This is an English translation of the privacy policy published in Polish at icomseo.pl. In case of any discrepancy, the Polish version prevails.
Last updated: 24 September 2026.
This policy describes how icomSEO Sp. z o.o. processes the personal data of people who use the icomseo.com website, write to us, cooperate with us or apply for a job with us. We describe the rules for cookies separately in our Cookie policy.
1. Data controller
The controller of your personal data is icomSEO Sp. z o.o., with its registered office in Lublin, ul. Fantastyczna 8/1a, 20-531 Lublin, Poland, entered in the register of entrepreneurs of the National Court Register (KRS) under number 0000713717, tax ID (NIP) 712-335-93-34, REGON 369244756.
For matters concerning personal data you can contact us by e-mail at biuro@icomseo.pl, by phone at +48 601 162 666 or in writing at our registered office address.
2. Where we get your data from
We receive data mainly from you: when you fill in a form on the website, send an e-mail, call us or sign a contract with us. If you represent a company that is our client or partner, your contact details may be passed to us by people from that company. Some technical data, for example your IP address and the time a form was sent, is recorded automatically.
3. Purposes, legal bases and retention periods
| Purpose | Legal basis | How long we keep the data |
|---|---|---|
| Replying to a message sent through the contact form, by e-mail or by phone; preparing an offer | Art. 6(1)(b) GDPR (steps taken at your request before entering into a contract) and, when you write on behalf of a company, Art. 6(1)(f) GDPR (our legitimate interest in handling enquiries) | for the duration of the correspondence and then until the limitation period for related claims expires |
| Concluding and performing a contract for marketing services, contact with people indicated by the client | Art. 6(1)(b) GDPR; data of the client's employees and associates: Art. 6(1)(f) GDPR | for the duration of the contract and then until the limitation period for claims expires |
| Accounting and tax settlements | Art. 6(1)(c) GDPR in connection with accounting and tax regulations | for the period required by those regulations, as a rule 5 years from the end of the calendar year in which the tax payment deadline passed |
| Establishing, pursuing or defending claims | Art. 6(1)(f) GDPR | until the limitation period for claims expires |
| Direct marketing of our own services | Art. 6(1)(f) GDPR; we send commercial information by e-mail and contact you by phone for marketing purposes only with your consent (Art. 398 of the Polish Electronic Communications Law) | until you object or withdraw your consent |
| Recruitment | Art. 6(1)(b) and (c) GDPR in connection with Art. 221 of the Polish Labour Code; data provided on your own initiative and participation in future recruitment: Art. 6(1)(a) GDPR (consent) | until the recruitment ends and, with consent to future recruitment, until the consent is withdrawn |
| Visit statistics and measuring the effectiveness of advertising | Art. 6(1)(a) GDPR (consent given in the cookie banner) | until consent is withdrawn, in line with the periods described in the Cookie policy |
| Website security and protection against abuse, including server logs | Art. 6(1)(f) GDPR | for the period for which the hosting provider stores the logs |
| Running icomSEO profiles on social media, e.g. Facebook and LinkedIn | Art. 6(1)(f) GDPR | until a comment or message is deleted or the profile is closed |
4. Do you have to provide your data
Providing data is voluntary. However, without your name, e-mail address and the content of your message we will not be able to reply to your enquiry, and without the data required by law we cannot conclude a contract or issue an invoice. Consent to receive commercial information is not a condition for sending a form.
5. Who we share data with
We share data only when it is necessary for the purposes described above. Recipients may include:
- the hosting provider on whose servers the website runs: cyber_Folks S.A., based in Poznań, Poland,
- providers of IT services, e-mail and communication tools that we use in our daily work,
- our accounting office and legal advisers, to the extent needed for settlements and legal services,
- Google Ireland Limited, when you display an embedded Google map or consent to the Google tools described in the Cookie policy,
- Meta Platforms Ireland Limited, when you consent to marketing cookies,
- public authorities, when the obligation to disclose data results from the law.
Entities that process data on our behalf do so on the basis of data processing agreements and only on our instructions.
6. Transfers outside the European Economic Area
Google and Meta may also process data in the United States. Such transfers are based on the European Commission decision of 10 July 2023 on the adequate level of protection under the EU-US Data Privacy Framework and, additionally, on standard contractual clauses approved by the European Commission.
7. Your rights
In connection with the processing of your data you have:
- the right of access to your data and to receive a copy (Art. 15 GDPR),
- the right to rectification (Art. 16 GDPR),
- the right to erasure (Art. 17 GDPR),
- the right to restriction of processing (Art. 18 GDPR),
- the right to data portability when we process data on the basis of consent or a contract by automated means (Art. 20 GDPR),
- the right to object to processing based on our legitimate interest and, in the case of direct marketing, at any time (Art. 21 GDPR),
- the right to withdraw consent at any time; withdrawal does not affect the lawfulness of processing before it,
- the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland.
To exercise these rights, write to biuro@icomseo.pl. We reply without undue delay and no later than within one month of receiving the request.
8. Automated decisions and profiling
We do not make decisions about you based solely on automated processing that would produce legal effects or similarly significantly affect you. If you consent to marketing cookies, advertising providers may tailor the ads they display to your interests.
9. Data security
The website uses the HTTPS protocol, so data from forms is transmitted in encrypted form. Forms are protected against automated submissions, and only authorised members of the icomSEO team have access to the messages sent.
10. Changes to this policy
We update this policy when the law or the way we process data changes. The date of the last change is given at the beginning of the document.
