Client portal

Privacy policy

How Badura Tech handles personal data on its IT services website and invitation-only client workspace.

Document version:

Business name
DANIEL BADURA TECH
Address
Facimiech 151, 32-051 Facimiech
Tax ID (NIP)
9442263600
Contact
info@baduratech.com

You provide your name, email address and message when contacting us. The administrator or your client organisation supplies contact details for an invitation. Your account contains your name, email, language, password hash, verification status and, if enabled, two-factor credentials. Projects contain descriptions, stages, dates, statuses, messages and uploaded files with author and file metadata. Other assigned contacts of the same client and authorised administrators can see project content.

Technical processing includes IP addresses, browser/request information, sessions, security events, invitation and reset records, delivery queues and operational logs. Do not submit passwords, unnecessary third-party information or special-category personal data in messages or files.

  • Responding to a request about your own prospective contract and delivering your contract: GDPR Article 6(1)(b).
  • Business contact correspondence, inviting representatives, operating project collaboration, preventing abuse and defending claims: Article 6(1)(f). Our interests are communicating with clients, controlling access and protecting the service and legal rights.
  • Records required by a specific legal obligation: Article 6(1)(c), only to the extent that obligation applies.

Hetzner provides hosting and Google Workspace handles email. These providers and authorised maintenance personnel may access data necessary to operate the service. Data may also be disclosed to authorities where legally required. Project notifications link to the workspace and do not include private attachments or full message bodies.

Google’s published data processing terms allow processing outside the European Economic Area and provide for international transfer safeguards, including standard contractual clauses where applicable. Contact us for information about transfers affecting your data and available copies of safeguards.

We retain enquiry data for the time needed to handle the enquiry, and account and project data for the duration of cooperation and authorised project access. Further retention depends on applicable legal obligations and the time needed to establish, exercise or defend claims. The period is assessed by the purpose and type of record; a closed enquiry does not by itself justify indefinite retention.

Archiving a project or disabling an account does not erase messages or files. You can request deletion using the contact above. We assess which data can be deleted and explain any reason for retaining it. Copies held in backups may remain until those copies expire; restored data must be subject to the same deletion decisions.

Contact the address above to request access and a copy, correction, erasure, restriction, or portability where applicable. You may object to processing based on legitimate interests because of your particular situation. If processing ever relies on consent, you may withdraw it without affecting earlier lawful processing. You may complain to UODO or another competent supervisory authority.

Requests are handled without undue delay, normally within one month of receipt. Where legally justified, this can be extended by two further months with reasons provided within the first month. We may request proportionate identity verification. Erasure is not absolute: retained data and the reason must be explained.

Contact fields are necessary to respond through the form; account details are necessary for workspace access. You can browse public pages without an account. We do not use advertising, analytics trackers, profiling or solely automated decisions with legal or similarly significant effects. Cookies and appearance storage are described separately.

Polish supervisory authority: President of the Personal Data Protection Office (UODO)