Privacy policy

Inbright Łukasz Andrzejewski
ul. Wiedeńska 125, 60-683 Poznań
NIP: 781-169-56-08  ·  REGON: 301253426
E-mail: kontakt@klasawchmurze.pl
Telephone: +48 661-941-034

2.1. Basic data

• Contact data: first name, surname, e-mail, telephone
• Company data: company name, NIP, address
• Access data: login, password

2.2. Data related to the use of virtual machines (VMs)

In both variants of the service, we process:

• System login
• E-mail address (for sending access credentials)
• IP address of the connection
• Date and time of acceptance of the Terms of Service
• SSH/RDP connection logs (date, time, user)
• Basic system activity on the virtual machines

In addition, in the Sandbox VM variant, because of the full administrator privileges granted to the Customer, we may process:

• System activity related to operations performed with root/sudo privileges, to the extent necessary to protect the integrity of the infrastructure
• Information about the installed software (list of packages), in order to ensure the security of the environment

We process data for the following purposes:

3.1. Performance of a contract (Article 6(1)(b) of Regulation (EU) 2016/679 (GDPR))

• Provision of services consisting of making virtual environments available, both training environments and development environments (Sandbox VM)
• Granting access to the virtual machines and providing access credentials
• Providing training materials (in the Training Environment variant)

3.2. Legal obligation (Article 6(1)(c) GDPR)

• Issuing invoices
• Keeping accounts
• Archiving documents in accordance with the law

3.3. Legitimate interest (Article 6(1)(f) GDPR)

• Ensuring the security of the IT infrastructure
• Monitoring and logging connections in order to detect abuse
• In the Sandbox VM variant, monitoring system activity performed with root privileges to the extent necessary to protect the integrity of the Service Provider's infrastructure
• Protection against legal claims
• Demonstrating compliance with the rules by users
• Analytics and statistics on the use of the platform

Data may be disclosed to the following categories of recipients:

• Providers of IT and hosting services (cloud infrastructure)
• An accounting firm
• Payment service providers
• Entities providing proxy and connection monitoring services
• Law enforcement authorities (in the event of a breach of the law or of the terms of service)

• Contract data and invoices: 5 years from the end of the financial year (legal obligation)
• System and connection logs: 90 days from the end of the Rental Period
• Contact data: until the purpose has been achieved or consent has been withdrawn
• Data concerning acceptance of the terms of service: for the duration of the contract and 90 days after its end

Under the GDPR, you have the following rights:

• Access to data: you can obtain information about which personal data we process
• Rectification of data: you can have inaccurate data corrected or incomplete data completed
• Erasure of data (the right to be forgotten): subject to exceptions arising from the law
• Restriction of processing: in certain situations, you can request that processing be suspended
• Data portability: you can receive your data in a structured format
• Objection: to processing based on legitimate interest
• Lodging a complaint: with the President of the Personal Data Protection Office (UODO)

Contact regarding personal data: kontakt@klasawchmurze.pl, tel. +48 661-941-034

We apply appropriate technical and organisational measures to protect personal data:

• SSL/TLS encryption of connections
• Regular backups
• Access to data restricted to authorised persons only
• Monitoring and logging of connections to the virtual machines
• Regular security updates

By using the services, you undertake to:

• Keep your access credentials (login, password) confidential
• Notify us without undue delay of any suspected unauthorised access
• Comply with the Terms of Service for the use of virtual machines

You bear full responsibility for all actions performed using the access credentials assigned to you.

In the Sandbox VM variant, you are additionally responsible for software that you install yourself on the virtual machine made available, including its security, its lawfulness and the consequences of its operation. The Service Provider is not responsible for data processed by software installed by the user.

To ensure security and compliance with the terms of service, we record:

• All SSH/RDP connections (date, time, user, IP address)
• Acceptance of the terms of service by each user
• Basic system activity on the virtual machines

Monitoring serves to detect and prevent activities that breach the terms of service or the law, and to protect against legal claims.

In the Sandbox VM variant, in which the Customer has full administrator privileges, the scope of the system activity recorded may be broader than in the Training Environment. In particular, it covers operations performed with root/sudo privileges, to the extent necessary to protect the Service Provider's infrastructure against activities that breach the Terms of Service or the law.

The website uses cookies for the following purposes:

• Necessary cookies: ensure the basic functioning of the website (user sessions)
• Analytics cookies: help us understand how visitors use the website

You can manage cookie settings in your browser. Blocking cookies may limit the functionality of the website.

We reserve the right to make changes to this privacy policy. We will inform users of material changes via the website or by e-mail.