Privacy policy

Last updated: 17 July 2026

1. Data controller

The controller of your personal data is FireNet Waldemar Chodasiewicz, with its registered office at ul. Olecka 23 lok. 215, 04-980 Warszawa, Tax ID (NIP) 8821244339. Contact for data-protection matters: biuro@firenet.com.pl.

2. What data we process and for what purpose

• Contact-form data (full name, e-mail, phone, message content) — in order to reply and handle your enquiry. Together with the message we also record technical metadata (IP address, information about the browser and system, and a basic device profile — including screen resolution, time zone, language, number of cores), an approximate location (country/city) and the internet service provider (operator), determined from the IP address using local databases — without passing the IP to third parties. Purpose: ensuring security, preventing abuse and any pursuit of claims (legitimate interest, Article 6(1)(f) GDPR). We do not collect precise location (GPS) — we do not request such permission.
• Client and customer data — in order to conclude and perform a contract (preparing an opinion or expert report, or providing digital forensics services).
• Client-panel account data — in order to make licences and downloads available and to manage the account.
• Technical data (server logs, cookies) — in order to ensure the security and correct operation of the site.

3. Legal basis

We process data on the basis of: consent (Article 6(1)(a) GDPR), performance of a contract (Article 6(1)(b)), a legal obligation (Article 6(1)(c)) and the controller's legitimate interest (Article 6(1)(f)), e.g. ensuring the security of the site.

4. Retention period

We store data for as long as necessary to achieve the purpose: handling the enquiry, the duration of the contract, and after it ends — for the period required by law (including tax law) and until the limitation periods for claims expire.

Contact-form messages (together with metadata) are deleted automatically after 5 years from receipt, and if their number exceeds 5,000 sooner — the oldest above that limit are deleted.

5. Data recipients

Data may be entrusted to entities supporting the operation of the site, under data-processing agreements and in confidence:

• the hosting provider (servers in the European Economic Area),
• the e-mail provider — handling messages from the form and correspondence,
• the online-shop system — when purchasing software/licences, including single sign-on (SSO) that passes basic account data.

As a rule, we do not transfer data outside the European Economic Area. The exception is the Google Map preview on the contact page, which loads only after you click and may then pass your IP address to Google LLC (USA). Without a click, the map does not connect. Given the nature of our services, we maintain particular confidentiality and professional secrecy.

6. Data processed as part of expert engagements (evidentiary material)

When carrying out engagements for courts, prosecutors, law-enforcement agencies and private clients, we process the data contained on the examined media and devices (disks, phones, copies of cloud data). These may include special-category data and data relating to criminal convictions and offences, as well as third-party data.

• Two legal regimes. When we act on the instruction of a court or prosecutor in criminal proceedings, the processing of data from the evidentiary material is based on the authority's decision and on the provisions on criminal procedure and the relevant data-protection provisions in this area (the so-called DODO Act, implementing Directive 2016/680) — the controller remains the authority conducting the proceedings, and we process the data on its instruction. In private engagements we are the controller, and the basis is the performance of a contract and legitimate interest; the processing of special-category data (Article 9 GDPR) and criminal-conviction data (Article 10 GDPR) takes place only to the extent permitted by law.
• Purpose and minimisation. We process the data only for the purpose and to the extent necessary to prepare an opinion or expert report in a specific case.
• Security. We secure evidentiary material while maintaining professional secrecy, on separate, secured infrastructure in the European Economic Area, with access control and a full chain of custody.
• Retention. We keep the media and working copies for the duration of the engagement and the proceedings, and then return them to the authority or client or permanently delete them — in accordance with the decision of the procedural authority or the contract.

For individuals whose data is present in the examined material, the exercise of certain rights (e.g. access or erasure) may be subject to limitations arising from the provisions on criminal procedure and data protection.

7. Your rights

You have the right to: access your data, rectify it, erase it, restrict its processing, data portability, object, and withdraw consent at any time. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO).

8. Cookies

The site uses only cookies essential for its operation:

• a session cookie and a form-protection cookie (CSRF),
• a logged-in user session cookie in the client panel,
• a small browser-storage entry remembering that you accepted the cookie notice.

We do not use cookies for advertising tracking or profiling. We do not use third-party analytics tools. You can manage cookies in your browser settings — blocking them may limit some features (e.g. logging in).

9. Contact

For matters concerning personal data, write to biuro@firenet.com.pl or use the contact form.