GDPR Information

Last updated: June 24, 2026

Information in accordance with GDPR

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – GDPR), we inform you:

1. Identity of the data controller

Controller: deft dash
Address: ul. Marszałkowska 142, 00-061 Warsaw, Poland
Email: [email protected]

2. Purposes of data processing

Your personal data will be processed for the following purposes:

• Fulfillment of the contract for the provision of cybersecurity services
• Marketing activities (with your consent)
• Fulfillment of legal obligations of the controller
• Assertion or defense of claims
• Statistical analysis and optimization of website functionality

3. Legal basis for processing

The legal basis for processing is:

• Art. 6(1)(a) GDPR – Consent of the data subject
• Art. 6(1)(b) GDPR – Performance of a contract
• Art. 6(1)(c) GDPR – Legal obligation
• Art. 6(1)(f) GDPR – Legitimate interest of the controller

4. Data recipients

Your personal data may be disclosed to the following categories of recipients:

• IT service providers (hosting, domain management)
• Accounting and legal firms
• Government bodies on the basis of legal provisions

5. Transfer of data to third countries

Your personal data will not be transferred to third countries or international organizations unless we use services from providers based outside the EU. In such cases, we apply appropriate legal safeguards that comply with the requirements of the GDPR.

6. Data retention period

Personal data will be stored:

• For the duration of the contract and for the period required by law (e.g., accounting obligations)
• For the limitation period for claims arising from the contract
• Until the withdrawal of consent (in the case of processing based on consent)

7. Your rights

According to GDPR, you have the following rights:

• Right of access – You can obtain information about the processed data
• Right to rectification – You can request the correction of inaccurate data
• Right to erasure – You can request the deletion of data ("right to be forgotten")
• Right to restriction of processing – You can request the temporary suspension of processing
• Right to data portability – You can receive the data in a structured format
• Right to object – You can object to processing
• Right to withdraw consent – You can withdraw consent at any time

8. Right to lodge a complaint

You have the right to lodge a complaint with the supervisory authority responsible for data protection, which in Poland is the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw.

9. Automated decision-making and profiling

Your data will not be used for automated decision-making, including profiling, that has legal effects or similarly significantly affects you.

10. Origin of data

We receive personal data directly from you via forms on the website or during direct contact.

11. Voluntariness of data provision

The provision of personal data is voluntary, but necessary for the performance of the contract or the provision of services. Failure to provide data prevents the conclusion of the contract or the provision of services.

12. Contact regarding GDPR

To exercise your rights or for further information, please contact us:
Email: [email protected]
Address: ul. Marszałkowska 142, 00-061 Warsaw, Poland