Last updated: 27 September 2026
1. Data controller
The controller of your personal data is Agile Software Sp. z o.o., with its registered office at ul. Puławska 405A/7, 02-801 Warszawa, entered in the register of entrepreneurs of the National Court Register under KRS number 0000672967, NIP 9512434893, REGON 367008974.
For all matters concerning personal data protection, you may contact us via the contact form or by post at our registered office address.
2. What data we process
We process only the data that you provide yourself in the order request, inquiry or contact form:
- company name and Tax ID (NIP), in the order request and inquiry forms,
- full name of the contact person,
- email address and telephone number,
- message content — if you use the inquiry or contact form.
The store sells exclusively to businesses (B2B). We do not collect special categories of personal data or carry out automated profiling of you.
3. Purposes and legal bases for processing
- Fulfilling an order or responding to an inquiry— the legal basis is performance of a contract or taking steps at your request before entering into a contract (Article 6(1)(b) GDPR).
- Issuing invoices and complying with tax and accounting obligations — the legal basis is compliance with a legal obligation to which the controller is subject (Article 6(1)(c) GDPR).
- Establishing, pursuing or defending claims — the legal basis is our legitimate interest (Article 6(1)(f) GDPR).
4. Recipients of data
Your data may be entrusted to trusted processors that support us in operating the store, solely to the extent necessary to provide services:
- hosting and server infrastructure provider,
- email service provider,
- accountancy firm and invoicing system provider,
- network traffic security and acceleration service provider (CDN),
- web analytics tool provider (Google Analytics) — only after you have given consent.
These entities process data solely under a data processing agreement and our documented instructions, to the extent necessary to provide the services entrusted to them. We do not sell your data or disclose it to third parties for marketing purposes.
5. Retention period
We retain data relating to orders placed and invoices issued for the period required by tax legislation, i.e. 5 years from the end of the calendar year in which the tax payment deadline expired. We retain data necessary to establish, pursue or defend claims until the limitation period expires (usually up to 3 years for claims relating to our business activities). We retain data from inquiries that did not result in a transaction only until the correspondence has concluded, after which we delete it.
6. Your rights
In connection with the processing of your data, you have the right to:
- access your data and obtain a copy,
- rectify (correct) your data,
- have your data erased (the right to be forgotten),
- restrict processing,
- data portability,
- object to processing.
To exercise these rights, write to us via the contact form or by post at our registered office address. You also have the right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (UODO) (ul. Stawki 2, 00-193 Warszawa).
7. Voluntary provision of data
Providing data is voluntary, but necessary to submit an order request, issue an invoice or respond to an inquiry. Without this data, these actions cannot be carried out.
8. Cookies and browser storage
We use Google Analytics 4 (provider: Google Ireland Limited) for anonymous visitor analytics. The tool stores cookies (including `_ga`) in your browser and transmits anonymised data on how you use the website. Analytics operates on a consent basis (Google Consent Mode v2): it is disabled by default and starts only after you give consent in the cookie banner. You may change or withdraw your consent at any time — reopen the consent settings using the button below (you may also clear site data in your browser settings). We do not use marketing or advertising cookies. We store basket contents solely in your browser’s local storage (localStorage) — this data remains on your device and is not sent to us.
9. Transfers of data outside the EEA
Some of our service providers (e.g. CDN infrastructure providers and the Google Analytics tool provider) may process data outside the European Economic Area. In such cases, transfers take place on the basis of standard contractual clauses approved by the European Commission, ensuring an appropriate level of data protection.
10. Automated decision-making and profiling
We do not make decisions concerning you that are based solely on automated processing, including profiling, and that would produce legal effects concerning you or similarly significantly affect you (Article 22 GDPR). We do not carry out profiling for marketing purposes.
11. Changes to the Privacy policy
We may update this policy when legislation or the way in which we process data changes. The current version is always available on this page, and we indicate the date of the last change above.
