Controller and contact
The controller is ENIGMAIS spółka z ograniczoną odpowiedzialnością, Hrubieszowska 20, 20-303 Lublin, Poland; NIP 9462772032; KRS 0001265613. Contact info@enigmais.com or +48 739 426 429 for data protection enquiries or write to the registered address.
Data, purposes, and legal bases
We process your name or company name, business NIP where applicable, Polish billing address, email, selected plan, order and payment references, amounts, consent statements, accepted document versions, delivery records, and purchase correspondence. Installation details are requested as needed to bind your license. Cancellation forms record the name, order number, email, statement, and time of submission.
For consumers and sole traders, processing needed to take requested steps and perform the purchase contract is based on GDPR Article 6(1)(b). Tax and accounting records and legally required customer-rights handling are based on Article 6(1)(c). For business representatives, purchase correspondence, evidence of the contract and declarations, dispute handling, and service security, we rely on Article 6(1)(f): our legitimate interests in administering business relationships, establishing or defending claims, and preventing abuse. Delivery declarations are contractual declarations, not consent to marketing.
Billing and contact information is needed to handle an order, payment, license, and invoice. If you do not supply required information, we cannot complete the purchase. We do not request a consumer NIP or enroll buyers in marketing. Security measures temporarily process connection information such as IP addresses for rate limiting. We do not make decisions producing legal or similarly significant effects solely through automated profiling.
Recipients and payment processing
Authorized personnel, our EU/EEA hosting and email processors, and accounting or professional advisers receive information only as needed for their roles. Public authorities may receive data where legally required. We do not sell personal data.
When you continue to payment, Autopay S.A. receives the order reference, email, amount, currency, and purchase description. Autopay and the selected bank or card provider process payment information under their own privacy notices. EnigmaIS does not collect your card credentials. See https://autopay.pl/polityka-prywatnosci for Autopay’s privacy information.
Our order hosting and email processing take place within the EU/EEA. We do not intentionally transfer order records to processors outside the EU/EEA. Payment providers independently explain their processing locations and safeguards in their own notices.
Retention
We retain contract, license, delivery, and consent evidence for the contract period and the applicable period for establishing or defending claims, generally up to six years after the contract ends. Tax and accounting documents are retained for the statutory period, generally five years calculated from the end of the year in which the relevant tax payment became due. Legal proceedings, an interruption or suspension of a limitation period, or another statutory duty may require longer retention.
Unpaid orders and unresolved payment attempts are retained only while needed to reconcile payments and resolve related enquiries or claims; records evidencing a payment are subject to the accounting and claims periods above. Purchase correspondence and cancellation requests follow the period applicable to the order or dispute. We review records for deletion or anonymization after the relevant need ends.
Your rights
You may request access, correction, erasure, restriction, and, where applicable, portability of your data. You may object to processing based on legitimate interests. Rights are subject to their statutory conditions; for example, invoice retention duties may prevent immediate erasure. We may request proportionate information to verify your identity before disclosing or changing personal data.
You may lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), https://uodo.gov.pl/. Contacting us first is optional and does not limit that right.
Order links and website features
Your private order link is a bearer link: anyone who has it may see the order number, plan, amounts, and payment/delivery status. It does not reveal billing details, email, or recorded consent. Keep the link private. The checkout does not use advertising analytics, cookies, or browser storage. Payment takes place on Autopay’s site, where the provider’s own rules apply.
The wider website offers an optional YouTube introduction. It connects to YouTube only when you activate the player; YouTube then processes data under its own notice. Reading the purchase policies or completing our checkout does not require loading that player.
Contact: info@enigmais.com · +48 739 426 429.