This Privacy Policy explains how MonMyIP ("we", "Controller") processes the personal data of users of the monmyip.io website in accordance with Regulation (EU) 2016/679 (GDPR).
1. Data Controller
The controller of personal data is MonMyIP, a business registered in CEIDG (Poland).
- NIP (Tax ID): 9592064173
- REGON: 525970500
- Website: monmyip.io
- Data contact: [email protected]
2. What data we process
We only process data you provide voluntarily or that is collected automatically:
- Contact form: name, email address, message content.
- Free audit form: name, email, phone (optional), company name, Tax/VAT number, company address, the website URL to be audited, services of interest.
- Technical data: IP address, browser type, operating system, pages visited, cookie data (see Cookie Policy).
3. Purposes and legal bases
- Responding to your enquiry and handling contact — Art. 6(1)(b) and (f) GDPR (performance of a contract / legitimate interest).
- Delivering the requested security audit and performing basic reconnaissance of the indicated domain — Art. 6(1)(b) GDPR and your consent (Art. 6(1)(a)). See Audit & Reconnaissance Terms.
- Analytics and improving the site (Google Analytics 4) — Art. 6(1)(a) GDPR (consent given in the cookie banner).
- Establishing or defending legal claims and accounting/tax obligations — Art. 6(1)(c) and (f) GDPR.
4. Data retention
Form data is kept for as long as needed to handle your enquiry and then for the limitation period of potential claims (usually up to 3 years). Billing data — for the period required by tax law (up to 5 years). Analytics data — up to 14 months. You may withdraw consent at any time.
5. Data recipients
- Hosting and server infrastructure provider.
- Google Ireland Ltd. — Google Analytics 4 / Google Tag Manager (only after consent).
- Email notification service provider.
6. Transfers outside the EEA
When using Google services, data may be transferred to third countries (e.g. the USA) based on Standard Contractual Clauses (SCC) and the Data Privacy Framework, ensuring an adequate level of protection.
7. Your rights
You have the right to: access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability, objection, and to withdraw consent at any time (without affecting the lawfulness of processing before withdrawal). To exercise these rights, email [email protected].
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.
8. Voluntary nature of providing data
Providing data is voluntary but necessary to handle your contact or deliver the audit. Without it, we cannot perform these actions.
9. Profiling and automated decisions
We do not make decisions about you based solely on automated processing that would produce legal effects.
10. Security
We apply technical and organizational measures (TLS encryption, access control, data minimization) to protect your data against unauthorized access, loss or alteration.
11. Changes to this Policy
We may update this Policy. The current version is always available on this page with the date of the last update.