1. Data controller
The controller of personal data is SAVVIQ sp. z o.o., ul. Ignacego Mościckiego 1, 24-110 Puławy, Polska, KRS 0001223246, NIP 7162851275, REGON 543965748.
For privacy matters, contact us at kancelaria@iurisnova.pl.
2. Scope of the website
The public version of iurisnova.pl is an information service. It does not provide user accounts, a public contact form or a public mechanism for submitting documents for analysis.
Personal data may nevertheless be processed in connection with the technical operation of the website, optional Google Analytics 4 and Microsoft Clarity analytics, and when you contact us by email.
3. Categories of data that may be processed
- Technical data — in particular IP address, request time, requested URL, HTTP response code, browser or device information, and diagnostic or security data generated by server infrastructure.
- Google Analytics 4 data — after consent, this may include page views, traffic source and medium, landing pages, visited pages, events, device and browser information, approximate geographic data and pseudonymous identifiers required to produce statistics.
- Microsoft Clarity data — after consent, this may include visited pages, interactions with the interface, device and browser information, technical connection parameters, and pseudonymous session or user identifiers used to produce statistics, heatmaps and session recordings.
- Correspondence data — email address, name or organisation name, message content, contact details and information contained in attachments sent voluntarily.
- Contract-related data — if correspondence leads to a separate contract, data required to take steps before entering into that contract or to perform it may be processed.
4. Purposes and legal bases
- website availability, security and diagnostics — Article 6(1)(f) GDPR, based on the controller's legitimate interest in operating the website securely;
- website analytics using Google Analytics 4 and Microsoft Clarity — Article 6(1)(a) GDPR, based on the user's consent; these tools are activated only after consent has been given;
- handling correspondence and enquiries — Article 6(1)(f) GDPR and, where the enquiry is made with a view to entering into a contract, Article 6(1)(b) GDPR;
- performance of a separate contract or taking steps at the data subject's request before entering into it — Article 6(1)(b) GDPR;
- compliance with legal obligations, where applicable — Article 6(1)(c) GDPR;
- establishment, exercise or defence of legal claims — Article 6(1)(f) GDPR.
5. Data recipients and infrastructure
Where necessary, data may be entrusted or disclosed to providers of technical infrastructure, hosting, DNS, email and IT support, and to entities supporting the controller in legal, accounting or security matters.
If analytics consent is given, recipients of data processed through those tools may also include Google, as the provider of Google Analytics 4, and Microsoft, as the provider of Microsoft Clarity.
The public website is currently hosted on Railway, authoritative DNS is provided by Cloudflare in DNS-only mode, and domain email uses the existing HostKoala infrastructure.
6. Transfers outside the EEA
Some infrastructure or analytics providers may be established or operate outside the European Economic Area. Where a particular processing activity involves a transfer of personal data to a third country, the transfer may take place only using a mechanism provided for in Chapter V GDPR and appropriate to the relevant provider and relationship. Information about the mechanism applicable to a particular processing activity can be obtained at kancelaria@iurisnova.pl.
7. Retention periods
- technical data are retained only for as long as necessary to ensure security, diagnostics and correct operation of the infrastructure, in line with provider settings and retention periods; the controller does not create a separate archive of logs without a justified need;
- the user's analytics preference is stored locally in the browser until the user changes the decision or removes the site's local data;
- Google Analytics 4 and Microsoft Clarity analytics data are retained in accordance with the configuration and retention periods of those services and no longer than necessary for the analytics purpose;
- correspondence is retained until the matter is closed and then for the period required to evidence its course or until the applicable limitation period for claims expires;
- data subject to a legal retention requirement are retained for the period required by the applicable law.
8. Data-subject rights
Within the limits provided by the GDPR, you may have the right to:
- access your data and receive a copy,
- rectify your data,
- erase your data,
- restrict processing,
- data portability, where the statutory conditions are met,
- object to processing based on Article 6(1)(f) GDPR,
- withdraw consent at any time where processing is based on consent; withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn,
- lodge a complaint with the President of the Polish Personal Data Protection Office (UODO).
9. Voluntary provision and source of data
Data included in correspondence are provided voluntarily. If they are not provided, we may be unable to respond or take the action requested. Technical data arise from the use of the website infrastructure. Analytics data are processed only after voluntary consent has been given.
10. Automated decision-making
Data relating to use of the public website, analytics and correspondence are not used by the controller to make decisions about you based solely on automated processing that produce legal effects or similarly significantly affect you.
11. Cookies and similar technologies
Detailed information about the consent mechanism, storage of privacy preferences, Google Analytics 4 and Microsoft Clarity is available in the Cookie policy.
12. Changes to this policy
This policy is updated when the operation of the website, the scope of personal-data processing or legal requirements change. The current version is published at this address.