Privacy policy

The Privacy policy forms an integral part of the Terms & conditions.

§1. Data Controller

The controller of the personal data of users of the Intername – world domains service (hereinafter: the “Service”) is:

BPtech.pl – uslugi informatyczne Boryszek Pawel
ul. Sadowa 12, 72-100 Goleniow, Poland
Tax Identification Number (VAT): PL8561638135
E-mail: info@interna.me

The Service has not appointed a Data Protection Officer. For matters concerning data protection, please contact the Data Controller directly.

§2. Purpose and Scope of Processing

Personal data of users are processed in accordance with the applicable legal bases and for the following purposes:

conclusion and performance of a contract, including account management within the Service, domain registration, payments, invoicing;
compliance with legal obligations, such as tax and accounting duties;
legitimate interests of the Controller, including protection against claims, statistical analysis, and ensuring the security of IT services;
on the basis of consent, e.g. sending commercial information by e-mail/SMS, use of analytical and marketing cookies (in line with the Polish Act on the Provision of Electronic Services and the Telecommunications Law).

§3. Scope of Data Processed

The following categories of data may be processed: identification data (first name, surname, VAT, Social Security Number, passport number or other identification number, address), contact details (telephone, e-mail), payment data, as well as data relating to the use of the Service (logs, IP address, cookies).

Identification data, including the SSN or its equivalent for consumers, are required for correct domain registration and for issuing an invoice.

§4. Data Retention Period

Personal data are retained:

for the duration of the contract and the necessary period thereafter, e.g. for handling complaints and pursuing/defending claims, until the expiry of the limitation period (usually up to 6 years);
accounting and tax records – for the period required by law (e.g. 5 years from the end of the tax year);
data processed on the basis of consent – until such consent is withdrawn.

§5. Data Recipients

Personal data may be disclosed to:

entities cooperating in the field of domain registration, hosting services, SSL certificates, payment processing;
IT service providers, payment operators, accounting firms, law firms – strictly to the necessary extent;
public authorities, where required by law or by a court order.

In justified cases, where such transfer is necessary for the performance of a contract between the User and the Service, data may be transferred outside the European Economic Area (EEA), subject to adequate safeguards in line with the GDPR. The User will be informed of such transfer when placing an order. Transfers to countries for which the European Commission has issued an adequacy decision (e.g. the United Kingdom) are based on such decision.

§6. User Rights

The User has the right to:

access their data and obtain a copy thereof,
rectify their data,
erase their data (“right to be forgotten”),
restrict processing,
transfer their data to another service provider,
object to data processing (in particular for marketing purposes),
withdraw consent at any time (without affecting the lawfulness of processing carried out before its withdrawal).

In connection with the processing of data, the User has the right to lodge a complaint with the President of the Polish Data Protection Authority (PUODO) or his local equivalent.

§7. Data Security and NIS2

The Controller applies technical and organisational measures required under the GDPR and the NIS2 Directive, in particular:

encryption of data transmission (SSL/TLS),
access control and authentication systems,
IT system monitoring and logging,
regular data backups,
testing and updating of security measures,
incident reporting and handling procedures.

In the event of a security incident affecting data or services that may pose a high risk to the User’s rights, the User will be informed without undue delay.

§8. Automated Decisions

No automated decision-making, including profiling within the meaning of the GDPR, is carried out on the basis of the User’s personal data.

§9. Cookies

The Service uses cookies to ensure proper operation and to improve the quality of services provided.

Types of cookies:

Essential (session and configuration cookies) – e.g. PHPSESSID, i_cookie, i_language, i_settings, wordpress_, wf, stripe – enabling the use of the Service and order placement;
Analytical cookies – e.g. i_stats_*, enabling analysis of how the Service is used and improving its performance (active only with the User’s consent, opt-in mechanism).

Each User may manage cookies independently via their browser settings, including blocking or deleting them.

§10. Amendments to the Privacy Policy

The Controller reserves the right to amend this Policy in the event of changes to the law, technology, or the way the Service operates. Users will be notified of significant changes via the Service or by e-mail no later than 14 days before such changes come into effect.