Legal document
Privacy Policy
This privacy policy describes what personal data we collect through the iDARIS website, why we process it, and what rights you have as a data subject.
1. Data controller
The controller of personal data processed in connection with the iDARIS website is iDARIS, ul. Towarowa 8, 89-600 Chojnice, email: kontakt@idaris.pl, phone: 692 200 800 (hereinafter: the "Controller").
2. What data we process and why
Through the contact form we collect: full name, phone number, email address, the selected product variant, and the message content. For security purposes we also log the sender's IP address and the timestamp of the submission. We process this data to:
- handle your inquiry or order and contact you about it,
- prepare and carry out a potential sales agreement,
- protect against abuse (e.g. spam or bots submitting the form),
- respond to questions sent by email or phone.
3. Legal basis for processing
We process your data based on:
- Art. 6(1)(b) GDPR — steps taken at your request prior to entering into a contract, and to perform that contract,
- Art. 6(1)(f) GDPR — our legitimate interest in protecting against abuse and in establishing, exercising, or defending legal claims,
- Art. 6(1)(a) GDPR — the consent given when submitting the form.
4. Data retention period
We keep data related to an inquiry or order for as long as necessary to handle it, and afterwards until any claims arising from the agreement become time-barred (generally no longer than 6 years), unless you request earlier deletion and we are not required to keep processing it for other legal reasons.
5. Data recipients
Data may be entrusted to providers who support us technically — our hosting and email provider — solely to the extent necessary to deliver those services, under data processing agreements concluded with them. We do not sell or share personal data with third parties for marketing purposes.
6. Your rights
You have the right to access your data, rectify it, erase it, restrict its processing, request data portability, and object to processing based on our legitimate interest. Consent given in the form can be withdrawn at any time, without affecting the lawfulness of processing carried out before the withdrawal. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) if you believe the processing violates GDPR.
7. Cookies
The site uses a small number of cookies necessary for it to function properly:
idaris_lang— remembers the chosen language version of the site (PL/EN), valid for 12 months,PHPSESSID— a technical session cookie used, among other things, to limit how often the form can be submitted in a short time (spam protection); deleted when the browser is closed,idaris_cookie_consent— remembers that you've accepted this cookie notice, valid for 12 months.
The site does not currently use any analytics or marketing cookies. Site fonts are currently loaded from Google Fonts servers, which involves sending the browser's IP address to Google when the page loads.
8. Data security
We apply appropriate technical and organizational measures to protect data against unauthorized access, loss, or destruction, including an encrypted connection (HTTPS) and restricted access to data stored on the server.
9. Changes to this policy
This policy may be updated periodically. We will announce any significant changes by publishing a new version on this page.
If you have questions about how your personal data is processed, contact us: kontakt@idaris.pl.