Privacy Policy
Information on the processing of personal data at EZSoft
Note: This is an English translation provided for convenience. The Polish version is the legally binding document.
Last updated: February 22, 2026
§ 1. Data Controller
The controller of your personal data is: YourWonderland Paweł Kaczmarski, ul. Sikorek 2s, 41-940 Piekary Śląskie, Poland, Tax ID (NIP): 8641843392, REGON: 161574058, registered in CEIDG (Central Register and Information on Economic Activity).
Contact for data protection matters: info@ezsoft.pl.
§ 2. Purposes and Legal Bases for Processing
Your personal data is processed for the following purposes and on the following legal bases:
| Purpose | Data Scope | Legal Basis (GDPR) |
|---|---|---|
| Order fulfillment and Digital Content delivery | Name, email, billing address | Art. 6(1)(b) — contract performance |
| Issuing sales documents (invoice/receipt) | Identification and address data | Art. 6(1)(c) — legal obligation |
| Handling complaints and withdrawal rights | Order data, correspondence | Art. 6(1)(c) — legal obligation |
| User account management | Email, username, order history | Art. 6(1)(b) — contract performance |
| License management (activation/verification) | License key, domain, IP address | Art. 6(1)(b) — contract performance |
| Website analytics (PulseStats) | Hashed IP, URL, user agent | Art. 6(1)(f) — legitimate interest |
| Email correspondence | Email, message content | Art. 6(1)(f) — legitimate interest |
Providing your personal data (name, email, billing address) is a requirement for concluding and performing the sales contract. Failure to provide this data will prevent us from processing your order. Data collected for analytics (PulseStats) and correspondence purposes is processed on the basis of the Controller’s legitimate interest and is not a condition of the contract.
§ 3. Analytics — PulseStats
1. For website traffic analysis, we use our own plugin PulseStats Analytics, which runs exclusively on our server (self-hosted).
2. PulseStats does not use cookies or any browser-side tracking mechanisms.
3. Visitor IP addresses are hashed (one-way encrypted) before storage — we do not store full IP addresses.
4. Data collected: hashed IP, visited page (URL), browser type (user agent), referring page (referer), visit timestamp.
5. This data is not shared with any third parties and is not combined with personally identifiable information.
§ 4. Cookies
1. The ezsoft.pl website uses only functional (technical) cookies essential for the proper operation of the store:
- WordPress session — maintaining login state.
- WooCommerce cart — remembering cart contents.
- WooCommerce session — supporting the checkout process.
2. We do not use marketing, advertising, or analytics cookies.
3. Functional cookies do not require user consent as they are strictly necessary for providing the service.
§ 5. Sharing Data with Third Parties
Your personal data may be shared only with the following categories of entities:
- Payment processor — to the extent necessary for processing payment transactions.
- Hosting provider — for data storage on servers.
- Government authorities — based on applicable legal provisions (e.g., tax office).
We never sell, rent, or share your data for marketing purposes with third parties.
§ 6. Transfer of Data Outside the European Economic Area
1. Your personal data is stored and processed on servers located within the European Economic Area (EEA).
2. As a rule, we do not transfer data outside the EEA. If such a transfer were necessary (e.g., in connection with payment processing), it would only take place on the basis of appropriate safeguards provided for in the GDPR (e.g., standard contractual clauses, adequacy decision).
§ 7. Data Retention Periods
| Data Category | Retention Period |
|---|---|
| Order and invoice data | 5 years from the end of the tax year (tax obligation) |
| User account data | Until the account is deleted by the user |
| License data | Duration of the license + 1 year |
| Correspondence (support) | 3 years from last contact |
| Analytics data (PulseStats) | Detailed data: 90 days; aggregated data: 2 years |
§ 8. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of access — you may obtain information about whether and what data we process about you (Art. 15 GDPR).
- Right to rectification — you may request correction of inaccurate data (Art. 16 GDPR).
- Right to erasure (“right to be forgotten”) — you may request deletion of your data if there is no basis for further processing (Art. 17 GDPR).
- Right to restriction of processing — you may request restriction of processing in certain cases (Art. 18 GDPR).
- Right to data portability — you may receive your data in a structured format (Art. 20 GDPR).
- Right to object — you may object to processing based on legitimate interest (Art. 21 GDPR).
- Right to notification — you may request information about each recipient to whom your data has been disclosed, and about the notification of recipients regarding rectification, erasure, or restriction of processing (Art. 19 GDPR).
Automated decision-making: We do not carry out automated decision-making, including profiling, as referred to in Article 22(1) and (4) of the GDPR.
To exercise any of the above rights, send a message to: info@ezsoft.pl. We will respond within 30 days.
§ 9. Right to Lodge a Complaint
If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the supervisory authority:
President of the Personal Data Protection Office (PUODO)
ul. Stawki 2, 00-193 Warsaw, Poland
Website: https://uodo.gov.pl
§ 10. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- SSL/TLS encryption — all communication with the website is encrypted.
- License key encryption — keys are stored using the AES-256-CBC algorithm.
- IP address hashing — in the PulseStats analytics module.
- Access restriction — data is accessible only to authorized persons.
- Regular backups — ensuring data continuity and integrity.
§ 11. Changes to the Privacy Policy
1. The Controller reserves the right to amend this Privacy Policy.
2. Significant changes will be communicated via a notice on the website.
3. The date of the last update is always stated at the beginning of this document.
§ 12. Contact
If you have any questions about this Privacy Policy or the processing of your personal data, please contact us:
YourWonderland Paweł Kaczmarski
ul. Sikorek 2s, 41-940 Piekary Śląskie, Poland
Email: info@ezsoft.pl
