{"id":876,"date":"2026-11-08T13:30:08","date_gmt":"2026-11-08T12:30:08","guid":{"rendered":"https:\/\/trejka.com\/dokumenty\/polityka-prywatnosci\/"},"modified":"2026-11-08T17:08:35","modified_gmt":"2026-11-08T16:08:35","slug":"privacy-policy","status":"publish","type":"dokumenty","link":"https:\/\/trejka.com\/en\/dokumenty\/polityka-prywatnosci\/","title":{"rendered":"Privacy policy"},"content":{"rendered":"<p><strong>Effective from 8 November 2026.<\/strong><\/p>\n<p>This policy explains what personal data we collect, for what purpose, how long we retain it, and what rights you have. We apply it in accordance with Regulation (EU) 2016\/679 of the European Parliament and of the Council (GDPR), the Act of 10 May 2018 on the protection of personal data, and the Act of 12 July 2024 \u2013 the Electronic Communications Act.<\/p>\n<h2>1. Data controller<\/h2>\n<p>The controller of your personal data is <strong>TREJKA Sp. z o.o.<\/strong> with its registered office in Bia\u0142ystok, ul. Moniuszki 31a, 15-192 Bia\u0142ystok, entered in the National Court Register (KRS) under number 0000423570, Tax Identification Number (NIP) 9662085626, REGON 200704864 (hereinafter: \u201eTREJKA\u201d, \u201ewe\u201d).<\/p>\n<p>For matters relating to personal data, please contact us:<\/p>\n<ul>\n<li>contact person: Bartosz St\u0119pniewski,<\/li>\n<li>email: <a href=\"mailto:ba****@****ka.com\" title=\"This contact has been encoded by Anti-Spam by CleanTalk. Click to decode. To finish the decoding make sure that JavaScript is enabled in your browser.\" data-original-string=\"YaE9E8sOkdPWx5cc2cQ7RA==f9fMkLfxfzo1ATveggf\/OGlsq\/spfMq7FHz29Kw\/S+A4d0=\"><span \n                data-original-string='dL7DJkBGEdea0LKXD44ehw==f9fPZ6xj71Pbu\/qVhjnCDmaxeuqexm2O2zxhgsrSxUm5Ho='\n                class='apbct-email-encoder'\n                title='This contact has been encoded by Anti-Spam by CleanTalk. Click to decode. To finish the decoding make sure that JavaScript is enabled in your browser.'>well<span class=\"apbct-blur\">****<\/span>@<span class=\"apbct-blur\">****<\/span>ka.com<\/span><\/a>,<\/li>\n<li>telephone: <a href=\"tel:+48695423811\">+48 695 423 811<\/a>,<\/li>\n<li>by post: TREJKA Sp. z o.o., 31a Moniuszki Street, 15-192 Bia\u0142ystok.<\/li>\n<\/ul>\n<h2>2. Who is covered by this policy?<\/h2>\n<p>This policy applies to people who:<\/p>\n<ul>\n<li>visit the trejka.com website,<\/li>\n<li>contact us via the forms (contact, enquiry about working with us, quote calculator), by email or by telephone,<\/li>\n<li>are our clients or contact persons on the part of our clients and business partners,<\/li>\n<li>use the customer portal at panel.trejka.com,<\/li>\n<li>follow our social media profiles.<\/li>\n<\/ul>\n<p><strong>Data that we process on behalf of our clients.<\/strong> As we provide WordPress maintenance, IT support, backup and email services, we have access to data stored on our clients\u2019 websites, servers, computers and email accounts. In this regard, we act as a data processor under a data processing agreement (Article 28 of the GDPR), whilst our client is the data controller. The rules governing the processing of this data are set out in the agreement with the client, not in this policy.<\/p>\n<h2>3. What data do we process, for what purpose and for how long?<\/h2>\n<table>\n<thead>\n<tr>\n<th>Objective<\/th>\n<th>Data<\/th>\n<th>Legal basis<\/th>\n<th>Retention period<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>A reply to a message sent via the contact form, by email or by telephone<\/td>\n<td>first name and surname, email address, telephone number, name of organisation or company, message content<\/td>\n<td>Article 6(1)(f) of the GDPR \u2013 our legitimate interest in conducting correspondence<\/td>\n<td>for the duration of the correspondence, and if no collaboration takes place \u2013 for up to 12 months from the last contact<\/td>\n<\/tr>\n<tr>\n<td>Preparing a quotation or offer (the \u201eEnquiry about cooperation\u201d form, the quotation calculator)<\/td>\n<td>as above, plus the website address, type of organisation, selected services and their scope, preferred method of contact, and additional information about the project<\/td>\n<td>Article 6(1)(b) of the GDPR \u2013 actions taken at your request prior to entering into a contract; in the case of individuals acting on behalf of a company or organisation \u2013 Article 6(1)(f) of the GDPR<\/td>\n<td>until the contract is concluded, or, if this does not happen, for up to 12 months from the date the offer was sent<\/td>\n<\/tr>\n<tr>\n<td>Conclusion and fulfilment of the contract (WordPress support, IT support, backups, one-off services), handling of enquiries and faults, reports<\/td>\n<td>identification and contact details of the client and contact persons, company details, history of requests and work carried out<\/td>\n<td>Article 6(1)(b) of the GDPR (contract); for contact persons on the client\u2019s side \u2013 Article 6(1)(f) of the GDPR<\/td>\n<td>for the duration of the contract, and thereafter until the expiry of the limitation period for claims<\/td>\n<\/tr>\n<tr>\n<td>Managing your account in the customer portal at panel.trejka.com<\/td>\n<td>full name, email address, login details, information about activity in the dashboard<\/td>\n<td>Article 6(1)(b) of the GDPR; for the client\u2019s contact persons \u2013 Article 6(1)(f) of the GDPR<\/td>\n<td>for the duration of the contract; once it has ended, we delete the account<\/td>\n<\/tr>\n<tr>\n<td>Invoicing, accounting, tax and accounting obligations<\/td>\n<td>data from invoices and accounting documents<\/td>\n<td>Article 6(1)(c) of the GDPR \u2013 legal obligation<\/td>\n<td>5 years from the end of the calendar year in which the tax payment deadline expired<\/td>\n<\/tr>\n<tr>\n<td>Identification, investigation and defence of claims<\/td>\n<td>information necessary to substantiate a claim or a defence<\/td>\n<td>Article 6(1)(f) of the GDPR<\/td>\n<td>until the expiry of the limitation period for claims<\/td>\n<\/tr>\n<tr>\n<td>Website security and protecting forms from spam<\/td>\n<td>IP address, browser and device details, date and time of visit, data entered into the form<\/td>\n<td>Article 6(1)(f) of the GDPR \u2013 our legitimate interest in protecting the website<\/td>\n<td>for as long as is necessary to ensure safety, but for no longer than 12 months<\/td>\n<\/tr>\n<tr>\n<td>Informing customers about important matters relating to our services (e.g. security incidents, changes to our offering)<\/td>\n<td>full name, email address, telephone number<\/td>\n<td>Article 6(1)(f) of the GDPR; we will only send you commercial communications by electronic means with your consent<\/td>\n<td>until the end of the business relationship, the lodging of an objection or the withdrawal of consent<\/td>\n<\/tr>\n<tr>\n<td>Statistical, personalisation and marketing cookies<\/td>\n<td>cookie identifiers, data on website usage<\/td>\n<td>Article 6(1)(a) of the GDPR and Article 399 of the Electronic Communications Act \u2013 your consent<\/td>\n<td>until consent is withdrawn or the cookie expires<\/td>\n<\/tr>\n<tr>\n<td>Managing social media profiles<\/td>\n<td>profile name, content of comments and messages, reactions<\/td>\n<td>Article 6(1)(f) of the GDPR \u2013 communication with followers<\/td>\n<td>for the removal of content by you or by us<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>Providing your details is voluntary, but without them we will not be able to reply to your message, prepare a quote or enter into a contract. The details required for invoices are mandated by law.<\/p>\n<h2>4. Who we share data with<\/h2>\n<p>We do not sell personal data. We only pass it on when necessary to the following recipients:<\/p>\n<ul>\n<li>hosting and server providers on which the website and our systems operate,<\/li>\n<li>Cloudflare, Inc. \u2013 content delivery network and website protection,<\/li>\n<li>CleanTalk \u2013 a service that protects forms from spam; when a form is submitted for review, the information sent includes, amongst other things, the IP address, email address and message content,<\/li>\n<li>the providers of the email and communication tools we use,<\/li>\n<li>a cloud storage provider where we store our backups (storage within the European Union),<\/li>\n<li>accountancy firms, law firms, banks and payment service providers \u2013 in relation to accounting and legal services,<\/li>\n<li>public authorities \u2013 only where required by law.<\/li>\n<\/ul>\n<p>We enter into data processing agreements with suppliers acting on our behalf.<\/p>\n<h2>5. Transfer of data outside the European Economic Area<\/h2>\n<p>We store backups and customer data within the European Union. Some technical service providers (e.g. Cloudflare, CleanTalk) may also process data outside the EEA, including in the United States. In such cases, the transfer is based on a decision by the European Commission confirming an adequate level of protection (the EU-US Data Privacy Framework) or on standard contractual clauses approved by the European Commission. You can obtain a copy of these safeguards by contacting us.<\/p>\n<h2>6. Your rights<\/h2>\n<p>In relation to the processing of your data, you have the right to:<\/p>\n<ul>\n<li>access to data and the right to obtain a copy thereof (Article 15 of the GDPR),<\/li>\n<li>rectification of data (Article 16 of the GDPR),<\/li>\n<li>the right to erasure (Article 17 of the GDPR),<\/li>\n<li>restrictions on processing (Article 18 of the GDPR),<\/li>\n<li>data portability (Article 20 of the GDPR) \u2013 where we process data on the basis of a contract or consent,<\/li>\n<li>objection to processing (Article 21 of the GDPR) \u2013 where we process data on the basis of our legitimate interest,<\/li>\n<li>to withdraw consent at any time \u2013 without this affecting the lawfulness of the processing carried out prior to its withdrawal.<\/li>\n<\/ul>\n<p>To exercise these rights, please write to <a href=\"mailto:ba****@****ka.com\" title=\"This contact has been encoded by Anti-Spam by CleanTalk. Click to decode. To finish the decoding make sure that JavaScript is enabled in your browser.\" data-original-string=\"3tyC7vyIHld+43xdthVIlw==f9frd3gs8Y5Jw0whdCFUowmF2SjGf6xNtDE8+0jEhBrKHA=\"><span \n                data-original-string='Yngn1Vi+aNev75vCgfAr3A==f9fQdPZYFGvff0uoWBytrzlfzUREX4JJe6KCIo5AF3HKFo='\n                class='apbct-email-encoder'\n                title='This contact has been encoded by Anti-Spam by CleanTalk. Click to decode. To finish the decoding make sure that JavaScript is enabled in your browser.'>well<span class=\"apbct-blur\">****<\/span>@<span class=\"apbct-blur\">****<\/span>ka.com<\/span><\/a>. We will reply without undue delay, within one month at the latest.<\/p>\n<p>You also have the right to lodge a complaint with the supervisory authority: the President of the Personal Data Protection Office, 2 Stawki Street, 00-193 Warsaw, <a href=\"https:\/\/uodo.gov.pl\" target=\"_blank\" rel=\"noopener\">uodo.gov.pl<\/a>.<\/p>\n<h2>7. Automated decisions and profiling<\/h2>\n<p>We do not make decisions about you based solely on automated processing, including profiling, which would have legal effects or similarly significantly affect you. The price calculator shows only an indicative price \u2013 the final quote is prepared by a member of staff.<\/p>\n<h2>8. Cookies<\/h2>\n<p>Cookies are small text files stored on your device by your browser. On your first visit, we display a banner where you can choose which categories of cookies you consent to:<\/p>\n<ul>\n<li><strong>Necessary<\/strong> \u2013 always active, as the website won\u2019t work properly without them. They are used, amongst other things, to remember your choices in the cookie banner (for 365 days), to protect forms from spam and bots, and to handle the login process.<\/li>\n<li><strong>Statistics<\/strong> \u2013 they help us understand how you use the website. We only use them with your consent.<\/li>\n<li><strong>Personalization<\/strong> \u2013 they remember your settings and preferences. We only activate them with your consent.<\/li>\n<li><strong>Marketing<\/strong> \u2013 are used to display targeted adverts for our services. We only activate them with your consent.<\/li>\n<\/ul>\n<p>At present, the website does not use any external analytics or advertising tools (such as Google Analytics or Meta Pixel). Should we implement them, they will only be activated once consent has been given, and we will add a list of them to this policy.<\/p>\n<p>You can change or withdraw your consent at any time via the cookie settings available on the website. You can also block or delete cookies via your browser settings \u2013 however, blocking essential cookies may make it difficult to use the website.<\/p>\n<h2>9. Social media<\/h2>\n<p>The website contains links to our profiles on Facebook, Instagram, X, YouTube and LinkedIn. These are simply links \u2013 no data is sent to these platforms until you click on them. Once you visit a profile, that platform\u2019s privacy policy applies. With regard to profile statistics on Facebook and Instagram, we are a joint data controller together with Meta Platforms Ireland Ltd.<\/p>\n<h2>10. Data security<\/h2>\n<p>Security is part of our day-to-day work, so we protect data in the same way we protect our customers\u2019 data: we use an encrypted connection (SSL\/TLS), access control and two-factor authentication, regular updates, monitoring and encrypted backups stored within the European Union. Only authorised personnel have access to the data.<\/p>\n<h2>11. Policy changes<\/h2>\n<p>We may update this policy if the law, our services or the tools we use change. The current version is always available on this page, and we state the date of the last update at the top of the document.<\/p>","protected":false},"featured_media":0,"parent":0,"template":"","meta":{"_acf_changed":false},"class_list":["post-876","dokumenty","type-dokumenty","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/trejka.com\/en\/wp-json\/wp\/v2\/dokumenty\/876","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/trejka.com\/en\/wp-json\/wp\/v2\/dokumenty"}],"about":[{"href":"https:\/\/trejka.com\/en\/wp-json\/wp\/v2\/types\/dokumenty"}],"wp:attachment":[{"href":"https:\/\/trejka.com\/en\/wp-json\/wp\/v2\/media?parent=876"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}