Privacy Policy

Privacy Policy

Last updated: 09 March 2026.

This Privacy Policy explains how personal data is processed when you use the website: https://sqr-it.net.

The website provides information about web development and IT infrastructure services.

1. Data Controller

The controller responsible for processing personal data is:

SQR – Kornii Halaiko
ul. Wąwozowa 6/116
02-796 Warsaw
Poland

NIP: 9512640948
REGON: 543993532

Contact email for data protection matters: admin@sqr-it.net

Phone: +48 787 272 655

2. Categories of Personal Data

When using the website, the following categories of personal data may be processed:

Data provided voluntarily through forms

  • first name
  • last name
  • phone number
  • email address
  • message content

Marketing communication data

  • If the user subscribes to marketing communication or newsletters:
  • email address
  • name (if provided)
  • consent information
  • communication preferences

Technical data collected automatically

  • IP address
  • browser type and version
  • operating system
  • access time
  • pages visited

Website usage data

  • interaction with website pages
  • session duration
  • approximate geographic location

Consent data

  • cookie consent preferences
  • marketing consent information
  • consent timestamps

3. Source of Personal Data

Personal data may be obtained from the following sources:

  • directly from users submitting forms on the website
  • from users subscribing to newsletters or marketing communications
  • automatically through cookies and similar technologies when visiting the website

4. Contact Forms

The website uses Contact Form 7 to allow visitors to send inquiries.

When submitting a contact form, the following data may be processed:

  • first name
  • last name
  • phone number
  • email address
  • message content

This data is processed for the purpose of:

  • responding to inquiries
  • providing requested information or services
  • communication related to submitted requests

Providing personal data through the contact form is voluntary but necessary to receive a response.

5. Marketing Communication and Newsletter

Users may voluntarily consent to receive marketing communication from the website operator.

Marketing communication may include:

  • newsletters
  • service updates
  • information about web development services
  • information about IT infrastructure services
  • occasional marketing emails related to the business activity

Marketing communication is sent only after explicit consent is provided by the user.

The legal basis for this processing is:

Article 6(1)(a) GDPR – user consent

Users may withdraw their consent at any time by:

  • contacting the data controller via email
  • using an unsubscribe link (if provided)

Withdrawal of consent does not affect the legality of processing carried out before the withdrawal.

6. Cookies and Tracking Technologies

The website uses cookies and similar technologies. Cookies are small data files stored on the user’s device (such as a computer, smartphone, or tablet) when visiting a website.

Cookies may be used to:

  • ensure proper functioning of the website
  • store user consent preferences
  • analyze website traffic
  • support advertising and marketing services

Some cookies are essential for the website to operate properly, while others are used only with the user’s consent.

Users can manage their cookie preferences through the cookie banner or the “Cookie Settings” button available on the website.

Most web browsers allow users to control cookies through browser settings, including blocking or deleting cookies. However, restricting cookies may affect the functionality of certain parts of the website.

More detailed information about the use of cookies is available in the Cookie Policy.

7. Analytics Services

The website uses Google Analytics, a web analytics service provided by Google Ireland Limited.

Google Analytics helps analyze how visitors interact with the website in order to improve performance and usability.

Analytics tools are loaded only after the user provides consent through the cookie banner.

Collected data may include:

  • pages visited
  • time spent on pages
  • approximate geographic location derived from IP address
  • device and browser information

Where possible, IP anonymization is applied to reduce the identifiability of visitors.

8. Advertising and Marketing Services

The website may use Google Ads services to measure advertising performance and display relevant advertisements.

Marketing cookies may be used to:

  • measure advertising campaign performance
  • improve marketing strategies
  • provide more relevant advertisements

Advertising technologies are activated only after the user provides explicit consent.

9. Google Tag Manager

The website uses Google Tag Manager to manage and load scripts and tracking tools.

Google Tag Manager itself does not collect personal data, but it may activate other services such as analytics or advertising tools.

Scripts managed through Google Tag Manager are activated only after the appropriate consent is granted.

10. Server Infrastructure

This website is hosted on a server owned and operated by the data controller.

The server is physically located in a professional data center in Warsaw, Poland.

The data center provider supplies infrastructure services such as:

  • power supply
  • network connectivity
  • physical security

The data center provider does not have access to personal data processed on the server.

Server logs may automatically record technical information such as:

  • IP address
  • browser type
  • access time
  • requested pages

These logs are used exclusively for:

  • security monitoring
  • diagnostics
  • technical maintenance

11. Purpose and Legal Basis of Processing

Personal data may be processed for the following purposes:

  • Responding to inquiries submitted through the contact form.
    The legal basis for this processing is Article 6(1)(f) GDPR – legitimate interest, which allows the website operator to respond to messages and communicate with users.
  • Providing requested services or preparing offers before entering into a contract.
    The legal basis for this processing is Article 6(1)(b) GDPR – processing necessary to take steps at the request of the data subject before entering into a contract.
  • Ensuring the security and proper functioning of the website, including monitoring server activity and preventing misuse.
    The legal basis for this processing is Article 6(1)(f) GDPR – legitimate interest.
  • Analyzing website traffic and improving website functionality through analytics tools such as Google Analytics.
    This processing is based on Article 6(1)(a) GDPR – user consent, which is provided through the cookie consent banner.
  • Measuring advertising performance and supporting marketing activities, including the use of advertising services such as Google Ads.
    This processing is also based on Article 6(1)(a) GDPR – user consent.
  • Sending newsletters and marketing emails, if the user has provided explicit consent to receive such communication.
    The legal basis for this processing is Article 6(1)(a) GDPR – user consent, which can be withdrawn at any time.

12. Data Recipients

Personal data may be shared with trusted service providers involved in operating the website, including:

  • hosting and infrastructure providers
  • analytics providers (Google Analytics)
  • advertising providers (Google Ads)
  • IT service providers responsible for maintaining the website
  • email service providers used for marketing communication

These entities process personal data only to the extent necessary to provide their services and under appropriate data protection agreements.

Personal data is not sold to third parties.

13. Data Retention

Personal data is retained only for as long as necessary for the purposes described in this policy.

Typical retention periods may include:

  • contact inquiries: up to 24 months
  • marketing communication data: until consent is withdrawn
  • server logs: up to 12 months
  • cookie consent preferences: 180 days

14. User Rights

Under the General Data Protection Regulation (GDPR), users have the right to:

  • access their personal data
  • correct inaccurate data
  • request deletion of personal data
  • restrict processing
  • object to processing
  • request data portability
  • withdraw consent at any time

Requests related to personal data may be submitted via email: admin@sqr-it.net

15. Right to Lodge a Complaint

Users have the right to lodge a complaint with the competent supervisory authority.

In Poland this authority is:

Prezes Urzędu Ochrony Danych Osobowych (UODO)
https://uodo.gov.pl/

16. International Data Transfers

Some services used on this website, such as Google Analytics, Google Ads, and Google Tag Manager, may involve the transfer of personal data outside the European Economic Area (EEA).
These services are provided within the European Union by Google Ireland Limited, but certain data may be processed by Google LLC and its affiliated entities located in the United States or other countries.
Where such transfers occur, appropriate safeguards are applied to ensure that personal data remains protected in accordance with the General Data Protection Regulation (GDPR).
These safeguards include the use of Standard Contractual Clauses (SCCs) approved by the European Commission, which contractually require the recipient of the data to provide an adequate level of data protection.
Additional technical and organizational security measures, such as data encryption and restricted access controls, may also be applied by the service providers.

Despite these safeguards, data transfers to countries outside the EEA may involve jurisdictions where the level of data protection differs from that provided under European Union law.

17. WhatsApp Contact

The website may include a WhatsApp contact link (for example, a link in the format https://wa.me/…).

Clicking this link may redirect the user to WhatsApp and may result in the transfer of certain technical data to WhatsApp or related Meta entities.

This functionality is provided solely to facilitate contact. Use of WhatsApp is voluntary, and any further processing of personal data by WhatsApp is governed by WhatsApp’s own privacy policy and terms of service.

18. Changes to This Privacy Policy

This Privacy Policy may be updated periodically to reflect legal, technical, or operational changes.

Any updates will be published on this page.