Privacy Policy

1. Data Controller

The controller of your personal data is:

ITSIGMA Jacek Zieliński
ul. Lanciego 8/3, 02-792 Warszawa, Poland
Contact: privacy@donemeansperfect.com

2. Scope of This Policy

This Privacy Policy explains how we collect, use, store, and protect personal data when you visit or use the website donemeansperfect.com ("the Website"). By accessing the Website, you acknowledge the practices described herein.

3. Data We Collect

3.1 Data You Provide Directly

• Name and email address (when you submit a contact form or subscribe to communications)
• Any other information you voluntarily provide in messages or forms

3.2 Data Collected Automatically

• IP address and approximate geolocation
• Browser type, version, and operating system
• Pages visited, time spent, referral URLs
• Device identifiers and session data
• Cookie data (see Section 8)

4. Legal Basis for Processing

We process your personal data on the following legal grounds under the GDPR (Regulation (EU) 2016/679):

• Article 6(1)(a) – Your consent (e.g., newsletter subscriptions, non-essential cookies)
• Article 6(1)(b) – Performance of a contract or pre-contractual steps at your request
• Article 6(1)(c) – Compliance with a legal obligation
• Article 6(1)(f) – Legitimate interests (e.g., website security, analytics to improve the service)

5. Purposes of Processing

• Operating and maintaining the Website
• Responding to your inquiries and providing customer support
• Sending newsletters or marketing communications (with your consent)
• Analysing usage to improve content and user experience
• Detecting, preventing, and investigating fraudulent or unlawful activity
• Complying with applicable legal and regulatory obligations

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes set out in this Policy, and no longer than:

• Contact/inquiry data: 3 years from last contact
• Consent records: duration of the consent relationship plus 3 years
• Server logs: 12 months
• Tax and accounting records: as required by Polish law (typically 5–6 years)

Data will be securely deleted or anonymised upon expiry of the applicable retention period.

7. Data Recipients & Transfers

We may share your data with:

• Hosting and infrastructure providers (within the EEA or under appropriate safeguards)
• Analytics providers (e.g., Google Analytics – subject to standard contractual clauses)
• Email service providers used to deliver communications you have requested
• Professional advisors (lawyers, accountants) bound by confidentiality obligations
• Public authorities where required by law

We do not sell your personal data. Any transfer outside the EEA is subject to appropriate safeguards pursuant to GDPR Chapter V.

8. Cookies

The Website uses cookies and similar tracking technologies. Cookies are small text files stored on your device. We use:

• Essential cookies: strictly necessary for the Website to function
• Analytics cookies: help us understand how visitors use the Website (requires consent)
• Marketing cookies: used to deliver relevant advertisements (requires consent)

You may withdraw consent for non-essential cookies at any time via the cookie settings banner or your browser preferences. Withdrawing consent does not affect the lawfulness of processing before withdrawal.

9. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Article 15) – obtain confirmation and a copy of your data
• Right to rectification (Article 16) – correct inaccurate data
• Right to erasure (Article 17) – request deletion ('right to be forgotten')
• Right to restriction of processing (Article 18)
• Right to data portability (Article 20)
• Right to object (Article 21) – including to direct marketing
• Right to withdraw consent – without affecting prior lawful processing

To exercise any of these rights, contact us at privacy@donemeansperfect.com. We will respond within one month. You also have the right to lodge a complaint with the Polish supervisory authority: Urz─ůd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa.

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration, including TLS encryption, access controls, and regular security reviews.

11. Third-Party Links

The Website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

12. Children

The Website is not directed at children under the age of 16. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of the Website after changes constitutes acceptance of the revised Policy.

14. Contact

For any questions, requests, or concerns regarding this Privacy Policy:

ITSIGMA Jacek Zieliński
ul. Lanciego 8/3, 02-792 Warszawa, Poland
Email: privacy@donemeansperfect.com