you give when you sign up for newsletters or other communications, so we know which topics interest you.

Supplier and partner data

Contact and business information about companies and entities that provide us with products or services.

Social media data

Interactions with our social media profiles, such as posts, likes and shares.

Technical data

IP address, browser type and version, operating system, device type and model, language, time zone and similar technical characteristics of the connection.

Data about your use of the website

Pages visited, URL and referrer, time and duration of visits, interaction data such as scrolling and clicks, and information about errors and the performance of our pages.

4. Why we process your data and on what legal basis

Purpose	Data	Legal basis (GDPR)
Answering your enquiries and communicating with you	Contact data, business data	Art. 6(1)(f) — our legitimate interest in handling correspondence; Art. 6(1)(b) where you are already a party to a contract
Concluding and performing contracts, and providing our services	Contact data, business data, supplier data	Art. 6(1)(b) — performance of a contract
Sending commercial information and newsletters	Contact data, subscription data	Art. 6(1)(a) — your consent, which you may withdraw at any time
Running and securing the website, and measuring statistics	Technical data, data about your use of the website	Art. 6(1)(f) — our legitimate interest in operating, securing and improving the website
Meeting tax, accounting and other legal obligations	Contact data, business data	Art. 6(1)(c) — compliance with a legal obligation
Establishing, pursuing or defending legal claims	Contact data, business data	Art. 6(1)(f) — our legitimate interest in protecting our rights

5. Cookies and analytics

Our website uses cookies and similar technologies. Cookies are small text files stored on your device. We use them for the following categories of purposes:

• Strictly necessary — required for the website to function correctly and to keep it secure. These do not require consent.
• Statistical — to understand how visitors use the site, which pages are viewed and how the site performs. We use Google Analytics 4 (Google Ireland Limited) for this purpose.
• Marketing — to measure and tailor advertising. These are used only where a consent mechanism is active and you have given your consent.

You can control and delete cookies through your browser settings, and you can browse our site with cookies blocked. Blocking statistical or marketing cookies does not prevent you from using the website.

6. Who we share your data with

We do not sell your personal data. We share it only where necessary, and only with parties who process it on our behalf or under a legal obligation. These include:

• our hosting and content-delivery provider, which serves this website;
• analytics providers, for the statistical purposes described above;
• email, IT and communication-service providers;
• accounting, legal and other professional advisers;
• public authorities, where we are legally required to provide data.

Where a provider processes data on our behalf, it acts as a processor under a written agreement and may only process the data on our documented instructions.

7. Transfers outside the European Economic Area

Some of our providers are established outside the EEA, in particular in the United States. Where this happens, we rely on a lawful transfer mechanism under the GDPR — such as an adequacy decision (including the EU–US Data Privacy Framework, where the recipient is certified) or the European Commission’s standard contractual clauses — and we take steps to ensure your data remains protected.

8. How long we keep your data

• Correspondence and enquiries — for as long as needed to handle the matter, and then for the period in which claims may arise.
• Contract and service data — for the duration of the contract and thereafter for the period required by tax and accounting rules or the limitation period for claims.
• Marketing and newsletter data — until you withdraw your consent or object to processing.
• Statistical and technical data — for the retention period configured in the analytics tool, and no longer than necessary for statistical purposes.

9. Your rights

Under the GDPR you have the right to:

• access your personal data and obtain a copy of it;
• have inaccurate or incomplete data rectified;
• have your data erased in the circumstances set out in the GDPR;
• restrict processing;
• receive your data in a structured, commonly used, machine-readable format and to have it transmitted to another controller (portability);
• object to processing carried out on the basis of our legitimate interest, and to object at any time to processing for direct marketing;
• withdraw any consent you have given at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, write to us at office@iseno.net. We will respond within one month.

You also have the right to lodge a complaint with a supervisory authority. In Poland this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa). If you live or work in another EEA country, you may complain to the supervisory authority there — in Spain, the Agencia Española de Protección de Datos (AEPD).

10. How we protect your data

We apply appropriate technical and organisational measures to keep personal data secure and to protect it against unauthorised access, loss, alteration or disclosure. Access to personal data is limited to people who need it to do their work. Our website is served over an encrypted HTTPS connection.

11. Children

Our website and services are aimed at businesses and professional users. We do not knowingly collect personal data from children.

12. Changes to this policy

We may update this policy — for example if our services, the tools we use or the law change. The current version is always the one published on this page, together with the date it was last updated.

13. Contact

For any question about this policy or the way we process personal data, contact us at office@iseno.net or by post at Iseno sp. z o.o., Plac Bankowy 2, 00-095 Warszawa, Poland.