Privacy Policy
76 SOLUTIONS GROUP sp. z o.o.
Effective date: 25.08.2026
§ 1. Data Controller
The controller of personal data is 76 SOLUTIONS GROUP sp. z o.o. with its registered office at Prażmów 33 | 08-540 Prażmów (gm. Stężyca, LU, PL), entered into the National Court Register (KRS) under the number 0001261433, NIP (VAT No.) 5060130097 (VAT UE: PL5060130097), REGON 545508529 (hereinafter: the "Company" or "Controller").
Contact regarding personal data protection: e-mail info@76sg.pl, phone +48 501 727 067.
§ 2. Scope and Purposes of Data Processing
The Company operates a business card website (without contact forms, account registration, or newsletters); therefore, the scope of personal data processed from website visitors is limited. Notwithstanding the above, the Company processes personal data in connection with its business activities, in particular:
- data of persons contacting the Company by phone or e-mail using the contact details provided on the website (name, surname, e-mail address, phone number, content of correspondence) – for the purpose of responding to inquiries;
- data of clients and contractors (natural persons, sole traders, and representatives of corporate entities) – for the purpose of concluding and executing contracts, issuing invoices, and providing after-sales service;
- data of the Company's employees and collaborators – for the purpose of fulfilling obligations arising from employment/civil law contracts, including HR, payroll, tax, and social security (ZUS) obligations;
- data of job candidates – for the purpose of conducting the recruitment process for employment at the Company;
- basic statistical data regarding website traffic (if the Company uses analytical tools) – for the purpose of analyzing website visitor traffic.
§ 3. Legal Basis for Processing
Personal data is processed on the following grounds:
- Article 6(1)(b) GDPR – for the conclusion and performance of a contract (clients, contractors, employees, job candidates in the recruitment process);
- Article 6(1)(c) GDPR – to fulfill legal obligations incumbent on the Controller (e.g., tax and accounting regulations, labor law, social security);
- Article 6(1)(f) GDPR – for the purposes of the legitimate interests pursued by the Controller (e.g., responding to inquiries, asserting claims, statistical analysis of website visits);
- Article 6(1)(a) GDPR – where explicit consent has been given for processing data for a purpose other than those indicated above.
§ 4. Data Retention Period
Personal data is stored for the period necessary to achieve the purposes for which it was collected, including:
- data related to contract execution and invoicing – for the period required by tax and accounting regulations (generally 5 years from the end of the year in which the tax payment deadline expired);
- employee data – for the period required by labor law and social security regulations (generally 10 years from the end of employment for contracts concluded after January 1, 2019);
- job candidate data – until the end of the recruitment process, unless the candidate consents to data processing for future recruitment needs;
- data of persons contacting the Company – for the period necessary to respond and, if necessary, until the statute of limitations for potential claims expires.
§ 5. Data Recipients
Personal data may be transferred to the following categories of recipients:
- entities providing accounting services to the Company (accounting office);
- hosting, e-mail, and IT service providers maintaining the Company's infrastructure;
- banks, to the extent necessary for payment processing;
- public authorities entitled to receive data under legal provisions (e.g., tax office, ZUS), to the extent and purpose resulting from these provisions.
The Company does not transfer personal data to third countries (outside the European Economic Area) or to international organizations, unless required when using a specific service provider – in which case, the transfer ensures an appropriate level of data protection.
§ 6. Rights of Data Subjects
The data subject has the right to:
- access their personal data and obtain a copy of it;
- rectify (correct) data;
- erase data, provided this does not conflict with the legal obligation to store it;
- restrict data processing;
- data portability;
- object to data processing based on Article 6(1)(f) GDPR;
- withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal – if the processing is based on consent;
- lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw), if the person considers that the processing of their data violates GDPR provisions.
To exercise these rights, please contact the Controller using the details provided in § 1.
§ 7. Cookies
The Company's website strictly uses only essential cookies necessary for its proper functioning (technical cookies).
§ 8. Data Security
The Controller applies technical and organizational measures to ensure the protection of processed personal data appropriate to the risks and categories of protected data, including securing the data against unauthorized access, processing in violation of applicable laws, modification, loss, damage, or destruction.
§ 9. Changes to the Privacy Policy
The Controller reserves the right to amend this Privacy Policy, in particular due to changes in legal provisions, the scope of the Company's activities, or the tools used. The current version of the Privacy Policy is published on the Company's website.