Privacy Policy
1. Data Controller
The controller of your personal data is Sendormeco Holding sp. z o.o., VAT PL5252866457, operating under the brand 360picture.pl. Contact: przemek@sendormeco.com.
2. What data we collect
- Contact data: name, email, phone — provided voluntarily in our forms (quote request, lead-magnet)
- Order data: property address, scope of service — to deliver the agreed work
- Technical data: IP address (hashed), browser type, pages visited — for analytics (Google Analytics 4) and security
- Cookies: see Cookie Policy below
3. Purposes and legal basis (GDPR Article 6)
| Purpose | Legal basis | Retention |
|---|---|---|
| Contract performance (360° tours) | Art. 6(1)(b) GDPR | Contract + 5 years |
| Invoicing, bookkeeping | Art. 6(1)(c) GDPR + Accounting Act | 5 years from end of tax year |
| Marketing of own services (existing customers) | Art. 6(1)(f) GDPR — legitimate interest | Until objection |
| Marketing publications of tours (with consent) | Art. 6(1)(a) GDPR — consent | Until withdrawal |
| Site analytics (anonymized) | Art. 6(1)(f) GDPR or 6(1)(a) for marketing cookies | 14 months (GA4 default) |
4. Data recipients
We share your data with: our accounting partner (data processing agreement), hosting provider (Plesk on a Polish datacenter), email delivery (SMTP), Google Analytics (anonymized IP). We do not transfer data outside the EEA.
5. Your rights
- Access to your data
- Rectification
- Erasure ("right to be forgotten") — within the limits of statutory retention
- Restriction of processing
- Data portability
- Objection to processing based on legitimate interest
- Withdrawal of consent at any time
- Lodging a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland)
To exercise these rights: przemek@sendormeco.com.
6. Cookie Policy
We use the following cookies:
| Cookie | Purpose | Type | Duration |
|---|---|---|---|
| sm360_cookie_consent_v1 | Stores your cookie consent | Essential | 12 months (localStorage) |
| XSRF-TOKEN, *-session | Site security (CSRF, sessions) | Essential | Session |
| _ga, _gid (Google Analytics 4) | Anonymized site analytics | Analytics (with consent) | 14 months |
You can withdraw or change consent at any time: Cookie settings. Browser settings let you block cookies entirely (note: some site features may stop working).
7. Profiling and automated decisions
Your data is not subject to automated decision-making, including profiling, with legal consequences.
8. Changes to this policy
We may update this policy. Material changes will be announced on the homepage and by email for registered users.