Privacy Policy

Convenience translation. This is an English rendering of the Polish privacy policy, provided for your convenience. The legally binding version is the Polish one, available at securplan.pl/polityka-prywatnosci. In the event of any discrepancy, the Polish text prevails.

How personal data is processed on the Securplan website and in connection with the distribution of the Securplan SitePanel WordPress plugin.

Effective from: the day the public version of securplan.pl with the SitePanel Trial is finally launched.

1. Data controller

The controller of personal data is Artur Jagiełło QuickArtCraft-CCTV, a sole trader registered in CEIDG (the Polish Central Register and Information on Economic Activity), ul. Skłodowskiej-Curie 4, 42-580 Wojkowice, Poland, NIP (tax ID): 6252109521, REGON (statistical ID): 243333561.

Contact for general matters, privacy, the GDPR and complaints: kontakt@monitoring-instalacje.pl.

2. Scope

This policy covers data processed in connection with the use of the securplan.pl website, e-mail contact, downloading and using the free SitePanel Trial, update handling, technical reports, use of the free SEO Mini Audit, website security and — once sales are launched — orders, payments, licences, invoices and complaints.

3. What data may be processed

  • first name and surname, company name, tax ID and invoicing details — where needed to fulfil a future order,
  • e-mail address and any data provided in correspondence or in a report,
  • domain, licence key, locally generated installation identifier, SitePanel version and activation status or date of last verification — where technically necessary,
  • IP address, date and time of the request, technical identifiers and security logs,
  • information about the WordPress version, PHP version, plugin version and technical environment provided when contacting support.

4. Purposes and legal bases

Providing the service and steps taken before a contract is concluded

Data necessary to deliver the Trial, handle updates and support and — once sales are launched — to purchase and activate a licence, is processed in order to perform a contract or to take steps at the user’s request before a contract is concluded.

Legal obligations and accounting

Once sales are launched, data on invoices and in sales records will be processed in order to meet tax and accounting obligations, including through KSeF (the Polish National e-Invoicing System) where required.

Complaints and claims

Data may be processed in order to handle complaints, to pursue claims and to defend against claims.

Security and legitimate interest

Technical data and logs may be used to protect the website, the update system and the licence system, and to detect abuse and attempts at unauthorised access.

Marketing

The website currently runs no newsletter and no marketing profiling. If such activities are introduced, they will rest on an appropriate legal basis, including consent where consent is required.

5. Data recipients

Data may be disclosed to parties necessary for the website to operate: the production hosting provider, the e-mail provider, our own update and licence server infrastructure, Cloudflare as the DNS, protection and security layer, parties providing accounting or technical services, law firms and advisers, and public authorities where this is required by law.

Once payments are launched, the data required to process a payment will be passed to the payment operator Przelewy24. Przelewy24 takes no part in the current free Trial launch.

6. Transfers outside the EEA

If an infrastructure provider processes data outside the European Economic Area, the transfer takes place using the mechanisms provided for by the GDPR, such as an adequacy decision or standard contractual clauses. The scope of transfers is reviewed together with the configuration of the services in use.

7. Retention periods

  • accounting data — for the period required by tax and accounting regulations,
  • data relating to the contract and to complaints — for the duration of the contract and the limitation period for claims,
  • correspondence — for as long as needed to handle the matter and any claims,
  • licence logs — as a rule for 12 months after the licence expires or the account is deleted, unless a legal or accounting obligation, or the need to defend against claims, justifies a longer period,
  • technical and security logs — for the period necessary to protect the infrastructure and investigate incidents.

8. Rights of the data subject

Within the limits set by the GDPR, you may request access to your data, its rectification, erasure, restriction of processing and portability, and you may also object to processing or withdraw your consent. Withdrawing consent does not affect the lawfulness of processing carried out beforehand. You may also lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), the Polish supervisory authority.

9. Providing data is voluntary

Providing data is voluntary; however, without the data required for a reply, support, activation, a future order, payment, invoice or complaint, the relevant action may not be possible.

10. Automated decision-making

Data is not used to take decisions concerning the user that produce legal effects and are based solely on automated processing.

11. SitePanel technical data

The Trial package currently published does not start the paid licence system. Future communication with the licence or update server will be limited to the domain, the licence key, a locally generated installation identifier, the SitePanel version and the activation status or date of last verification, where these are technically needed.

No module content, photographs, data about the user’s own clients, WordPress user data, plugin lists or other private website data are intended to be sent to the licence or update server.

12. SitePanel data and uninstallation

SitePanel content data is stored in the user’s own WordPress installation. Deactivation does not delete data. An ordinary uninstall is designed to leave data in place; the planned option “Delete all SitePanel data on uninstall” will be switched off by default. You may request erasure of data processed by the controller to the extent provided for by law.

13. Free SEO Mini Audit

A free SEO Mini Audit is made available on securplan.pl. The check is carried out by the SEO Center tool running on the seo.securplan.pl domain. Only publicly available content of the submitted website is analysed — the home page and up to four additional addresses read from the sitemap. The tool does not log in to the website, does not use administrative access and makes no changes to it.

In connection with a submitted check, the following is processed: the address of the submitted website, the result of the check (a score and a list of issues found), the date and time of submission, and a hash of the submitter’s IP address. The IP address is not stored in plain form — the hash serves solely to limit the number of submissions and to counter abuse.

If a person using the Mini Audit asks for a PDF report to be sent, the e-mail address provided and the date the report was sent are processed in addition. The e-mail address is used solely to send that one report. It is not used for a newsletter or any other marketing activity without separate, freely given consent.

The legal basis is the necessity of processing in order to provide the service requested by the data subject (Article 6(1)(b) GDPR) and, as regards limiting abuse and keeping the tool secure, the legitimate interest of the controller (Article 6(1)(f) GDPR).

Submission data is retained for as long as is necessary to handle the check and for security and anti-abuse purposes. The data subject may request erasure at any time by writing to the address given in point 1. Data recipients and the rights of the data subject are described in points 5 and 8.

The result of the Mini Audit is informational and is not a guarantee that any particular position in search results will be achieved.

14. Security

The controller applies technical and organisational measures appropriate to the nature of the data, in particular access restriction, updates, encryption of transmission, permission control and infrastructure protection.

15. Changes to this policy

This policy may be updated when the law, the scope of the website, the tools used or the manner of processing changes. The current version will be published on securplan.pl.

16. Contact

Questions about privacy, the GDPR and the exercise of rights should be sent to: kontakt@monitoring-instalacje.pl.

Data transmitted by the Jagelon Guard plugin

  1. Once connected with a key, the plugin transmits to the Seller’s server the website address, the WordPress version, the PHP version, the plugin version, the list of active licence modules and a timestamp. Depending on the features used, it also transmits the results of its own checks of the site, public company details entered in the plugin, addresses of published and changed pages with the times of search engine crawler visits, and the phrases the Client enters for tracking.
  2. As part of monitoring the website, the Seller fetches publicly available pages of the Client’s website and records their addresses together with technical elements: title, meta description, heading, canonical address and indexing rules.
  3. The plugin does not transmit the content of posts and pages, website user data, database content or other content of the admin area.
  4. Data is retained for the term of the licence. Removing a website from the panel permanently deletes the data associated with it.
  5. The weekly report is generated and sent by the Client’s own website, to the administrator address saved in its settings. The Seller does not act as an intermediary in that delivery.

Google Search Console data (SEO Center and Jagelon Guard)

  1. An SEO Center user (seo.securplan.pl) may choose to connect a Google account in order to see Google Search Console data for their websites. Connecting requires consent on Google’s screen and covers only the read-only scope webmasters.readonly. SEO Center cannot change anything in Search Console.
  2. A Jagelon Guard Client may connect a Google account from the plugin panel. The same rules and the same scope of access apply, and the data is retrieved by the SEO Center server.
  3. The following is retrieved: the list of Search Console properties available to the connected account and daily search statistics (clicks, impressions, CTR, average position) for the website, queries and pages. The data is refreshed automatically once a day. The Google access token is stored in encrypted form.
  4. The data is used solely to show it to the user in SEO Center alongside the technical audit results, in the panel and weekly report of the Jagelon Guard plugin, and to alert the user about ranking drops of keywords tracked in the same account. It is not sold, not used for advertising or to train artificial intelligence models, and not passed to any other party apart from the hosting provider named in point 5. Staff do not read this data unless the user consents, it is necessary for security purposes or it is required by law.
  5. SEO Center’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
  6. The data is retained until the Google account is disconnected or the SEO Center account is deleted. The “Odłącz Google i usuń dane” (Disconnect Google and delete data) button on the Integrations page revokes access at Google and permanently deletes the connection and all retrieved Search Console data. A Jagelon Guard Client can do this with a button in the plugin panel. If the same Google account serves several websites, it is disconnected in SEO Center or on request sent to the address given in point 1. Deletion of the SEO Center account can be requested at the address given in point 1. Access can also be revoked in the Google account settings: myaccount.google.com/permissions.

Contact form (inquiry terminal)

  1. A contact form is available on the securplan.pl home page. When it is sent, the following is processed: the e-mail address for the reply, the content of the message, the products or topics ticked in the form, the name or company name — if provided (optional field), and the date and time of sending together with the record of consent.
  2. The data is used solely to answer the inquiry and — where the inquiry concerns it — to present an offer or take steps prior to entering into a contract. It is not used for a newsletter or any other marketing activities.
  3. The legal basis for processing is the consent given in the form (Article 6(1)(a) GDPR) and, where the inquiry concerns entering into a contract, also steps taken at the request of the data subject (Article 6(1)(b) GDPR). Consent may be withdrawn at any time by writing to the address given in point 1; withdrawal does not affect the lawfulness of processing carried out before it.
  4. The message from the form is delivered by e-mail to kontakt@monitoring-instalacje.pl via the e-mail provider listed in point 5. The content of the inquiry is not stored in the website database.
  5. To limit spam and abuse (the Administrator’s legitimate interest, Article 6(1)(f) GDPR), a counter of submissions linked to a hash of the IP address is kept for 1 hour. The IP address is not stored in plain form for this purpose.
  6. Correspondence from the form is kept for as long as necessary to handle the matter and any claims, in accordance with point 7. Providing an e-mail address and message is voluntary but necessary to send the inquiry and receive a reply. The rights of the data subject are described in point 8.