Consent choice, language preference, technical WordPress functions and reCAPTCHA protecting contact forms against spam.
Privacy and personal data
Privacy Policy
Information about personal data processing, cookies and services used on iots.eu.
Last updated: 1 September 2026. This policy applies to iots.eu. The shop at shop.iots.eu and the future platform at its.iots.eu may have separate policies appropriate to their functions.
1. Data controller
IoT Solution sp. z o.o.39A Tomasza Zana Street
20-634 Lublin, Poland
20-634 Lublin, Poland
Registration detailsTax ID: 7123416813
REGON: 388504524
KRS: 0000891157
REGON: 388504524
KRS: 0000891157
Privacy contactinfo@iotsolution.pl
Office424A Aleje Jerozolimskie
05-800 Pruszków, Poland
05-800 Pruszków, Poland
2. Data we process
- information provided in forms, such as name, company, email address, telephone number and message content;
- information contained in email correspondence and subsequent handling of an enquiry;
- technical data such as IP address, request time, visited URL, browser and operating system, referring address and server response status;
- after analytics consent — online identifiers, device information, approximate location, visited pages and events related to use of the website.
We receive data directly from the user or automatically from their browser while they use the website.
3. Purposes and legal bases
- responding to enquiries and preparing an offer — steps taken at the user's request before entering into a contract and our legitimate interest in conducting communication (Article 6(1)(b) and (f) GDPR);
- handling correspondence and establishing, pursuing or defending claims — our legitimate interest (Article 6(1)(f) GDPR);
- website security and preventing spam and abuse — our legitimate interest (Article 6(1)(f) GDPR);
- displaying fonts correctly and maintaining a consistent website appearance — our legitimate interest in presenting the website in a clear and readable manner (Article 6(1)(f) GDPR);
- compliance with legal obligations — Article 6(1)(c) GDPR;
- Google Analytics 4 and optional external content — user consent (Article 6(1)(a) GDPR), which may be withdrawn at any time without affecting prior lawful processing.
Providing data through a form is voluntary, but fields marked as required are necessary to send a message and receive a response.
4. Recipients and external services
Data may be entrusted to providers of hosting, technical maintenance, email, form handling, security and analytics services, solely to the extent necessary to provide those services. It may also be disclosed to authorised authorities where required by law.
Google services
- Google Analytics 4 — loaded only after analytics consent; measurement ID: G-Y6GHH5LN6D. GA4 does not log or store individual IP addresses.
- Google Maps — blocked until functional-content consent is granted.
- Google reCAPTCHA — protects forms against spam and automated abuse and may process technical data required to assess request security.
- Google Fonts — selected pages may download fonts from Google servers, which involves transmitting technical data, including the IP address and browser information. The fonts should ultimately be hosted locally; this paragraph may be removed after that change.
The provider may be Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may also be processed outside the European Economic Area using legal mechanisms described by Google. See the Google Privacy Policy and information from sites using Google services.
5. Retention periods
- enquiry data — while the matter is handled and then until the relevant limitation periods for claims expire;
- data required by law — for the period specified by those laws;
- technical logs — for the period required for security, diagnostics and accountability, according to hosting-service configuration;
- GA4 user and event data — up to 14 months, provided this period is selected in Google Analytics settings;
- cookie preferences — 180 days, after which the website requests a new choice.
6. Cookies
The website uses necessary cookies for privacy preferences, language selection, security and forms. Analytics and functional cookies are optional.
| Name or group | Purpose | Category | Duration |
|---|---|---|---|
iots_cookie_consent_v2 | Stores consent preferences. | Necessary | 180 days |
pll_language or similar | Stores language selection. | Necessary | According to language configuration |
reCAPTCHA cookies, e.g. _GRECAPTCHA | Protects forms against spam and abuse. | Necessary / security | According to Google settings |
_ga, _ga_* | Distinguishes users and maintains GA4 session state. | Analytics | Up to approximately 13 months from creation |
| Google Maps | Displays an interactive map after consent. | Functional | According to Google settings |
Users may reject optional categories or change their decision later. Withdrawing consent removes GA4 cookies available to the website and stops further measurement in that browser.
7. User rights
Depending on the legal basis, users may request access, rectification, erasure, restriction, portability and may object to processing. Consent may be withdrawn at any time.
Requests may be sent to info@iotsolution.pl. Users also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office: uodo.gov.pl.
8. Security and automated decisions
The controller applies organisational and technical measures appropriate to the nature of the data and risks, including HTTPS encryption, access control, backups and form protection. The controller does not use the data to make decisions producing legal effects concerning users solely by automated means.
9. Policy changes
This policy may be updated when website functions, providers or legal requirements change. The current version and effective date are published on this page.