Last updated: November 4, 2025
Personal Data Controller
The data controller of the users of the website syntelise.com (hereinafter: the “Website”) isSyntelise Damian Sibiński, with its registered in Warsaw, ul. Herbu Oksza 21/76, 02-495 Warsaw, NIP: 5140350033, REGON: 382664793 (hereinafter: the “Controller”).
You can contact the Controller via e-mail:damian.sibinski@syntelise.com.
What personal data are and how they are collected?
Personal data processed by the Controller may include, in particular:
- identification data, such as name and surname;
- contact details, such as e-mail address;
- information provided by the user in the course of communication with the Controller;
- technical data related to the use of the Website, including data necessary to ensure its proper functioning and security.
Personal data are collected directly from the user or, where applicable, indirectly in connection with the use of the Website.
The scope and type of personal data processed depend on the nature of the interaction between the user and the Website and are limited to what is necessary to achieve the purposes described in this Privacy Policy.
Data recipients
Personal data may be disclosed to the following categories of recipients:
- IT service providers (hosting, mailing, CRM),
- marketing service providers (e.g. mailing platforms),
- law firms or advisors cooperating with the Controller,
- public authorities – only where required by law.
The Controller uses only entities that guarantee compliance with GDPR requirements (Article 28 GDPR).
In the future, data may be transferred outside the European Economic Area (e.g. to the USA) solely in connection with the use of tools such as Google Analytics. In such cases, data transfers are based on Standard Contractual Clauses (SCCs) adopted by the European Commission (Article 46 GDPR).
User rights
Users have the following rights:
- access to data (Article 15 GDPR),
- rectification (Article 16 GDPR),
- erasure (“right to be forgotten”) (Article 17 GDPR),
- restriction of processing (Article 18 GDPR),
- data portability (Article 20 GDPR),
- objection to processing (Article 21 GDPR),
- withdrawal of consent at any time, without affecting the lawfulness of processing before withdrawal (Article 7(3) GDPR).
To exercise any of these rights, please contact the Controller via e-mail:damian.sibinski@syntelise.com.
Additionally, users have the right to lodge a complaint with the data protection supervisory authority.
Cookies
Cookies are small text files stored on a user’s device when visiting websites. Some are essential for the website to function, while others serve analytical or marketing purposes.
Types of cookies used on the Website:
- essential – enable the correct functioning of the website (e.g. remembering sessions and preferences),
- analytical – help understand how users interact with the Website,
- marketing – used for ad personalization.
Legal basis
Personal data are processed on the following legal bases, in accordance with Article 6(1) of the GDPR:
- Consent – Article 6(1)(a) GDPR
In the case of newsletter subscription and other activities where the user has given explicit consent. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before its withdrawal. - Performance of a contract or pre-contractual steps – Article 6(1)(b) GDPR
Where processing is necessary to conclude or perform a contract with the user or to take steps at the user’s request prior to entering into a contract. - Legal obligation – Article 6(1)(c) GDPR
Where processing is necessary to comply with legal obligations imposed on the Controller under applicable law. - Legitimate interests of the Controller – Article 6(1)(f) GDPR
Where processing is necessary for purposes resulting from the Controller’s legitimate interests, such as:- handling correspondence and responding to inquiries,
- ensuring the security and proper functioning of the Website,
- defending against potential claims or pursuing claims.
In each case, the Controller ensures that its legitimate interests do not override the fundamental rights and freedoms of the data subjects.
Newsletter and consents
Subscription to the newsletter is possible only after actively checking the consent box. Consent can be withdrawn at any time by clicking the unsubscribe link in the newsletter or by contacting the Controller.
Data processed for newsletter purposes are stored until consent is withdrawn.
Security measures
The Controller applies appropriate technical and organizational measures to protect data against loss, unauthorized access, or disclosure, including:
- encrypted connections (SSL),
- limiting data access to authorized persons only,
- regular backups,
- use of protection systems (firewalls, anti-malware).
Changes to This Privacy Policy
The Controller reserves the right to update this Privacy Policy to reflect changes in law or technology.
Each update will be published on syntelise.com together with the date of the update.
In case of significant changes regarding personal data processing, users will be notified accordingly.