Privacy policy

Last updated: 2 July 2026

1. Data controller

The controller of personal data processed in connection with the use of isec360.pl and the provision of services is iSec360, with its registered address at Kazimierza Pulaskiego 26A, 15-338 Bialystok, Poland ("Controller", "we", "us").

For data protection matters, contact us at biuro@isec360.pl or by phone at +48 532 533 133.

2. What data we process

Depending on how you contact us or use the website, we may process the following data:

• data provided in the contact form or by e-mail: name, company name, e-mail address, phone number and message content;
• data provided by phone to book a mini-audit or consultation;
• technical data generated automatically while browsing the website, such as IP address, browser type and device parameters, to the extent necessary to display and secure the website;
• data required to issue invoices when a service agreement is concluded, including company details, tax number and billing address.

3. Purposes and legal bases

• responding to enquiries and commercial contact - based on consent given when sending the form;
• preparing an offer, concluding and performing a cybersecurity services agreement - based on steps prior to entering into a contract or contract performance;
• issuing invoices and accounting settlements - based on legal tax and accounting obligations;
• ensuring website security and proper operation, and handling claims - based on our legitimate interest.

4. Data retention

Data related to enquiries and commercial contact is kept for the time needed to respond and for the limitation period of potential claims. Data related to contracts and accounting documentation is kept for the period required by tax and accounting law, usually 5 years from the end of the year in which the tax obligation arose.

5. Recipients of data

Data may be entrusted to entities supporting our business, including hosting and e-mail providers, accounting services and suppliers of tools used to provide cybersecurity services, including Bitdefender GravityZone. The website uses Google Fonts, which may require the user's browser to connect to Google servers. More information is available in the Cookie policy. We do not sell personal data to third parties.

6. Transfers outside the EEA

Some providers we use, such as Google in relation to fonts, may process data outside the European Economic Area. In such cases, transfers are based on mechanisms that provide an appropriate level of data protection under the GDPR, such as standard contractual clauses.

7. Data subject rights

You have the right to access your data, rectify it, erase it, restrict processing, transfer data, object to processing and withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal. You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office.

8. Data security

We use technical and organisational security measures appropriate to the risks related to data processing, including encrypted transmission, access control and regular security reviews.

9. Cookies

The rules for using cookies and similar technologies are described in the separate Cookie policy.

10. Changes to this policy

This privacy policy may be updated from time to time, especially due to legal changes or changes in the scope of our services. The current version is always available on this page.

11. Contact

For privacy matters, contact us at biuro@isec360.pl. For billing and invoice matters, contact biuro@isec360.pl.