Privacy Policy
1. Data controller
The controller of your personal data is PRYM-SOFT Sp. z o.o., ul. Ugorek 12/35, 31-456 Kraków, Poland, tax ID (NIP) 9452227362 (the “Controller”). Contact for data matters: kontakt@labcoda.pl.
2. Purposes and legal bases of processing
We process data in order to:
- provide the Service and maintain the Account — Art. 6(1)(b) GDPR (performance of a contract);
- handle payments and issue invoices — Art. 6(1)(b) and (c) GDPR (contract and legal obligation);
- handle enquiries, complaints and contact — Art. 6(1)(b) and (f) GDPR;
- ensure security and for analytical purposes (technical data) — Art. 6(1)(f) GDPR (legitimate interest).
3. Scope of data
We process, among others: e-mail address, first and last name / company name, organisation data (name, tax ID, address), contact details, the content of requests for quotation, and technical data (IP address, browser information, login logs).
4. Data recipients
Data may be entrusted to processors under data processing agreements, including: the hosting provider, the payment operator (Stripe) and the e-mail service provider. Invoice data may be transferred to the Polish National e-Invoicing System (KSeF) in accordance with the applicable regulations.
5. Retention period
We store data for the period of using the Service and, after it ends, for the time required by law (including accounting data — for the limitation period of tax liabilities, usually 5 years).
6. Your rights
You have the right to: access your data, rectify it, erase it, restrict processing, data portability, object, and withdraw consent (without affecting the lawfulness of processing before withdrawal). You also have the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO) in Poland.
7. Cookies
The Service uses cookies and related technologies (localStorage) that are necessary for the Service to work — including maintaining the logged-in User’s session and remembering language preferences. This data is required to provide the service and is not used for marketing. A persistent device identifier for analytics (point 8) is stored only after consent is given in the banner — if “Essential only” is chosen, it is not stored at all. We do not use external analytics or advertising tools (no Google Analytics, no advertising pixels) and we do not share traffic data with third parties for marketing purposes.
8. Visit analytics (Service statistics)
We run our own analytics of how the Service is used, in order to develop it based on real user needs (e.g. which functions are used, what users search for, what does not work). We record:
- pages opened and how long they are displayed, buttons, links and interface elements clicked,
- phrases entered in the Service’s search box and the number of results,
- login and registration events (without passwords),
- the date and time of the event, IP address, browser and device information, language, referring page address,
- the login (e-mail address) — if the User is logged in.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest — ensuring security and developing and measuring the quality of the Service), and, as regards storing a persistent identifier on the device, the User’s consent. We keep analytics data for 12 months, after which it is deleted automatically. It is not used for automated decision-making producing legal effects. Objections to processing and the other rights under point 6 are handled at kontakt@labcoda.pl.
9. Voluntary nature of providing data
Providing data is voluntary but necessary to create an Account and use the Service. The data is not used for automated decision-making producing legal effects (profiling).