PRIVACY POLICY
1. Data Controller
The data controller is:
iCanSocial Marketing – Aleksandra Barańska
4b/18 Rysia
87-800 Włocławek
Poland
NIP: 8883179348
Email: info@icansocialmarketing.com
2. Scope of Data Collected
We may collect and process the following personal data:
• Name
• Business name
• Email address
• Phone number
• Billing details
• Information submitted via contact forms
• Communication history
When providing services, we may also receive access credentials or administrative access to client-managed platforms (e.g. social media accounts).
We do not intentionally collect or process special category (sensitive) personal data.
3. Purpose of Processing
Personal data is processed for the following purposes:
• Responding to enquiries
• Providing agreed services
• Managing business relationships
• Issuing invoices and fulfilling accounting obligations
• Ensuring proper delivery of digital services
Legal basis for processing:
• Article 6(1)(b) GDPR – performance of a contract
• Article 6(1)(f) GDPR – legitimate interest (business communication and service delivery)
• Article 6(1)(c) GDPR – legal obligation (accounting and tax requirements)
4. Platform Access & Client Accounts
When providing services, we may be granted access to client-managed accounts (e.g. Instagram, Facebook, TikTok, website platforms).
Access is used solely for the purpose of delivering agreed services.
The Company does not independently collect personal data from such platforms and processes information only on behalf of the Client within the scope of services.
The Client remains responsible for compliance with applicable data protection laws regarding data contained within their own platforms.
5. Data Retention
Personal data is retained:
• For the duration of the business relationship
• As required by accounting and tax regulations
• Until potential legal claims expire
6. Data Sharing
Personal data may be shared with:
• Accounting service providers
• IT and hosting providers
• Payment processors
• Subcontractors bound by confidentiality
Data is never sold to third parties.
7. International Transfers
Some service providers (e.g. hosting, platform providers) may process data outside the European Economic Area.
Where applicable, appropriate safeguards under GDPR are implemented.
8. Data Subject Rights
Individuals have the right to:
• Access their personal data
• Request correction
• Request deletion
• Restrict processing
• Object to processing
• Lodge a complaint with the Polish Data Protection Authority (UODO)
9. Contact
For any data protection enquiries:
.png)
.png)