PRIVACY POLICY

Effective Date: August 1, 2025

I. DATA CONTROLLER

The controller of your personal data is:

Baysec Krystian Bajno
ul. Księcia Janusza I 12/69
18-400 Łomża, Poland
VAT ID: PL7182155538
REGON: 386779694

Contact regarding data protection:
E-mail: kontakt@baysec.eu

II. PURPOSES AND LEGAL BASIS FOR DATA PROCESSING

1. Handling Inquiries

Purpose: To respond to inquiries submitted via the contact form or email.

Legal Basis: Article 6(1)(f) GDPR – our legitimate interest in communicating with users.

Scope of Data: Name, email address, message content.

2. Performance of Contracts

Purpose: To conclude and perform a service agreement.

Legal Basis: Article 6(1)(b) GDPR – necessity for the performance of a contract.

Scope of Data: Identification data, contact details, and data necessary for service delivery.

3. Legal Obligations

Purpose: To comply with tax and accounting obligations.

Legal Basis: Article 6(1)(c) GDPR – compliance with a legal obligation.

Scope of Data: Data required for invoicing and accounting records.

4. Establishment of Claims

Purpose: To establish, pursue, or defend against legal claims.

Legal Basis: Article 6(1)(f) GDPR – our legitimate interest.

5. Newsletter and Commercial Information

Purpose: To send newsletters and commercial information by electronic means to individuals who have given their consent — including newsletter subscribers, Baysec Platform users, and service customers.

Legal Basis: Article 6(1)(a) GDPR – consent of the data subject, in conjunction with Article 10 of the Polish Act on Provision of Electronic Services and Article 172 of the Polish Telecommunications Law.

Scope of Data: Email address, optionally first name.

Consent may be withdrawn at any time via the unsubscribe link in each message or by contacting us at kontakt@baysec.eu. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

III. DATA RECIPIENTS

Your data may be transferred to entities processing data on our behalf:

• IT service providers (hosting, email, server infrastructure), such as Vercel Inc., Google LLC, and OVHcloud.
• Accounting firms, law firms, and subcontractors.

Data may also be disclosed to public authorities as required by law.

IV. DATA TRANSFER OUTSIDE THE EEA

Due to our use of services from Google and Vercel, your data may be transferred to the USA. Data transfers are based on Standard Contractual Clauses and the EU-U.S. Data Privacy Framework, which ensure an adequate level of protection.

V. DATA RETENTION PERIOD

We retain your data for the period necessary to fulfill the processing purposes:

• Contact inquiries: for the time necessary to provide a response.
• Contracts: for the duration of the contract and the limitation period for claims.
• Legal obligations: for the period required by law (e.g., 5 years for tax purposes).

VI. YOUR RIGHTS

You have the right to:

• Access your data.
• Rectify your data.
• Erase your data (the "right to be forgotten").
• Restrict the processing of your data.
• Data portability.
• Object to the processing of your data.
• Withdraw consent at any time (if processing is based on consent).
• Lodge a complaint with a supervisory authority (President of the Personal Data Protection Office in Poland).

VII. COOKIES

Our website does not use cookies or other tracking technologies to collect user data.

VIII. CHANGES TO THE PRIVACY POLICY

We reserve the right to make changes to this Privacy Policy. The current version will always be available on our website.