Last updated: 5 February 2026
This Privacy Policy explains how we process personal data of users of iml-digital.com and customers purchasing iML services and digital products, in accordance with the GDPR.
1. Data Controller
The controller of your personal data is:
iML Marcin Litkie
ul. Sójka 6, 96-325 Radziejowice, Poland
Email: contact@iml-digital.com
(“Controller”, “we”, “us”).
2. What data we process
Depending on how you use our website and services, we may process:
Project materials (Services): files and content you provide for project delivery (e.g., text, graphics), only to the extent necessary.
Identification & contact data: name, email address, phone number, company name (if provided), billing details (if required).
Transaction data: order details, payment status, purchase history (we do not store full card details).
Communication data: the content of emails, messages, and inquiries.
Technical data: IP address, device identifiers, browser and operating system data, server logs.
3. Purposes and legal bases (GDPR)
We process personal data for the following purposes:
Ensuring security and proper operation of the website (logs/diagnostics)
Legal basis: Art. 6(1)(f) GDPR (legitimate interest).
Responding to inquiries and communication (contact form/email)
Legal basis: Art. 6(1)(f) GDPR (legitimate interest – communication).
Entering into and performing a contract (Services / Digital Products)
Legal basis: Art. 6(1)(b) GDPR (contract).
Accounting and legal obligations
Legal basis: Art. 6(1)(c) GDPR (legal obligation).
Establishing, exercising, or defending legal claims
Legal basis: Art. 6(1)(f) GDPR (legitimate interest).
4. Recipients of data
We may share your data only to the extent necessary with trusted service providers, including:
- zenbox.pl – hosting and server infrastructure provider (website operation, email services, technical logs),
- payment providers enabling payments via:
- PayPal, and
- providers/intermediaries enabling Apple Pay and Google Pay (depending on the payment setup on the website/store),
- technical service providers necessary for the website to function (including cookie-related components, if implemented).
We do not sell your personal data.
5. International data transfers (outside the EEA)
Some payment providers (in particular PayPal) may process data outside the European Economic Area (e.g., in the United States). Where applicable, such transfers are carried out using GDPR-compliant safeguards (e.g., Standard Contractual Clauses or other valid mechanisms, depending on the provider).
6. Data retention
We retain personal data:
technical logs – for as long as necessary to ensure security and diagnostics of the website.
contract and billing data – for the duration of the contract and as long as required by applicable accounting/tax laws,
communications – for the duration of the correspondence and thereafter as necessary to protect or defend legal claims,
technical logs – for as long as necessary to ensure security and diagnostics of the website.
7. Your rights
You have the right to:
- access your data,
- rectification,
- erasure (where legally permitted),
- restriction of processing,
- data portability,
- object to processing based on legitimate interest (Art. 6(1)(f) GDPR),
- withdraw consent at any time (where processing is based on consent, if applicable).
To exercise your rights, contact us at: contact@iml-digital.com.
You also have the right to lodge a complaint with your local supervisory authority. In Poland, this is:
President of the Personal Data Protection Office (PUODO).
8. Cookies
iml-digital.com uses cookies and similar technologies to:
- ensure the website works properly,
- maintain security and stability,
- remember user preferences (where applicable).
You can control cookies through your browser settings (block, delete, or limit cookies). Disabling cookies may affect certain website functions.
9. Payments
Payments are handled by external providers (including PayPal and payments via Apple Pay / Google Pay, depending on the selected method). We do not store full payment card details. Payment providers process data in accordance with their own terms and privacy policies.
10. Social media
If you contact us via social media (e.g., LinkedIn/Instagram/Facebook), we process data to the extent necessary to communicate with you. Social media platforms may act as independent controllers – please refer to their privacy policies for details.
11. Data security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or destruction (including access controls and account/security practices).
12. Children’s data
Our website is not directed at children, and we do not knowingly collect children’s personal data. If you believe a child’s data has been provided to us, please contact us.
13. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The current version will always be published on our website along with the effective date.