Data Processing Notice

In force from 21 September 2026 · N1Solutions

This notice fulfils the information obligation under Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR). It applies to clients, contractors, people who contact us and people named as contacts on the side of our partners.

A detailed description of how the website works is in our Privacy Policy.

1. Data controller

The controller of your personal data is N1Solutions, Adama Branickiego 11/107, 02-972 Warsaw, Poland, VAT ID PL 526-276-78-40.

Contact: kontakt@n1solutions.pl, tel. +48 728 923 302. We have not appointed a data protection officer - we are not required to.

2. Where your data comes from

We obtain data:

  1. directly from you - via the contact form, email correspondence, a phone call or a meeting;
  2. from your employer or client, if you were named as a contact person for the engagement;
  3. from public registers such as CEIDG and KRS, in the scope of company data.

3. Scope of data processed

We process ordinary data necessary to establish and run the engagement: name, job title, company name, email address, phone number, correspondence address and the company’s identification and billing details. We do not process the special categories of data referred to in Article 9 GDPR.

4. Purposes and legal bases

  1. Answering enquiries and handling correspondence - Art. 6(1)(a) and (f) GDPR (consent and the controller’s legitimate interest).
  2. Concluding and performing a contract, including maintenance and technical support services - Art. 6(1)(b) GDPR.
  3. Meeting tax and accounting obligations - Art. 6(1)(c) GDPR.
  4. Day-to-day contact with people named by the contractor - Art. 6(1)(f) GDPR.
  5. Establishing, pursuing or defending claims - Art. 6(1)(f) GDPR.

5. Retention periods

  1. Correspondence that did not lead to an engagement - up to 12 months from the last contact.
  2. Quotation data - up to 24 months from the date of the quote.
  3. Contract data - for the term of the contract, then until claims become time-barred.
  4. Accounting records - 5 years from the end of the tax year in which the tax obligation arose.

6. Data recipients

The website and the mail server run on the controller’s own infrastructure, so we use no external hosting and no cloud email services. Data may be shared only with our accountants and legal advisers - to the extent needed for invoicing and legal support - and with public authorities where disclosure is required by law. We have a data processing agreement in place with every entity that processes data on our behalf.

7. Transfers outside the EEA

We do not transfer personal data outside the European Economic Area. Should a specific service ever require it, the transfer would take place solely on the basis of standard contractual clauses approved by the European Commission or an adequacy decision, and you would be informed of it.

8. Your rights

You have the right to access your data, to rectify, erase or restrict its processing, the right to data portability, the right to object to processing based on legitimate interest, and the right to withdraw consent at any time - without affecting the lawfulness of processing carried out before the withdrawal.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland.

9. Whether providing data is mandatory

Providing data is voluntary. For a quotation request, the absence of a name and email address makes a reply impossible; for a contract, it prevents the contract being concluded and invoiced.

10. Automated decision-making

We make no automated decisions and carry out no profiling.