Privacy Policy
Effective Date: November 10, 2026
This Privacy Policy (hereinafter — "Policy") explains how Serhii Shypylov (Sole Proprietor / JDG), operating under the commercial brand 1it.pro, collects, uses, and protects personal data across all web resources of the 1it.pro ecosystem, as well as during the provision of IT consulting, web development, and automation services.
We respect your privacy and act in strict accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR / RODO).
1. Data Controller
The administrator of your personal data is:
- Legal Entity: Serhii Shypylov (Jednoosobowa działalność gospodarcza)
- Registered Address: al. Grunwaldzka 472D, 80-309 Gdańsk, Poland
- NIP (Tax ID): 9571175402
- REGON: 528574100
- Contact Email: [email protected] / [email protected]
2. What Data We Collect
We collect only the data necessary to provide high-quality services:
- Identity Data: First name, last name, company name, job title (for B2B contracts).
- Contact Data: Email address, phone number, mailing address (for invoicing).
- Financial Data: Data required for VAT invoices (Faktura VAT). Note: We do not store full payment card details; they are processed by licensed payment institutions or direct bank transfer (SEPA / SWIFT).
- Technical Data: IP address, browser type, operating system, and system access logs.
- Operational Inquiry Data: Messages submitted via web forms, chat widgets, or project communication channels.
3. Purposes and Legal Basis for Processing
We process your data based on Art. 6 of the GDPR (RODO):
| Purpose | Legal Basis |
|---|---|
| Service Provision (Web development, CRM, 1Desk, private systems) | Performance of a contract (Art. 6(1)(b) GDPR) |
| Communication (Inquiries, operational technical support) | Legitimate interest or Contract |
| Accounting and Taxes (Invoicing, statutory financial reporting) | Legal obligation (Art. 6(1)(c) GDPR) |
| Analytics and Security (DDoS protection, bot filtering) | Legitimate interest (Art. 6(1)(f) GDPR) |
4. Data Disclosure to Third Parties
We transfer data strictly to verified technical processors that guarantee compliance with European GDPR standards:
- Hosting Infrastructure: Hetzner Online GmbH (Germany / Finland) — dedicated server hosting.
- Security & CDN: Cloudflare Inc. (EU data centers) — website protection and DDoS mitigation.
- Privacy Analytics: Self-hosted Umami Analytics (
analytics.1it.pro) — cookieless aggregate traffic measurement without cross-site tracking. - Accounting & Tax Filing: Licensed accounting software in Poland (inFakt).
We do not sell your personal data or transfer it to third parties for marketing or profiling purposes.
5. International Data Transfers
Whenever service components require data transfer outside the European Economic Area (EEA), such as upstream AI APIs under client agreements, data protection is secured through Standard Contractual Clauses (SCC) and Data Processing Addenda (DPA) approved by the European Commission.
6. Your Statutory Rights
Under the GDPR, you have the following rights:
- Right of access: Request confirmation and a copy of your personal data.
- Right to rectification: Request correction of inaccurate records.
- Right to erasure ("Right to be forgotten"): Request permanent deletion when data is no longer necessary for statutory accounting.
- Right to restrict processing: Request a temporary halt to processing.
- Right to data portability: Receive your records in a structured, machine-readable format (CSV/JSON).
- Right to object: Opt out of non-statutory communications.
To exercise your rights, email us at: [email protected]. You also have the right to lodge a complaint with the Polish data protection authority — UODO (Urząd Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa).
7. Data Security
We implement rigorous technical and organizational security measures:
- TLS 1.3 encryption across all website endpoints.
- Key-based SSH access, strict firewall policies (UFW), and automated intrusion prevention.
- Automated encrypted backups with off-site replication.
- Principle of least privilege and strict data minimization.
8. Contact Details
For all privacy-related matters:
Serhii Shypylov (1it.pro) al. Grunwaldzka 472D, 80-309 Gdańsk, Poland Email: [email protected] / [email protected]