Privacy & cookies
Your privacy. Clear choices.
We keep enquiries simple and collect only what is needed to reply. This notice explains who handles your information, why it is used and how to exercise your choices.
Who is responsible?
Adam Stypułkowski, operating the ITProSupport website as an individual in Poland, is the controller of personal data handled through this website. Contact: info@itprosupport.eu.
The site presents IT and automation solutions and accepts enquiries. It does not operate an online shop or conclude contracts through the contact form.
Your enquiry: only what is needed
The form asks for your email address and message. Your name and phone number are not required. Please do not include passwords, identity numbers, sensitive information or other people’s personal data. Any additional details you choose to include are handled as part of your correspondence; we do not verify every statement or request proof of identity for an ordinary enquiry.
We use this information to answer and follow up your request. The legal basis is our legitimate interest in handling correspondence initiated by you: Article 6(1)(f) GDPR. Providing the information is voluntary, but without an email address and the details of your question we cannot reply meaningfully. Sending an enquiry does not subscribe you to marketing.
Form security and spam prevention
The contact form uses Cloudflare Turnstile in Managed mode, a local honeypot and a submission limit to prevent automated abuse and protect the website and mailbox. Our legal basis is the legitimate interest in securing these services: Article 6(1)(f) GDPR.
Turnstile evaluates technical connection and browser signals, including the IP address and browser characteristics. Cloudflare states that Turnstile does not access, store or transmit the contents of form fields. Cloudflare processes security signals on our behalf and also acts as a controller when using signals to improve its bot detection. See the Turnstile Privacy Addendum for its processing purposes and retention information.
The local checks run on this website’s hosting. The honeypot checks an extra field that visitors should leave empty. The submission limit normally allows five attempts per internet connection within ten minutes; people sharing a connection share that limit. Only a salted identifier derived from the connection IP, an attempt count and an expiry time are kept locally for this purpose. Message content, email addresses and raw IP addresses are not stored by this local protection, and its identifiers are not used for analytics or advertising.
Automated checks can occasionally reject a genuine enquiry. If verification fails or the limit is reached, wait and try again, or contact info@itprosupport.eu directly. You can contact us without using the protected form.
How long is information kept?
- Routine enquiries: while the matter is being handled and for up to six months after the final substantive exchange. A continuing matter or a specific legal claim may require longer retention, limited to that purpose.
- Invited account activity: WordPress login and page-view records are retained for 30 days for account security and coordinating website reviews. These records concern signed-in accounts, rather than anonymous visitor profiling.
- Technical server logs: limited connection and request information is handled for operation and security, under the hosting service’s log-rotation rules. A specific incident may require relevant records to be kept until it is resolved.
- Recovery copies: access is restricted and copies are used for recovery, not routine correspondence or marketing. They are retained for the recovery cycle and replaced or removed when no longer needed. If data is restored, applicable deletion requests must be reapplied.
- Local anti-spam counters: salted connection identifiers, attempt counts and expiry times are used for a ten-minute submission-limit window. Expired counters are removed during subsequent form requests and scheduled WordPress maintenance; scheduled cleanup depends on the site receiving traffic. These records do not contain message content or raw IP addresses.
The hosting provider’s processing terms allow the last backup to be removed within six months after the hosting service ends. This does not extend routine retention of enquiries in the live mailbox.
Who receives information?
Access is limited to the controller and service providers needed to operate the site, email and security. Website hosting and SMTP email are provided by SEOHOST Sp. z o.o. Form messages are delivered to the contact mailbox; the form is not configured to keep a separate archive of message content in WordPress.
Cloudflare, Inc. provides Turnstile verification for the contact form. The www address also uses Cloudflare’s network. This can involve technical connection data being processed outside the European Economic Area. Cloudflare publishes its transfer safeguards, including Standard Contractual Clauses, in its Data Processing Addendum. Contact the controller for information about applicable safeguards or to request a copy. Personal data is not sold.
SEOHOST identifies Monarx Inc. as a security subprocessor. Technical metadata and, where deeper malware analysis is needed, selected files may be sent to Monarx. These may contain personal data. SEOHOST states that some processing can take place outside the EEA, including the United States, with Standard Contractual Clauses used for relevant transfers. See the hosting provider’s security and privacy explanation.
Your rights
You can ask for access to your data, correction, erasure or restriction of processing. You can object to processing based on legitimate interests. Data portability applies where the GDPR conditions are met. If processing relies on consent, you can withdraw it at any time without affecting earlier lawful processing. These rights depend on the circumstances and applicable legal exceptions.
Write to info@itprosupport.eu. We will respond without undue delay, normally within one month, and may ask for proportionate information needed to identify the request. You can also complain to the President of the Personal Data Protection Office (UODO) in Poland or another competent supervisory authority. We do not make automated decisions producing legal or similarly significant effects about visitors.
Cookies and your choices
Essential cookies support core functions, account security and remembering your cookie choices. Non-essential storage requires a choice before it is activated. This version of the public website does not enable analytics or advertising tracking. Optional categories are off by default.
- CookieAdmin preference: remembers the choices you save for up to 180 days; you can change them earlier.
- Language choice: when you visit the main website address, the Polish version is selected if your browser prefers Polish or your IP address is assigned to Poland. Otherwise, the English version opens. The country is determined locally on the server using the DB-IP database; your IP address is not sent to an external API or stored by the language selection feature for this purpose. Geolocation can be inaccurate, for example when you use a VPN. Your manual PL or EN choice is stored in our first-party itp_language_choice cookie for 180 days and takes priority when you return to the main address. The session cookie pll_language supports the current website language. Explicit /pl/ and /en/ addresses open the specified version. These cookies are not used for advertising or analytics. You can change the language with the PL / EN switcher or delete cookies in your browser.
- WordPress account cookies: support sign-in and account security for invited users. Their lifetime depends on the session and sign-in settings.
Open Cookie preferences in the footer to review or change your choice. Rejecting optional cookies keeps essential functions available. Browser settings can remove stored cookies; removing sign-in cookies can sign you out. Consent to optional cookies is separate from sending an enquiry and is not a condition for contacting us.
The contact form uses Cloudflare Turnstile for security. Turnstile pre-clearance is disabled. Local honeypot and submission-limit checks do not set cookies. See the form-security section above for the technical data involved. The site is not configured with Google Analytics, advertising pixels or newsletter sign-up.
Changes and contact
Last updated: 30 October 2026. We will update this notice when the website’s actual data handling changes. Questions or privacy requests: info@itprosupport.eu.