Privacy Policy

1. Data controller

The controller of personal data is ijsound studio, ul. Władysława Taklińskiego 12, 30-499 Kraków, Poland, NIP (VAT ID): 6793166424 (the "Controller").

For all matters concerning the processing of personal data you can contact the Controller:

• e-mail: kontakt@ijsoundstudio.pl,
• phone: +48 698 177 101,
• post: ul. Władysława Taklińskiego 12, 30-499 Kraków, Poland.

The Controller has not appointed a Data Protection Officer — this is not required given the nature and scale of processing.

2. Purposes and legal bases of processing

• Handling inquiries sent via the contact form, e-mail or phone — processing is necessary to take steps prior to entering into a contract (Art. 6(1)(b) GDPR) or constitutes the Controller's legitimate interest in responding (Art. 6(1)(f) GDPR).
• Conclusion and performance of a contract for design, installation or service work, including contact during the project (Art. 6(1)(b) GDPR).
• Tax and accounting obligations — issuing and storing invoices and accounting records (Art. 6(1)(c) GDPR in conjunction with Polish accounting and tax law).
• Establishing, exercising or defending legal claims — the Controller's legitimate interest (Art. 6(1)(f) GDPR).
• Contact form security — processing of the IP address to protect against abuse and spam (Art. 6(1)(f) GDPR).

3. Scope of data collected

The contact form collects only the data necessary to handle your inquiry: name, e-mail address and — optionally — company name, phone number, the subject and content of the inquiry. During contract performance we process the data needed to deliver and settle the project (invoice details, installation address, contact persons).

4. Data recipients

Data may be entrusted to entities supporting the Controller, only to the extent necessary and under data processing agreements (Art. 28 GDPR):

• website and e-mail hosting providers,
• the accounting office handling tax documentation,
• subcontractors and service companies involved in project delivery.

Data is never sold or shared with third parties for marketing purposes.

5. Embedded services and transfers outside the EEA

This website uses external Google resources: an embedded Google Maps map (contact page) and Google Fonts. When these resources are loaded, your browser transmits your IP address to Google. Google LLC processes data under the EU–US Data Privacy Framework, which provides a legal basis for transferring data to the USA (Art. 45 GDPR). No other data is transferred to third countries.

6. Data retention periods

• data from inquiries that do not result in a contract — until the correspondence ends, no longer than 12 months from the last contact,
• data related to a concluded contract — for the period required by tax and accounting regulations, as a rule 5 years from the end of the year in which the tax obligation arose,
• data processed for claims — until they become time-barred.

7. Your rights

You have the right to:

• access your data and receive a copy (Art. 15 GDPR),
• rectify your data (Art. 16 GDPR),
• erase your data (Art. 17 GDPR),
• restrict processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• object to processing based on legitimate interest (Art. 21 GDPR),
• withdraw consent at any time — where processing is based on consent — without affecting the lawfulness of processing before withdrawal (Art. 7(3) GDPR).

You also have the right to lodge a complaint with the supervisory authority: President of the Personal Data Protection Office (Prezes UODO), ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl.

8. Cookies and server logs

This website does not use its own cookies to track users, nor any analytics or advertising tools. The embedded Google Maps map may — once loaded — set cookies in accordance with Google's privacy policy. The hosting server keeps standard technical logs (IP address, request date and time, browser data), used solely for diagnostics and security.

9. Automated decision-making

Data is not used for automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

10. Voluntary provision of data and changes to this policy

Providing data is voluntary, but necessary to handle an inquiry or to conclude and perform a contract. We will inform about significant changes to this policy by publishing a new version on this page.

Questions about data processing? Write to us: kontakt@ijsoundstudio.pl