Legal documents

Privacy Policy

Information about the personal data we may process when you use itholding.pl and the rights available to users.

Last updated: 15 August 2026

This Privacy Policy explains how we process personal data of people using itholding.pl, contacting us or submitting the contact form.

1. Data controller

The controller of personal data is:

IT HOLDING SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ
ul. Siłaczki 3/9
02-495 Warsaw
Poland

KRS: 0000318853
NIP: 5291761107
REGON: 141632601
Share capital: PLN 300,000.00

For matters concerning personal data, you can contact us at:

biuro@itholding.pl

2. Data we may process

The scope of personal data processed depends on how you use the website.

When you submit the contact form, we may receive:

  • your name
  • email address
  • phone number, if provided
  • website address, if provided
  • message content
  • any other information you voluntarily include in the message

When you use the website, basic technical information may also be processed, including your IP address, date and time of the request, browser and operating-system information and server log entries.

If you provide the relevant consent, data relating to website usage, performance measurement and online advertising may also be processed.

3. Contact form and correspondence

Data submitted through the contact form or by email may be processed for the purpose of:

  • responding to your enquiry
  • providing information about our services
  • providing a proposal for cooperation at your request
  • continuing correspondence
  • taking steps before entering into a contract
  • establishing, pursuing or defending potential legal claims

If your enquiry concerns potential cooperation or entering into a contract, processing may be based on Article 6(1)(b) GDPR — taking steps at the request of the data subject prior to entering into a contract.

In other cases, processing may be based on Article 6(1)(f) GDPR — our legitimate interest in conducting correspondence, handling enquiries and establishing, pursuing or defending legal claims.

Providing personal data is voluntary, but failure to provide information marked as required may make it impossible to submit the form or receive a response.

4. Analytics and website measurement

With your consent, we may use tools that help us understand how the website is used and measure its performance.

Depending on the current configuration, these may include:

Google Analytics 4

Google Analytics may be used to create statistics about website usage, including traffic sources, pages visited, navigation through the website and basic technical information about the visit.

We treat Google Analytics as an analytics tool and it may be activated after consent to the Analytics category has been provided.

Matomo Analytics

Matomo may be used as an alternative or additional analytics platform.

If Matomo is configured to use optional tracking technologies or cookies that require consent, those mechanisms are activated only after the relevant consent has been provided.

Google Tag Manager

The website uses Google Tag Manager as a technical tool for managing tags.

Google Tag Manager may be used to control the activation of analytics and marketing tools depending on the user’s consent choices.

Google Tag Manager itself does not determine which analytics or advertising services are active.

That depends on the current configuration of the GTM container.

5. Advertising and marketing measurement

With your consent, we may also use marketing and advertising tools.

Depending on our current activities, these may include:

Google Ads

Google Ads may be used for:

  • conversion measurement;
  • evaluation of advertising campaign performance;
  • remarketing;
  • audience creation;
  • campaign optimisation.

We treat Google Ads as a Marketing category tool and optional Google Ads mechanisms may be activated only after the relevant consent has been provided.

Meta Pixel

Meta Pixel may be used for:

  • measuring the performance of advertising campaigns run through Meta services
  • conversion measurement
  • audience creation
  • remarketing
  • improving advertising targeting

We treat Meta Pixel as a Marketing category tool and it may be activated only after the relevant consent has been provided.

Not all tools mentioned in this Privacy Policy need to be active at the same time.

Their use depends on the current website configuration and the activities carried out by IT Holding.

6. Google Search Console

We use or may use Google Search Console to monitor:

  • indexing of the website by Google
  • website visibility in search results
  • search queries leading to the website
  • indexing errors
  • technical issues affecting the website’s presence in Google

Google Search Console is an administrative tool used by the website owner.

We do not treat it as a separate analytics or marketing cookie category within the user’s browser.

Analytics and marketing tools that require consent are controlled by the cookie-settings mechanism available on the website.

Before the user makes a choice, optional categories remain disabled.

The user can decide separately about:

  • Analytics
  • Marketing

For Google services, the website may communicate consent states including:

  • analytics_storage
  • ad_storage
  • ad_user_data
  • ad_personalization

The user can change their decision at any time using the “Cookie settings” link in the website footer.

Withdrawal of consent takes effect for the future and does not affect the lawfulness of processing performed before consent was withdrawn.

8. Server logs and security

Technical information and server logs may be processed for the purpose of:

  • ensuring the website operates correctly
  • diagnosing errors
  • protecting against attacks, abuse and unauthorised access
  • investigating security incidents
  • maintaining infrastructure stability

Such processing is based on Article 6(1)(f) GDPR — our legitimate interest in website security, maintenance and proper operation.

9. Recipients of data

Personal data may be disclosed or entrusted to entities that support our business operations and website maintenance, including:

  • hosting providers
  • email-service providers
  • IT-service providers
  • entities maintaining or developing the website
  • analytics-service providers
  • advertising and marketing-service providers
  • Google, when relevant Google services are used
  • Meta, when Meta tools are activated

Data is disclosed only to the extent required for the relevant purpose and the services actually being used.

10. Transfers outside the European Economic Area

Some services provided by international providers, in particular Google or Meta tools, may involve processing personal data outside the European Economic Area.

Where applicable, such transfers should take place using mechanisms provided for under data-protection law, including:

  • an adequacy decision issued by the European Commission
  • the EU-US Data Privacy Framework, where applicable to the relevant recipient
  • Standard Contractual Clauses
  • other safeguards provided for by the GDPR

The actual scope of any transfer depends on the services being used by the website.

11. How long we retain data

Personal data from the contact form and ordinary correspondence that does not result in a contract may be retained for up to 24 months from the last contact, unless:

  • the data is no longer needed earlier
  • the user successfully requests deletion
  • continued retention is necessary to establish, pursue or defend legal claims

If the contact results in a contract, data relating to the cooperation may subsequently be retained for the duration of the agreement and for periods required by applicable rules concerning documentation, accounting and limitation periods.

Technical logs are retained for periods resulting from infrastructure configuration and website-security requirements, and no longer than necessary for those purposes.

Information about cookie preferences is retained according to the configured consent-validity period, currently up to 180 days, unless the user changes their settings earlier.

Data processed by external analytics or marketing tools may be retained according to the retention settings of the relevant services.

12. Your data-protection rights

Depending on the legal basis and circumstances of processing, you may have the right to:

  • access your personal data
  • obtain a copy of your data
  • rectify your data
  • request deletion
  • request restriction of processing
  • data portability
  • object to processing
  • withdraw consent previously provided

Where processing is based on consent, you may withdraw that consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before it was withdrawn.

13. Right to lodge a complaint

If you believe that your personal data is being processed unlawfully, you have the right to lodge a complaint with the President of the Personal Data Protection Office in Poland.

14. Automated decision-making

We do not use data submitted through the standard contact form to make decisions about users that produce legal effects solely through automated processing.

If you consent to marketing activities, external advertising platforms may, depending on their configuration, use information for audience creation, advertising measurement or advertising personalisation.

15. Cookies

Information about our use of cookies, consent categories and how to change your preferences is available in our:

Cookie Policy

16. Changes to this Privacy Policy

This Privacy Policy may be updated if there are changes to:

  • how the website operates
  • the scope of personal data processed
  • analytics or marketing tools being used
  • the way consent is managed
  • applicable legal requirements

The current version is available at:

/en/privacy-policy/