Privacy policy for paktech.pl

Last updated: 18 August 2026

1. General information

This Privacy Policy describes the rules for processing the personal data of people using paktech.pl, in particular in connection with contacting us through the contact form and the use of analytics tools (Google Analytics 4).

2. Data controller and contact details

The controller of personal data is:

• EASYLOGIC Sp. z o.o.
• Karpińskiego 3A, 30-657 Kraków, Poland
• Polish tax identification number (NIP): 6793032899
• Contact e-mail for personal data matters: k.zyla@easylogic.pl

The Controller has not appointed a Data Protection Officer.

3. What data we process

Depending on how the website is used, we may process the following data:

3.1. Data provided in the contact form

The website provides a contact form (https://paktech.pl/en/contact.html). When you contact us, we may process:

• first name and surname,
• company name,
• telephone number,
• e-mail address,
• the content of the message and other data voluntarily provided in the message.

3.2. Technical and usage data

When you use the website, technical data may be processed, including:

• IP address,
• browser/device identifiers and technical parameters,
• date and time of the request,
• information about the operating system and browser,
• server logs (e.g. information about HTTP requests).

3.3. Analytics data (Google Analytics 4)

If the user consents to analytics cookies, the website may use Google Analytics 4 (GA4). The analytics data processed may include in particular:

• information about activity on the website (e.g. page views, navigation between pages, events, visit duration, clicks),
• online identifiers (e.g. cookie identifiers or similar identifiers),
• approximate device and browser information (e.g. language, screen resolution, system),
• approximate location (e.g. city/region, based on network signals).

4. Purposes and legal bases for processing

We process personal data for the following purposes:

1. Handling enquiries and contact (form, e-mail, telephone)
   Legal basis: Article 6(1)(b) GDPR (steps taken prior to entering into a contract) and/or Article 6(1)(f) GDPR (legitimate interest in conducting correspondence and handling enquiries).
2. Direct marketing of our own products/services to entities that have contacted us
   Legal basis: Article 6(1)(f) GDPR (legitimate interest in marketing our own products/services). The user has the right to object to such marketing at any time.
3. Establishment, exercise or defence of legal claims
   Legal basis: Article 6(1)(f) GDPR (legitimate interest in legal protection).
4. Ensuring website security and proper operation (logs, abuse prevention)
   Legal basis: Article 6(1)(f) GDPR.
5. Analytics and statistics (Google Analytics 4)
   Legal basis: Article 6(1)(a) GDPR (consent), given through the cookie banner/settings (consent to analytics cookies). Detailed information about cookies and managing consent is provided in the Cookie Policy.
6. Accounting and legal obligations (if cooperation/a contract is established)
   Legal basis: Article 6(1)(c) GDPR (legal obligation) and/or Article 6(1)(f) GDPR.

5. Voluntary provision of data

Providing data in the contact form is voluntary but necessary in order to respond to an enquiry. If contact details are not provided, it may not be possible to respond.

6. Recipients of data

Data may be disclosed to:

• Formspree – provider of the contact-form solution (messages are forwarded to the Controller's e-mail inbox and stored in the Formspree panel for up to 30 days),
• Hosti24 – provider of website hosting services,
• MasterNET – provider of domain/DNS and e-mail services during the migration period,
• Google – provider of analytics tools (Google Analytics 4), only if the user consents to analytics cookies,
• entities providing IT/website administration services (if used),
• entities authorised under applicable law where there is a legal obligation to disclose data.

On the Controller's side, access to the data is limited to authorised persons (currently: a company employee).

7. Transfers of data outside the EEA

In connection with the use of external service providers (e.g. Formspree, Google), data may be transferred outside the European Economic Area (EEA), depending on the location of the providers' infrastructure and subcontractors. In such cases, GDPR-compliant mechanisms (e.g. Standard Contractual Clauses) are used where required in the particular case.

8. Data retention periods

• Messages from the contact form in the Formspree panel: up to 30 days.
• Correspondence and quotation enquiries on the Controller's side (e-mail): up to 60 months from the last contact, unless grounds arise for longer retention (e.g. a dispute/claims).
• Data related to settlements and accounting documentation (if cooperation/a contract is established): for the period required by law and for the period necessary for settlements and possible defence of claims (including archiving without a predetermined end date where justified by legal obligations or the risk of claims).
• GA4 analytics data: for the period resulting from the data-retention settings in Google Analytics 4 (in accordance with the tool configuration) and Google's rules.
• Server logs: for the period resulting from the hosting provider's configuration and policies and from security needs.

9. Rights of data subjects

The user has the right to:

• access, rectify, erase and restrict the processing of personal data,
• data portability (where provided for by the GDPR),
• withdraw consent at any time (where processing is based on consent, including analytics/cookies) – withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal,
• object to processing based on Article 6(1)(f) GDPR (including direct marketing),
• lodge a complaint with the supervisory authority: the President of the Personal Data Protection Office (UODO) in Poland.

Requests concerning personal data may be submitted by e-mail to k.zyla@easylogic.pl or by post to the Controller's registered address.

10. Automated decision-making and profiling

The Controller does not make decisions concerning the user that produce legal effects or similarly significantly affect the user solely by automated means.

Analytics tools may be used to analyse user behaviour in order to create statistics and improve the website, but this analysis is not used to make decisions producing legal effects or similarly significant effects.

11. Security

The Controller applies organisational and technical measures intended to protect personal data against unauthorised access, loss or destruction, appropriate to the risks and nature of the processing.

12. Changes to this policy

This Policy may be updated, including where the website's functionality or the service providers used change. The current version is published on the website.