Privacy Policy

1. Data controller

The controller of personal data of users of hashtagit.eu (the “Website”) is HASHTAGIT spółka z ograniczoną odpowiedzialnością (limited liability company), registered office: ul. Storczyków 16, 43-190 Mikołów, Poland, entered in the Register of Entrepreneurs of the National Court Register (KRS) kept by the District Court Katowice-Wschód in Katowice, 8th Commercial Division, KRS no. 0001090136, Tax ID (NIP) 6351869815, REGON 527883862, trading as HashtagIT (“we”, “us”). For any data protection matter, including exercising your rights, contact us at contact@hashtagit.eu.

2. What data we process and why

• Contact form – name, e-mail and optionally phone, company/website and your message, to answer your enquiry (your consent, Art. 6(1)(a) GDPR, and our legitimate interest in communication, Art. 6(1)(f)) and to prepare a quote at your request (Art. 6(1)(b)).
• Service contracts – to perform the contract (Art. 6(1)(b)) and meet tax and accounting obligations (Art. 6(1)(c)).
• Security – Google reCAPTCHA and server logs (IP address, time, browser type) to protect the Website against spam and abuse (Art. 6(1)(f)).

Analytics – if you click “Accept” in the cookie banner, we use Google Analytics 4 to understand how the Website is used (pages visited, traffic source, approximate location, device type), based on your consent (Art. 6(1)(a) GDPR). Without consent the tool is not loaded. You can change your choice at any time via “Cookie settings” in the footer.

3. Consent

Giving consent is voluntary, but without it we cannot accept your message via the form. You may withdraw consent at any time by writing to contact@hashtagit.eu; this does not affect the lawfulness of processing before withdrawal.

4. Retention

Enquiry data – for the time needed to handle the enquiry and no longer than 2 years after the last contact unless a contract is concluded; contract data – for the term of the contract and the limitation period of claims, and accounting records for the period required by law; server logs – usually up to 30 days.

5. Recipients and transfers

We share data only with service providers supporting us (hosting and e-mail providers, Google Ireland Ltd. for reCAPTCHA, Google Fonts and – only with your consent – Google Analytics, accounting and legal advisers) and public authorities where required by law. Google services may involve transfers to the USA; Google LLC participates in the EU-U.S. Data Privacy Framework covered by an adequacy decision of the European Commission.

6. Your rights

You have the right to access, rectify, erase, restrict and port your data, to object to processing based on legitimate interest, to withdraw consent, and to lodge a complaint with a supervisory authority – in Poland the President of the Personal Data Protection Office (uodo.gov.pl) or the authority in your EU country of residence. We reply within one month.

7. Cookies

We use only essential cookies and browser storage: your cookie-banner choice (localStorage “hx_consent_v1”), cache and server cookies, Google reCAPTCHA cookies used to detect bots, and WordPress session cookies for logged-in administrators only. With your consent we also use Google Analytics cookies (“_ga”, “_ga_*”, valid up to 2 years). If you choose “Essential only”, Google Analytics is not loaded. You can change your choice at any time via “Cookie settings” in the footer. We do not use advertising cookies.

8. Changes

We may update this policy when the law or the Website changes. The current version is always available on this page. The Polish version is available at Polityka prywatności.