Privacy Policy

1. Data Controller
TLC GROUP Sp. z o.o. (limited liability company, KRS 0001030535) ("Company", "we", "us") acts as the Data Controller of your personal data. Registered office: ul. Stefana Batorego 39/9, 02-591 Warsaw, Poland. Contact email: info@tlc-connect.com

2. Types of Personal Data We Collect

• - Identification details (name, surname, company name, registration number)
• - Contact details (address, phone number, email)
• - Payment information (bank account number, invoicing details)
• - Online identifiers (IP address, technical session cookie)
• - Communication records related to our services

3. Purpose of Processing
Your personal data is processed for the following purposes:

• - To conclude and perform contracts with clients and partners
• - To issue invoices and fulfill legal accounting obligations
• - To provide customer support and communication
• - To improve our services and website functionality
• - For marketing purposes (only with your consent)

4. Legal Basis for Processing
We process your personal data on the following legal grounds:

• - Performance of a contract (Article 6(1)(b) GDPR)
• - Compliance with legal obligations (Article 6(1)(c) GDPR)
• - Legitimate interests pursued by the Company (Article 6(1)(f) GDPR)
• - Consent (Article 6(1)(a) GDPR), where required

5. Data Retention
We retain your personal data only as long as necessary to fulfill the purposes described above, unless a longer retention period is required by law. For example:

• - Accounting and invoicing data: up to 5 years (in line with Polish law)
• - Contractual data: for the duration of the contract and limitation period for claims
• - Marketing data: until you withdraw consent

6. Data Sharing and Transfers
We may share your personal data with:

• - Service providers (e.g., IT support, payment processors, accountants)
• - Public authorities, where required by law
• - Business partners, where necessary for contract performance

We do not transfer your data outside the European Economic Area (EEA) unless adequate safeguards are in place (e.g., Standard Contractual Clauses).

7. Your Rights under GDPR
You have the following rights regarding your personal data:

• - Right to access and obtain a copy of your data
• - Right to rectify incorrect or incomplete data
• - Right to erase data ("right to be forgotten")
• - Right to restrict processing
• - Right to data portability
• - Right to object to processing based on legitimate interest or direct marketing
• - Right to withdraw consent at any time
• - Right to lodge a complaint with the supervisory authority: President of the Personal Data Protection Office (UODO), Poland

8. Cookies
Our website uses only one technical cookie (PHPSESSID), which is necessary for the website to function. It is deleted after 7 days or when you clear your browser data. We do not use analytics, advertising or tracking cookies, so no consent is required. If this changes, we will update this policy and ask for your consent before setting any non-essential cookies.

9. Data Security
We apply appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, misuse, or disclosure.

10. Updates to this Privacy Policy
We may update this Privacy Policy from time to time. The latest version will always be available on our website.

Last updated: 15 October 2026