Privacy Policy

This policy explains who is responsible for your personal data on this website, why we process it, how long we keep it, and what rights you have.

Effective November 2, 2026

1. Key terms

  • Controller means the entity that decides on the purposes and means of processing your data. Its details are provided in section 2.
  • GDPR means Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of personal data.
  • Website means the website on which you are reading this policy.

2. Data controller

The controller of your personal data is Platinium Software Dariusz Tomoń, with its registered office in Warsaw, ul. Rogalskiego 4 m 22, 03-982 Warsaw, Poland, tax ID (NIP): 5261509478.

For any matters concerning personal data, you can write to dariusz.tomon@ecomplus.pl or send a letter to the address above.

3. Purposes, legal bases, and retention periods

The data we process depends on how you use the Website. Providing data is voluntary, but without the fields marked with an asterisk in the form, we won’t be able to reply to your message.

Contact form and project brief

We process your first and last name, company name, phone number, email address, message content, and data from attached files in order to respond to your inquiry. Please don’t include other people’s data in attachments unless it’s needed to quote the project.

  • Legal basis: our legitimate interest in handling correspondence (Art. 6(1)(f) GDPR) and, if you’re asking about an offer, steps taken prior to entering into a contract (Art. 6(1)(b) GDPR).
  • Retention: for the time needed to handle your inquiry, and thereafter until any potential claims become time-barred.

Preparing an offer and performing a contract

We process the data needed to prepare an offer, to enter into and perform a contract, and to communicate during our cooperation.

  • Legal basis: Art. 6(1)(b) GDPR.
  • Retention: for the term of the contract, and thereafter until claims become time-barred.

Newsletter

If you subscribe to our newsletter, we process your email address to send you information about our services and expert content. We use Mailchimp to send it.

  • Legal basis: your consent (Art. 6(1)(a) GDPR).
  • Retention: until you withdraw your consent, and thereafter only for as long as needed to demonstrate that consent was given.
  • Unsubscribing: use the link in any email or write to the address provided in section 2.

Accounting and tax obligations

If we issue accounting documents, we keep the data required by law.

  • Legal basis: legal obligation (Art. 6(1)(c) GDPR).
  • Retention: for the period required by tax and accounting laws.

Establishing and defending claims

We may process data to the extent necessary to pursue or defend against claims.

  • Legal basis: our legitimate interest (Art. 6(1)(f) GDPR).
  • Retention: until claims become time-barred.

Website security

The server logs data such as your IP address, the date and time of the request, the address of the page visited, and browser information. Our forms are protected by Google reCAPTCHA, which analyzes data about your device and how you use the website to tell humans apart from bots. The website’s fonts are loaded from Google Fonts, so your IP address is shared with Google.

  • Legal basis: our legitimate interest in protecting the website against abuse and spam (Art. 6(1)(f) GDPR).
  • Retention: for as long as needed to ensure security, in line with the settings of our hosting provider and Google.

Analytics and advertising

We may use Google Analytics and Google Ads to measure traffic and to run and evaluate advertising campaigns. These tools only run with your consent.

  • Legal basis: your consent (Art. 6(1)(a) GDPR).
  • Retention: until you withdraw your consent or the cookies expire, and for Google services, in accordance with the retention period set there.

4. Cookies

Cookies are small files stored on your device when you use the website. We use them for the following purposes:

  • Strictly necessary: they make the website work and protect the forms, including reCAPTCHA. They don’t require consent.
  • Analytics: they help us understand how visitors use the website (Google Analytics). They only run with your consent.
  • Marketing: they’re used to measure and personalize ads (Google Ads). They only run with your consent.

You can withdraw your consent at any time. Withdrawing consent doesn’t affect the lawfulness of processing carried out before the withdrawal. You can also block or delete cookies in your browser settings, but some website features, including form submission, may not work properly.

5. Data recipients

Your data may only be shared with parties that need it to fulfill the purposes described above:

  • hosting, email, and IT service providers,
  • Mailchimp (newsletter delivery),
  • Google (reCAPTCHA, Google Fonts and, with your consent, Google Analytics and Google Ads),
  • accounting, legal, and advisory firms we work with,
  • public authorities, where required by law.

6. Transfers outside the European Economic Area

Using the services of Mailchimp (The Rocket Science Group LLC) and Google (including Google LLC) may involve transferring data to the United States. Such transfers are based on the European Commission’s adequacy decision (EU-U.S. Data Privacy Framework) or on standard contractual clauses. On request, we’ll provide information about the safeguards in place.

You can find more information in the privacy policies of Google and Intuit Mailchimp.

7. Your rights

In connection with the processing of your data, you have the right to:

  • access your data and receive a copy of it (Art. 15 GDPR),
  • rectify your data (Art. 16 GDPR),
  • erase your data (Art. 17 GDPR),
  • restrict processing (Art. 18 GDPR),
  • data portability (Art. 20 GDPR),
  • object to processing based on legitimate interest (Art. 21 GDPR),
  • withdraw your consent at any time (Art. 7(3) GDPR).

To exercise these rights, write to the address provided in section 2. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland.

8. Automated decision-making and profiling

We don’t make decisions about you that produce legal effects based solely on automated processing. If you consent to marketing cookies, Google Ads may personalize the ads shown to you based on your activity.

9. Links to other websites

The Website contains links to other services, including our Facebook and Instagram profiles. Once you open them, those services’ privacy policies apply.

10. Changes to this policy

We may update this policy, for example when the tools we use or the law changes. The current version is always available on this page.